Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4F9ho4_GQ3V3DkrJNitatsVXeRU.roa
File: 4F9ho4_GQ3V3DkrJNitatsVXeRU.roa (raw, json)
Hash identifier: GjIY4dFxIHruE802sZ2zlcWx2VYNjWpAt5aHfpqDNQo=
Subject key identifier: E0:5F:61:A3:8F:C6:43:75:77:0E:4A:C9:36:2B:5A:B6:C5:57:79:15
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C09
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4F9ho4_GQ3V3DkrJNitatsVXeRU.roa
Signing time: Thu 16 Jan 2025 07:55:03 +0000
ROA not before: Thu 16 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 16 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=E05F61A38FC64375770E4AC9362B5AB6C5577915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:08:61:12:03:9e:b1:ef:ca:c9:c3:1f:20:
21:a8:79:14:10:50:77:41:33:7a:55:c5:6d:b0:e8:
fc:43:48:a4:85:d2:26:7b:a8:a6:10:a1:88:e0:50:
0f:d4:5a:28:ea:9f:8c:72:1b:7d:71:66:85:99:14:
15:7b:39:b5:f1:66:3c:e5:a0:69:be:27:97:af:e9:
89:e9:88:60:a3:17:61:07:c0:16:94:12:73:1c:5c:
4c:93:2f:a6:5c:91:fe:08:17:a9:72:c4:3f:18:63:
c0:3f:84:f2:44:8c:c5:8e:a2:11:87:9b:08:42:8b:
ca:b4:60:7f:e2:e1:3f:89:b7:81:12:c4:7c:08:c4:
4f:0e:fa:8c:17:36:63:02:b3:55:59:c7:8f:62:3b:
1a:04:7b:80:32:34:f5:7c:75:06:d1:5c:61:c0:23:
42:af:44:35:9b:10:c2:9c:92:30:a8:b5:7a:3f:1e:
ac:0f:75:ac:e5:63:44:3e:9e:47:38:8c:4c:83:b4:
5a:69:fc:1b:96:cb:c7:8b:62:5e:98:7f:21:c1:ae:
2c:6d:b9:fa:22:ef:76:58:ae:a9:96:55:37:9c:a8:
78:b7:43:c4:c6:91:34:f3:bf:01:00:ad:4e:92:92:
4a:b4:3b:a2:63:1e:75:a1:44:bf:5a:a4:dd:f8:c9:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:61:A3:8F:C6:43:75:77:0E:4A:C9:36:2B:5A:B6:C5:57:79:15
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4F9ho4_GQ3V3DkrJNitatsVXeRU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:41:51:2c:73:2e:55:ad:4b:bf:fb:31:31:be:7c:0f:30:28:
dc:b9:a5:f4:e1:2f:24:e4:92:8e:95:e6:cd:b7:b7:37:28:0a:
bf:36:2d:1f:5f:87:c7:a4:d3:1e:e6:af:74:23:a6:46:4d:7f:
d2:8e:a3:28:bd:92:85:7a:42:b8:b6:a2:6e:05:49:79:93:88:
cf:6b:19:a0:b3:d6:5f:d5:fe:c1:5e:d2:1b:0b:61:dd:ea:6c:
8b:98:32:9c:5f:8c:4e:06:2a:98:13:0d:3a:28:3c:6a:30:46:
de:c5:d6:7f:1d:0a:52:6e:0b:86:b2:23:82:ef:67:b0:c6:ac:
68:49:43:af:9a:a5:66:29:02:00:5a:ca:a3:96:5b:5e:98:dc:
4f:fc:6c:29:5b:b2:b2:32:63:31:fd:89:e5:df:27:12:62:78:
94:d6:d5:bf:28:bd:97:48:e8:e3:bb:46:e8:ea:ec:87:4c:60:
06:d7:fe:42:79:e3:d6:22:43:3b:b7:08:d9:bd:1f:28:83:bc:
68:34:1a:eb:e9:b1:bb:13:59:28:ce:0d:eb:0f:cc:c9:a5:0f:
f9:87:33:d6:a4:9d:a9:b0:c9:46:a2:12:99:55:74:2b:f1:e7:
ab:ec:a6:90:e3:a0:d4:b8:b0:66:d3:6c:54:57:cf:2a:ed:c4:
9f:fb:fb:ab
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTYw
NzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEUwNUY2MUEzOEZDNjQz
NzU3NzBFNEFDOTM2MkI1QUI2QzU1Nzc5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD+QhhEgOese/KycMfICGoeRQQUHdBM3pVxW2w6PxDSKSF0iZ7
qKYQoYjgUA/UWijqn4xyG31xZoWZFBV7ObXxZjzloGm+J5ev6YnpiGCjF2EHwBaU
EnMcXEyTL6Zckf4IF6lyxD8YY8A/hPJEjMWOohGHmwhCi8q0YH/i4T+Jt4ESxHwI
xE8O+owXNmMCs1VZx49iOxoEe4AyNPV8dQbRXGHAI0KvRDWbEMKckjCotXo/HqwP
dazlY0Q+nkc4jEyDtFpp/BuWy8eLYl6YfyHBrixtufoi73ZYrqmWVTecqHi3Q8TG
kTTzvwEArU6Skkq0O6JjHnWhRL9apN34yXjJAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU4F9ho4/GQ3V3DkrJNitatsVXeRUwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzRGOWhvNF9HUTNWM0Rr
ckpOaXRhdHNWWGVSVS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANxBUSxzLlWtS7/7MTG+fA8wKNy5pfThLyTk
ko6V5s23tzcoCr82LR9fh8ek0x7mr3QjpkZNf9KOoyi9koV6Qri2om4FSXmTiM9r
GaCz1l/V/sFe0hsLYd3qbIuYMpxfjE4GKpgTDTooPGowRt7F1n8dClJuC4ayI4Lv
Z7DGrGhJQ6+apWYpAgBayqOWW16Y3E/8bClbsrIyYzH9ieXfJxJieJTW1b8ovZdI
6OO7Rujq7IdMYAbX/kJ549YiQzu3CNm9HyiDvGg0GuvpsbsTWSjODesPzMmlD/mH
M9aknamwyUaiEplVdCvx56vsppDjoNS4sGbTbFRXzyrtxJ/7+6s=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:06 2025 by rpki-client