Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa
File: 6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa (raw, json)
Hash identifier: s/wG5QRYYe8KSaywRGA15LzSydzu8Fg2vZuEGUwsxsE=
Subject key identifier: EA:DF:E8:E2:97:B8:4E:E4:5A:03:22:91:0F:82:AE:52:43:C6:BD:D4
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AA0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa
Signing time: Sat 07 Dec 2024 07:55:03 +0000
ROA not before: Sat 07 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2720 (0xaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 7 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=EADFE8E297B84EE45A0322910F82AE5243C6BDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:8e:99:1f:ab:e1:76:a6:23:ba:0d:72:8a:
72:82:da:07:a7:9f:c5:ef:62:f5:04:b3:94:86:68:
be:a1:43:24:bc:df:01:21:2c:25:56:f4:ce:53:dd:
5a:ea:8e:62:c4:28:5d:70:07:84:d0:bb:a6:11:b6:
9b:07:62:8c:8c:d9:a4:f3:f6:2f:54:7a:09:ff:f8:
e2:6b:e3:cd:88:a0:00:e4:41:ea:ab:34:d2:43:aa:
58:80:dc:5c:94:2f:09:32:fa:9c:35:50:3f:b4:05:
34:ac:6f:ad:2c:f0:8f:2a:bb:1b:45:3a:26:6d:18:
06:d7:fb:97:13:93:df:e5:94:d6:f5:1e:46:df:85:
45:d5:60:18:af:51:6c:c9:f0:84:f1:34:34:a1:00:
1a:5a:c5:a7:19:88:d6:e9:30:ed:85:e7:4e:5d:0d:
98:d1:ba:59:ab:01:ef:d7:bd:56:aa:98:64:7d:d5:
95:eb:a4:3b:d2:93:5f:97:ff:16:f9:fb:b7:b0:63:
c5:cd:bc:3a:97:24:f5:d6:64:28:3e:ab:94:d8:17:
03:59:b6:5f:97:97:ad:26:8a:4e:af:c8:8c:ca:48:
57:35:8b:e5:3c:3d:dd:1c:fe:0d:a6:bc:fa:ef:dd:
21:ed:5f:80:4a:1a:fd:7a:b8:44:d2:80:5f:b4:6d:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:E8:E2:97:B8:4E:E4:5A:03:22:91:0F:82:AE:52:43:C6:BD:D4
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:85:9c:a9:5b:cc:34:ee:32:9c:47:b3:fc:8e:de:08:d3:94:
62:83:83:3a:4e:84:02:91:86:34:0d:e8:6f:8d:47:67:b4:79:
66:c3:c8:ff:5c:fb:8c:f0:a2:82:22:5e:09:06:81:a2:8d:ff:
13:1c:2a:7e:d2:de:58:70:e5:a8:93:75:35:31:1c:8f:fe:a7:
2e:b1:ea:a4:17:86:f8:95:ad:ec:5a:3b:85:29:ef:8a:ed:05:
7a:7e:6b:73:9c:ed:3c:f6:62:78:05:98:76:54:4c:35:44:75:
f6:f5:31:dd:12:57:7e:ca:b5:e3:ab:f9:46:fc:53:2e:59:41:
69:d5:bb:5d:1f:65:7d:06:77:66:df:bc:01:88:e4:f0:db:d7:
e6:c4:9e:19:4b:46:76:21:94:70:79:bd:e3:01:b0:47:ac:b7:
81:f3:2b:93:e1:5c:81:b5:b5:81:ec:d6:d5:81:87:99:c7:97:
b5:aa:84:f6:aa:3c:ea:dc:fb:66:37:77:82:d4:f7:4c:9c:4e:
55:e3:1b:60:5e:ae:2a:de:41:b3:4c:5a:33:40:56:59:03:ae:
56:ea:f9:79:cd:85:ac:b0:df:34:10:90:0d:c4:18:56:dd:53:
1a:ec:6f:55:50:db:eb:65:42:88:d9:56:81:16:1a:a1:b4:ae:
e3:96:5c:ea
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMDcw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEVBREZFOEUyOTdCODRF
RTQ1QTAzMjI5MTBGODJBRTUyNDNDNkJERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzKI6ZH6vhdqYjug1yinKC2genn8XvYvUEs5SGaL6hQyS83wEh
LCVW9M5T3VrqjmLEKF1wB4TQu6YRtpsHYoyM2aTz9i9Uegn/+OJr482IoADkQeqr
NNJDqliA3FyULwky+pw1UD+0BTSsb60s8I8quxtFOiZtGAbX+5cTk9/llNb1Hkbf
hUXVYBivUWzJ8ITxNDShABpaxacZiNbpMO2F505dDZjRulmrAe/XvVaqmGR91ZXr
pDvSk1+X/xb5+7ewY8XNvDqXJPXWZCg+q5TYFwNZtl+Xl60mik6vyIzKSFc1i+U8
Pd0c/g2mvPrv3SHtX4BKGv16uETSgF+0bfmBAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU6t/o4pe4TuRaAyKRD4KuUkPGvdQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzZ0X280cGU0VHVSYUF5
S1JENEt1VWtQR3ZkUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBALmFnKlbzDTuMpxHs/yO3gjTlGKDgzpOhAKR
hjQN6G+NR2e0eWbDyP9c+4zwooIiXgkGgaKN/xMcKn7S3lhw5aiTdTUxHI/+py6x
6qQXhviVrexaO4Up74rtBXp+a3Oc7Tz2YngFmHZUTDVEdfb1Md0SV37KteOr+Ub8
Uy5ZQWnVu10fZX0Gd2bfvAGI5PDb1+bEnhlLRnYhlHB5veMBsEest4HzK5PhXIG1
tYHs1tWBh5nHl7WqhPaqPOrc+2Y3d4LU90ycTlXjG2BerireQbNMWjNAVlkDrlbq
+XnNhayw3zQQkA3EGFbdUxrsb1VQ2+tlQojZVoEWGqG0ruOWXOo=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:53:38 2025 by rpki-client