Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/Uw8AystMXoSVYxl4YDX3LWDVRQU.roa
File: Uw8AystMXoSVYxl4YDX3LWDVRQU.roa (raw, json)
Hash identifier: kl4ALDSDxVMjmw6VvdXpJlvnocyw+1Zrhihnea/yv3E=
Subject key identifier: 53:0F:00:CA:CB:4C:5E:84:95:63:19:78:60:35:F7:2D:60:D5:45:05
Certificate issuer: /CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
Certificate serial: 09E3
Authority key identifier: DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/Uw8AystMXoSVYxl4YDX3LWDVRQU.roa
Signing time: Tue 17 Jun 2025 00:12:31 +0000
ROA not before: Tue 17 Jun 2025 00:12:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1880
IP address blocks: 2001:67c:2938::/48 maxlen: 48
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl
rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
Validity
Not Before: Jun 17 00:12:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=530F00CACB4C5E84956319786035F72D60D54505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:53:83:0a:a5:fe:e2:c0:7a:6f:cd:4c:3f:
02:86:5b:8c:7f:e7:9b:60:7a:16:d7:8a:ec:95:ea:
c6:a6:c5:c6:39:33:fd:01:19:0c:46:d0:ce:06:d9:
53:0a:70:3f:90:a4:64:82:aa:6f:d9:d9:3e:01:d3:
b7:d8:4f:33:6b:0b:6a:ef:0b:5f:64:89:7b:c5:80:
5a:70:f0:fd:67:88:4a:66:fb:5c:eb:9c:76:b6:a5:
a1:7e:75:c7:af:35:cd:67:47:45:b7:9b:70:f6:b0:
3a:83:e3:38:28:27:19:ee:c8:22:ee:10:ef:e9:31:
95:a5:ff:07:80:27:91:49:be:81:78:db:1c:45:0d:
b0:38:a1:b8:a8:4a:16:3c:bf:87:19:19:bf:0e:fb:
59:c1:68:4d:39:7b:a7:e7:be:a4:71:01:ea:f9:77:
82:2c:76:08:7b:ae:45:67:eb:45:25:56:da:44:5c:
dc:da:c4:70:3f:c0:17:21:0b:46:f2:b2:00:f1:4e:
e1:3a:7b:14:3f:17:25:f1:e8:c1:2e:86:e6:cc:7a:
bf:f4:a2:2f:85:3c:22:f2:eb:17:1c:77:77:21:4d:
69:41:bd:44:9d:95:e4:ce:ac:55:4f:f5:5a:78:3d:
03:67:dc:c9:51:99:8d:2c:50:9f:00:4d:78:09:41:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:00:CA:CB:4C:5E:84:95:63:19:78:60:35:F7:2D:60:D5:45:05
X509v3 Authority Key Identifier:
keyid:DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/Uw8AystMXoSVYxl4YDX3LWDVRQU.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
44:4a:d6:6e:1e:df:e7:26:1f:f6:c2:0f:de:bf:a7:1c:39:65:
e4:67:5d:6a:ff:5c:3e:30:b5:95:8f:97:8e:ef:41:5e:72:62:
fd:e8:a6:67:b2:f3:2a:8c:92:2b:da:fe:e5:9d:70:e1:e5:f4:
f3:5d:c2:69:3b:e4:95:e4:86:c8:6b:ab:2f:d8:9b:3a:b2:db:
a9:7d:28:66:09:62:b0:af:6d:53:97:86:42:5a:2e:55:53:9c:
7a:8f:be:9f:b5:78:59:b0:a5:0c:ec:bf:e1:59:b2:30:5c:1a:
ae:d2:5b:5d:8e:8b:ef:c2:da:79:f8:5e:56:cb:b3:e5:cb:e4:
28:2b:f8:57:ba:7a:28:8d:ea:c7:38:3c:d2:84:41:e1:af:35:
3b:e5:c4:1e:a9:03:28:9d:d4:7a:f9:9d:62:1e:35:f1:b0:a2:
1f:4c:a3:18:3e:52:03:c3:57:bb:10:f1:bf:37:69:d1:d4:3a:
85:9e:4c:6a:d3:f7:76:5f:17:39:13:0b:c4:f0:0a:79:65:22:
b5:55:be:a3:46:3b:66:a0:ca:9e:22:eb:40:92:55:71:99:a3:
fa:74:29:f6:39:18:57:1f:e3:e0:f2:73:fa:f9:ad:52:81:19:
9e:19:17:38:72:4d:38:25:bf:c4:5c:7c:61:37:cc:64:e4:27:
88:14:e7:4c
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGM5
ZWNiMGZiNzEwMjA0OTZlM2JjMjI0MGRkMjllNDIwOGMxZWEyODAeFw0yNTA2MTcw
MDEyMzFaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDUzMEYwMENBQ0I0QzVF
ODQ5NTYzMTk3ODYwMzVGNzJENjBENTQ1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNHVODCqX+4sB6b81MPwKGW4x/55tgehbXiuyV6samxcY5M/0B
GQxG0M4G2VMKcD+QpGSCqm/Z2T4B07fYTzNrC2rvC19kiXvFgFpw8P1niEpm+1zr
nHa2paF+dcevNc1nR0W3m3D2sDqD4zgoJxnuyCLuEO/pMZWl/weAJ5FJvoF42xxF
DbA4obioShY8v4cZGb8O+1nBaE05e6fnvqRxAer5d4Isdgh7rkVn60UlVtpEXNza
xHA/wBchC0bysgDxTuE6exQ/FyXx6MEuhubMer/0oi+FPCLy6xccd3chTWlBvUSd
leTOrFVP9Vp4PQNn3MlRmY0sUJ8ATXgJQfgRAgMBAAGjggG3MIIBszAdBgNVHQ4E
FgQUUw8AystMXoSVYxl4YDX3LWDVRQUwHwYDVR0jBBgwFoAU3J7LD7cQIEluO8Ik
DdKeQgjB6igwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBgNVHR8EUTBPME2g
S6BJhkdyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS91cGxpZnQvM0o3
TEQ3Y1FJRWx1TzhJa0RkS2VRZ2pCNmlnLmNybDBkBggrBgEFBQcBAQRYMFYwVAYI
KwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFV
TFQvM0o3TEQ3Y1FJRWx1TzhJa0RkS2VRZ2pCNmlnLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwYwYIKwYBBQUHAQsEVzBVMFMGCCsGAQUFBzALhkdyc3luYzovL2NobG9lLnNv
Ym9ybm9zdC5uZXQvcnBraS91cGxpZnQvVXc4QXlzdE1Yb1NWWXhsNFlEWDNMV0RW
UlFVLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwpODANBgkq
hkiG9w0BAQsFAAOCAQEARErWbh7f5yYf9sIP3r+nHDll5Gddav9cPjC1lY+Xju9B
XnJi/eimZ7LzKoySK9r+5Z1w4eX0813CaTvkleSGyGurL9ibOrLbqX0oZglisK9t
U5eGQlouVVOceo++n7V4WbClDOy/4VmyMFwartJbXY6L78LaefheVsuz5cvkKCv4
V7p6KI3qxzg80oRB4a81O+XEHqkDKJ3UevmdYh418bCiH0yjGD5SA8NXuxDxvzdp
0dQ6hZ5MatP3dl8XORMLxPAKeWUitVW+o0Y7ZqDKniLrQJJVcZmj+nQp9jkYVx/j
4PJz+vmtUoEZnhkXOHJNOCW/xFx8YTfMZOQniBTnTA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:53:26 2025 by rpki-client