Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa
File: 4myWyiV27jzongHLmZE-_v-ZKSQ.roa (raw, json)
Hash identifier: ZwDQqLhZhZ+KnKPIkYcDcRUs8nLsKiMVU5LfXdrmFKQ=
Subject key identifier: E2:6C:96:CA:25:76:EE:3C:E8:9E:01:CB:99:91:3E:FE:FF:99:29:24
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 087D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa
Signing time: Mon 07 Oct 2024 15:55:03 +0000
ROA not before: Mon 07 Oct 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Oct 7 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E26C96CA2576EE3CE89E01CB99913EFEFF992924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:4a:59:a0:c0:a8:26:db:10:ad:a4:3d:b1:
f4:37:89:dc:9b:12:67:52:0a:b3:83:42:41:70:93:
61:8a:05:f0:11:48:34:1a:55:39:d1:97:0d:02:60:
b3:fc:53:20:eb:c5:16:52:d6:b2:df:57:a6:da:c4:
48:6b:f1:2c:85:d7:6f:6b:ab:7f:79:17:1e:6d:a9:
28:aa:e3:a7:c5:ff:85:29:74:81:05:59:ef:fb:32:
c4:8c:b9:bf:5a:fe:49:31:5c:88:f4:69:d4:f4:0b:
fb:8e:5d:48:87:4b:a7:d4:d3:ad:80:74:62:6f:d3:
e7:82:41:88:65:42:77:c8:6e:22:53:a0:4b:ba:dd:
6d:91:05:e5:84:e1:6c:85:ae:59:97:32:11:0b:33:
43:cb:ed:17:1a:cc:0c:c8:4b:fc:a1:fd:1c:4d:ef:
b8:61:62:11:ca:11:9d:5e:68:aa:7d:e6:b3:12:55:
42:fe:a8:37:f7:b3:b0:b7:77:fc:b0:e3:df:ed:3e:
99:ab:5c:21:f6:3a:e4:71:46:bc:79:5c:e4:d6:cf:
06:d2:9a:52:96:98:4f:67:bf:3c:e1:2c:40:1e:23:
0e:6c:8c:a1:89:2d:66:b1:4c:69:ff:08:9f:b0:72:
92:09:9a:14:8c:21:7a:d4:89:ae:62:26:cf:06:8f:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:96:CA:25:76:EE:3C:E8:9E:01:CB:99:91:3E:FE:FF:99:29:24
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c8:09:43:1d:14:aa:68:b2:50:9c:56:c9:94:7d:28:95:8a:
73:8c:fc:55:6d:0c:dd:28:74:bc:ca:1b:e0:51:e6:60:c5:27:
d0:2c:96:ee:a7:25:c3:be:8c:2f:49:db:d7:af:8a:61:7c:27:
78:41:27:90:cb:74:bb:99:98:3a:93:e1:47:cf:5d:ac:dc:2d:
d0:b8:1c:4f:2e:68:9a:1d:69:39:30:dd:3f:a7:6a:57:d3:87:
5d:cb:d4:9f:1e:56:68:47:5a:57:29:02:ea:6b:a3:59:60:8c:
11:f1:cc:6c:95:96:2e:19:2e:a9:e5:77:03:3c:94:74:9a:84:
55:b1:fc:1f:6b:58:ca:b8:2c:0c:96:cb:96:f0:af:81:07:70:
b4:c7:0f:41:ee:6d:ff:2e:38:fc:b9:30:7a:7e:f4:e8:fd:26:
20:8f:84:8b:71:5b:1a:89:5c:02:5d:07:f1:32:5f:2c:5d:b9:
2c:9b:a9:9a:12:7c:42:0f:f6:c4:17:32:13:bf:3c:f4:ff:23:
be:46:f2:fa:f7:fa:46:63:98:e7:15:58:3b:3a:c1:69:05:54:
69:76:ab:8c:cf:26:28:8c:d1:7f:65:ec:4c:db:6c:6d:cb:2b:
0c:79:8a:da:ac:0b:09:5b:45:e5:0c:ec:31:04:6d:c5:fa:fc:
ef:06:74:52
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEwMDcx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEUyNkM5NkNBMjU3NkVF
M0NFODlFMDFDQjk5OTEzRUZFRkY5OTI5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN10pZoMCoJtsQraQ9sfQ3idybEmdSCrODQkFwk2GKBfARSDQa
VTnRlw0CYLP8UyDrxRZS1rLfV6baxEhr8SyF129rq395Fx5tqSiq46fF/4UpdIEF
We/7MsSMub9a/kkxXIj0adT0C/uOXUiHS6fU062AdGJv0+eCQYhlQnfIbiJToEu6
3W2RBeWE4WyFrlmXMhELM0PL7RcazAzIS/yh/RxN77hhYhHKEZ1eaKp95rMSVUL+
qDf3s7C3d/yw49/tPpmrXCH2OuRxRrx5XOTWzwbSmlKWmE9nvzzhLEAeIw5sjKGJ
LWaxTGn/CJ+wcpIJmhSMIXrUia5iJs8GjyklAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU4myWyiV27jzongHLmZE+/v+ZKSQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzRteVd5aVYyN2p6b25n
SExtWkUtX3YtWktTUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBADbICUMdFKposlCcVsmUfSiVinOM/FVtDN0o
dLzKG+BR5mDFJ9Aslu6nJcO+jC9J29evimF8J3hBJ5DLdLuZmDqT4UfPXazcLdC4
HE8uaJodaTkw3T+nalfTh13L1J8eVmhHWlcpAupro1lgjBHxzGyVli4ZLqnldwM8
lHSahFWx/B9rWMq4LAyWy5bwr4EHcLTHD0Hubf8uOPy5MHp+9Oj9JiCPhItxWxqJ
XAJdB/EyXyxduSybqZoSfEIP9sQXMhO/PPT/I75G8vr3+kZjmOcVWDs6wWkFVGl2
q4zPJiiM0X9l7EzbbG3LKwx5itqsCwlbReUM7DEEbcX6/O8GdFI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:12:21 2025 by rpki-client