Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/5G5tKFcU-CLwiTbdYuInLQPjNlg.roa
File: 5G5tKFcU-CLwiTbdYuInLQPjNlg.roa (raw, json)
Hash identifier: 25Mlaaf54zMVLLX/Gf24e18XnKPQxqIY3neNxvz1dx0=
Subject key identifier: E4:6E:6D:28:57:14:F8:22:F0:89:36:DD:62:E2:27:2D:03:E3:36:58
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C24
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5G5tKFcU-CLwiTbdYuInLQPjNlg.roa
Signing time: Sun 19 Jan 2025 07:55:03 +0000
ROA not before: Sun 19 Jan 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 19 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=E46E6D285714F822F08936DD62E2272D03E33658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:60:05:9b:61:90:e5:e4:10:79:0e:e7:f1:
07:5e:13:f9:69:bf:ab:6c:bc:25:3e:b0:1f:e2:9d:
2e:ba:d5:b0:0d:32:b2:e9:d8:91:6c:fd:53:e4:68:
a6:39:b9:68:a0:e3:70:46:1c:93:36:84:37:2b:e5:
1c:cd:c3:7f:fb:10:69:17:96:32:fe:c5:7b:da:60:
35:b4:c9:58:43:b0:8d:6a:ed:17:6a:32:85:dc:30:
a7:1c:e5:7d:67:96:f1:db:95:31:37:6c:f1:02:74:
62:11:8b:c8:d9:ae:07:66:be:7c:79:b9:08:f1:42:
dc:38:e4:79:45:a5:92:53:eb:6b:2c:a8:3d:03:25:
e8:7d:d6:ee:7c:b0:52:b7:0a:9d:ec:ce:27:3f:c2:
87:2f:4b:b6:cd:16:1a:20:15:26:36:68:af:ef:b5:
e0:74:b2:5b:34:12:ca:89:e9:40:a1:d0:d3:26:20:
6c:23:10:92:3a:49:6f:bd:38:92:06:84:57:9b:a6:
3d:a4:ac:40:f5:bd:2c:3b:48:c8:e3:a6:ec:2c:ea:
4b:b3:b7:3b:09:e6:df:14:90:ef:75:7f:8b:a6:5c:
36:da:98:ca:c5:84:7d:20:7d:4d:c3:3b:43:27:c8:
38:d6:67:4c:16:ae:cc:1c:7a:c6:35:5b:dc:5f:ce:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6E:6D:28:57:14:F8:22:F0:89:36:DD:62:E2:27:2D:03:E3:36:58
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/5G5tKFcU-CLwiTbdYuInLQPjNlg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e1:7b:ab:24:a7:96:2f:38:85:7b:cc:76:80:62:01:cf:56:
34:19:a5:bf:20:5b:e9:c8:0c:04:cf:6e:60:1f:5f:98:d4:51:
7d:15:cc:6f:9b:a1:c3:a1:ca:6b:c1:f5:86:ef:23:ad:3c:fb:
a5:ae:05:44:b0:13:8f:bb:cc:af:61:67:4d:95:24:84:e6:5b:
f1:e1:80:1f:3d:bd:21:71:08:c3:e7:ec:e9:0f:be:8a:1a:72:
6d:46:05:ce:74:18:7c:43:44:4b:1d:60:63:09:6d:02:c1:45:
37:95:ea:9d:95:a0:92:2f:ba:a9:3b:b5:5e:f9:6c:2d:e3:49:
ac:e3:81:9f:99:ec:4f:1e:7e:57:7d:a4:a4:15:1f:c4:f0:48:
33:53:5e:a4:c9:08:94:0d:ed:c0:d3:9c:a2:f7:cc:5b:11:5a:
92:3a:2e:d6:ba:5e:05:dc:40:10:26:cc:a8:d7:47:97:4c:83:
e0:1e:7b:74:5c:94:1f:10:4c:8c:2c:b4:f1:30:58:66:8c:a0:
8d:fa:2b:77:96:15:bd:aa:99:8b:85:a1:20:7a:a4:34:64:9a:
02:cf:d1:10:27:48:44:81:b1:d5:1d:65:af:4c:1e:51:59:7e:
e6:3b:da:b6:35:16:21:d6:e8:f0:95:a0:3f:ad:62:b5:e2:d9:
b7:01:70:cf
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTkw
NzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEU0NkU2RDI4NTcxNEY4
MjJGMDg5MzZERDYyRTIyNzJEMDNFMzM2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6QmAFm2GQ5eQQeQ7n8QdeE/lpv6tsvCU+sB/inS661bANMrLp
2JFs/VPkaKY5uWig43BGHJM2hDcr5RzNw3/7EGkXljL+xXvaYDW0yVhDsI1q7Rdq
MoXcMKcc5X1nlvHblTE3bPECdGIRi8jZrgdmvnx5uQjxQtw45HlFpZJT62ssqD0D
Jeh91u58sFK3Cp3szic/wocvS7bNFhogFSY2aK/vteB0sls0EsqJ6UCh0NMmIGwj
EJI6SW+9OJIGhFebpj2krED1vSw7SMjjpuws6kuztzsJ5t8UkO91f4umXDbamMrF
hH0gfU3DO0MnyDjWZ0wWrswcesY1W9xfzvFBAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU5G5tKFcU+CLwiTbdYuInLQPjNlgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzVHNXRLRmNVLUNMd2lU
YmRZdUluTFFQak5sZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAAfhe6skp5YvOIV7zHaAYgHPVjQZpb8gW+nI
DATPbmAfX5jUUX0VzG+bocOhymvB9YbvI608+6WuBUSwE4+7zK9hZ02VJITmW/Hh
gB89vSFxCMPn7OkPvooacm1GBc50GHxDREsdYGMJbQLBRTeV6p2VoJIvuqk7tV75
bC3jSazjgZ+Z7E8efld9pKQVH8TwSDNTXqTJCJQN7cDTnKL3zFsRWpI6Lta6XgXc
QBAmzKjXR5dMg+Aee3RclB8QTIwstPEwWGaMoI36K3eWFb2qmYuFoSB6pDRkmgLP
0RAnSESBsdUdZa9MHlFZfuY72rY1FiHW6PCVoD+tYrXi2bcBcM8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:01 2025 by rpki-client