Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/j3OXhalFi3CwIfuIU57yW6G8a3M.roa
File: j3OXhalFi3CwIfuIU57yW6G8a3M.roa (raw, json)
Hash identifier: uioABHKSmnQC91rLGSR3m3Dqwm1iJYGnLo8Cnh3zCLc=
Subject key identifier: 8F:73:97:85:A9:45:8B:70:B0:21:FB:88:53:9E:F2:5B:A1:BC:6B:73
Certificate issuer: /CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
Certificate serial: 09E3
Authority key identifier: DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/j3OXhalFi3CwIfuIU57yW6G8a3M.roa
Signing time: Tue 17 Jun 2025 00:12:31 +0000
ROA not before: Tue 17 Jun 2025 00:12:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1883
IP address blocks: 2001:67c:2938::/48 maxlen: 48
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl
rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 05:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
Validity
Not Before: Jun 17 00:12:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8F739785A9458B70B021FB88539EF25BA1BC6B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:6a:3f:ed:80:52:d0:24:b1:bb:61:15:3a:
a3:c9:26:e7:ed:47:55:13:1f:6b:0c:47:0b:04:54:
28:ab:15:fc:30:90:dc:39:1f:77:dd:3f:89:e7:09:
0a:6e:cc:e1:fa:56:79:49:3d:1a:ef:c2:c3:e1:6c:
2e:cd:a8:54:d5:a6:e3:0b:46:2d:16:cc:d5:7c:ba:
81:a9:53:82:df:e6:ae:ab:f3:52:cc:bd:9a:da:db:
b1:9d:a5:ed:be:69:09:e3:ad:1a:0e:85:af:aa:49:
f7:e7:74:65:49:07:dd:30:99:5c:44:cb:2d:c0:48:
da:f9:0a:5c:ab:12:f2:2c:d0:97:14:6d:96:2e:4c:
3b:1b:8e:9f:b3:bd:b7:2e:c1:26:33:ad:24:35:63:
f2:47:4e:82:4b:de:f8:e0:77:e4:f5:27:7d:50:82:
4c:44:33:2c:fc:d3:f2:7c:76:3a:9e:bc:44:28:80:
89:74:84:b3:01:31:ad:3c:df:9f:89:d8:69:6a:4b:
fc:04:48:18:d4:68:aa:1d:52:e7:4c:fb:40:50:4b:
96:14:78:b9:7e:ff:04:b6:c7:a5:3c:d6:9e:2b:09:
57:7e:c1:87:2c:b4:ec:9d:19:1e:78:d2:44:73:04:
a4:9d:4a:d3:7c:5f:9d:0a:62:7b:87:de:7b:98:9f:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:97:85:A9:45:8B:70:B0:21:FB:88:53:9E:F2:5B:A1:BC:6B:73
X509v3 Authority Key Identifier:
keyid:DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/j3OXhalFi3CwIfuIU57yW6G8a3M.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
94:20:d7:81:c4:96:ca:ad:f9:4e:bb:ea:6d:2a:15:a5:d2:f4:
71:42:77:2c:1c:a4:8f:76:ef:9e:a0:7e:ad:7c:38:d6:77:e7:
e0:b2:c9:94:aa:9e:ff:cc:e8:49:19:2b:83:66:81:81:d6:e2:
ae:86:19:a4:73:b7:08:55:19:d4:45:a6:3a:16:5d:41:54:5b:
55:71:56:61:6e:06:d9:b3:3d:ba:40:69:1a:c8:c3:8f:94:4a:
ce:d3:47:ce:06:38:24:15:18:5f:5a:0b:5c:55:65:69:5c:4f:
5e:32:4e:dd:96:c6:8e:4d:d7:bf:72:39:a3:c2:0b:c2:85:ef:
7c:15:5b:91:09:f1:a1:7f:10:8b:f7:b3:8e:6e:48:ac:1b:b9:
a9:2c:ad:3c:04:9e:34:8a:5b:b7:03:1e:ac:82:13:4c:d3:a0:
56:a3:8f:61:0e:21:55:9f:70:cf:3c:48:bb:55:9c:c0:dc:90:
7a:e8:a6:ba:3e:a4:8f:7d:81:cf:eb:02:75:9a:c2:55:ab:ea:
eb:0c:84:d6:3c:d6:fc:27:d0:d1:76:af:15:8b:d1:d4:e0:4e:
58:2b:fd:6c:d8:bb:32:01:bf:32:26:a2:70:c2:00:d7:ab:00:
7b:03:76:45:c1:85:30:04:23:f2:3b:64:50:52:32:b1:2c:37:
a4:ba:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:18:36 2025 by rpki-client