Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa
File: gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa (raw, json)
Hash identifier: Vulwf36QNx7RGJe8bRF+33pZQ4PnBvk6alC/bHmOvgc=
Subject key identifier: 81:5C:6D:DF:37:1E:12:67:40:7C:1E:8A:D4:87:C3:47:6C:29:D5:39
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0CB7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa
Signing time: Tue 04 Feb 2025 15:55:03 +0000
ROA not before: Tue 04 Feb 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 4 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=815C6DDF371E1267407C1E8AD487C3476C29D539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:4b:70:84:4c:ac:53:ae:f6:11:da:77:f8:
8b:e8:77:41:a4:e5:64:c7:ed:e6:ab:00:a4:5c:ee:
52:1f:4b:bd:d6:a4:6b:c4:f7:40:55:6b:9e:89:55:
b8:13:2a:01:7e:a9:0f:12:12:60:e1:26:73:78:8b:
82:4b:90:78:ee:c4:3b:58:50:b7:18:e4:5d:29:82:
91:c4:20:81:0c:25:9a:6f:67:be:e7:0f:0d:43:c0:
4b:1a:67:e8:4a:0e:0f:eb:f7:9b:a9:bf:a3:7d:8c:
a7:d2:5a:77:d1:84:ed:84:d5:4a:10:ff:12:5e:3a:
48:9d:5f:a0:d9:f2:22:38:f4:62:f5:81:ea:c7:6f:
47:05:ff:d5:19:bb:15:20:3d:6f:90:a5:6f:63:ff:
b4:41:06:07:56:b3:92:f7:a2:b8:c3:6a:be:1d:57:
90:78:cc:db:87:81:16:0b:c6:f1:fd:52:11:b4:8e:
f8:fe:67:ed:20:2c:c7:11:2d:a3:cf:36:7e:10:2a:
ff:f9:96:55:78:60:42:ce:1c:88:82:c0:b1:56:2d:
15:de:fa:89:d9:f3:e1:70:7d:8e:cf:e8:dd:3b:81:
8f:cd:e4:94:b4:f5:fc:f1:77:f1:e5:be:6a:1e:e5:
38:db:4f:18:db:de:25:ce:ba:56:26:e1:ec:bf:bd:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:6D:DF:37:1E:12:67:40:7C:1E:8A:D4:87:C3:47:6C:29:D5:39
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e2:f1:4c:a6:11:63:f8:4b:76:d8:76:08:0e:cc:e6:ac:37:
ee:aa:bd:be:29:42:f2:9e:e1:77:36:32:ef:8d:16:0f:1b:b9:
fc:a0:d6:bf:8e:fd:eb:d3:51:ac:6f:74:d8:46:51:da:d3:7a:
2b:ca:99:13:8f:cb:57:49:8f:01:d6:0e:5f:88:38:62:09:b7:
ed:ce:80:b2:c7:71:34:43:09:2d:52:1e:08:60:41:5e:9e:63:
cd:d9:99:2d:bb:13:45:b0:a8:0d:5f:43:47:1a:f8:1c:3f:a0:
8e:31:96:45:67:5e:de:5a:c7:e5:1e:50:73:f6:13:17:a3:05:
34:41:f0:76:96:a1:3a:e8:f4:93:d3:bc:4e:b2:eb:48:9d:00:
b5:ce:bf:fe:53:93:e0:a9:c6:fd:bb:62:35:b7:67:a3:40:a7:
8d:b1:c6:2d:e5:a7:5c:2d:10:d7:4b:2a:5a:78:65:e7:cf:91:
1c:75:e3:41:e8:71:33:57:34:2e:74:ff:14:2a:69:15:af:00:
8c:59:5a:ab:ed:46:93:15:17:ae:62:a4:15:d3:5c:08:25:ae:
61:05:3e:27:a6:0b:ea:ad:c5:4e:3b:b9:0b:48:35:14:4d:90:
fe:c6:9f:bb:d7:05:66:0d:ed:f1:bb:8d:68:12:a5:3b:57:8e:
50:7c:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:50 2025 by rpki-client