Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/9UpeEDNolxsycCkIBQi1WqKma1w.roa
File: 9UpeEDNolxsycCkIBQi1WqKma1w.roa (raw, json)
Hash identifier: qo0MZ7qNBWu/Z8ihuXtvd9bWoQ/+zjNy9/+SAT4VNqM=
Subject key identifier: F5:4A:5E:10:33:68:97:1B:32:70:29:08:05:08:B5:5A:A2:A6:6B:5C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B2A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9UpeEDNolxsycCkIBQi1WqKma1w.roa
Signing time: Sun 22 Dec 2024 15:55:03 +0000
ROA not before: Sun 22 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 22 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=F54A5E103368971B327029080508B55AA2A66B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:8e:c0:36:a2:b1:aa:9e:a8:1f:23:77:4a:
3a:30:52:09:ee:01:9a:78:99:17:c9:53:a9:39:54:
f3:a1:20:46:14:9f:a7:13:2f:6f:70:1f:d7:72:66:
d5:54:b8:1e:39:dc:3e:c5:1d:0f:8e:c8:85:62:37:
40:24:fd:e8:c6:98:ab:1c:7c:3d:00:b8:bc:4d:6e:
71:5c:88:f9:3b:e4:27:9b:93:e1:46:23:3d:56:8b:
bf:b2:e2:7e:da:89:0f:fc:77:45:89:5e:5c:03:d5:
1c:6d:b7:f2:69:5d:0c:c0:53:5c:2d:91:a7:a1:a6:
18:17:bd:7f:42:c9:36:4b:e8:a3:5e:36:e8:d0:a4:
61:42:38:0c:cb:ac:36:2e:46:6f:09:84:99:e9:52:
e3:0f:d2:0b:16:80:78:41:e0:d7:0c:e8:48:fe:b2:
fd:d8:b2:cf:ec:83:a7:24:c2:67:f8:be:c5:b2:ba:
75:32:a2:13:77:36:80:d3:0e:af:f3:6a:81:1b:0c:
b2:8d:82:a7:99:9e:2b:f9:db:4f:89:0b:61:fd:84:
93:a5:36:46:fe:2e:08:a5:bc:7e:ad:eb:f8:ab:f8:
0e:25:11:82:b9:93:58:3d:60:38:f1:f0:75:cc:85:
51:5c:30:82:4c:af:90:04:6d:5c:1a:66:65:6f:8a:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:5E:10:33:68:97:1B:32:70:29:08:05:08:B5:5A:A2:A6:6B:5C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/9UpeEDNolxsycCkIBQi1WqKma1w.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7e:74:e3:43:b5:2b:ac:fd:bb:e3:5d:96:cc:7d:5a:a8:05:
97:67:d3:3d:f3:bb:35:61:54:3b:68:4a:2e:9d:c3:92:62:00:
90:48:ff:28:6c:14:c9:51:66:61:18:0f:85:a5:e0:99:9c:b1:
ec:47:97:d5:2a:21:3c:22:3a:1f:e9:20:e4:6a:ec:ce:58:37:
10:56:ac:87:e4:13:9f:81:57:e5:00:8e:a6:c9:9a:8c:ea:c5:
65:dc:3f:cf:4e:a3:79:e6:56:3b:30:b8:38:1c:46:1e:9b:2a:
db:35:fd:37:ac:02:52:b5:eb:bf:b7:6c:ce:9f:90:1f:49:3f:
1c:c8:6c:c1:b5:9e:41:7e:53:3c:94:fa:79:e4:42:ac:5c:b6:
47:85:7f:98:37:fe:e6:50:d2:4a:b1:e5:5a:07:14:37:c8:1a:
79:c5:91:75:e5:f9:9d:c2:14:46:ff:69:5b:24:e6:c9:2c:de:
16:22:60:66:5a:cd:bc:2f:34:44:05:86:91:82:a0:e7:25:90:
ac:1e:21:92:7e:32:70:96:ab:3a:a2:12:c8:14:f4:a8:b3:0d:
ae:7a:dd:e5:9e:47:d9:f5:53:fa:46:62:23:8c:e8:63:35:ab:
a8:4e:af:60:0c:48:f9:04:96:da:a6:c6:e3:18:da:70:f2:4a:
c5:52:27:83
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMjIx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEY1NEE1RTEwMzM2ODk3
MUIzMjcwMjkwODA1MDhCNTVBQTJBNjZCNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/uI7ANqKxqp6oHyN3SjowUgnuAZp4mRfJU6k5VPOhIEYUn6cT
L29wH9dyZtVUuB453D7FHQ+OyIViN0Ak/ejGmKscfD0AuLxNbnFciPk75Cebk+FG
Iz1Wi7+y4n7aiQ/8d0WJXlwD1Rxtt/JpXQzAU1wtkaehphgXvX9CyTZL6KNeNujQ
pGFCOAzLrDYuRm8JhJnpUuMP0gsWgHhB4NcM6Ej+sv3Yss/sg6ckwmf4vsWyunUy
ohN3NoDTDq/zaoEbDLKNgqeZniv520+JC2H9hJOlNkb+LgilvH6t6/ir+A4lEYK5
k1g9YDjx8HXMhVFcMIJMr5AEbVwaZmVvigJXAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU9UpeEDNolxsycCkIBQi1WqKma1wwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzlVcGVFRE5vbHhzeWND
a0lCUWkxV3FLbWExdy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGZ+dONDtSus/bvjXZbMfVqoBZdn0z3zuzVh
VDtoSi6dw5JiAJBI/yhsFMlRZmEYD4Wl4JmcsexHl9UqITwiOh/pIORq7M5YNxBW
rIfkE5+BV+UAjqbJmozqxWXcP89Oo3nmVjswuDgcRh6bKts1/TesAlK167+3bM6f
kB9JPxzIbMG1nkF+UzyU+nnkQqxctkeFf5g3/uZQ0kqx5VoHFDfIGnnFkXXl+Z3C
FEb/aVsk5sks3hYiYGZazbwvNEQFhpGCoOclkKweIZJ+MnCWqzqiEsgU9KizDa56
3eWeR9n1U/pGYiOM6GM1q6hOr2AMSPkEltqmxuMY2nDySsVSJ4M=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:00:59 2025 by rpki-client