Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/CL5USinlnhJpw6QAQlcY-LXAC2s.roa
File: CL5USinlnhJpw6QAQlcY-LXAC2s.roa (raw, json)
Hash identifier: fG8WeeZ86TNCaPq6EnwhkNuY0cVpanS8SdKqumgBmSo=
Subject key identifier: 08:BE:54:4A:29:E5:9E:12:69:C3:A4:00:42:57:18:F8:B5:C0:0B:6B
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C06
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CL5USinlnhJpw6QAQlcY-LXAC2s.roa
Signing time: Wed 15 Jan 2025 23:55:03 +0000
ROA not before: Wed 15 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 15 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08BE544A29E59E1269C3A400425718F8B5C00B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:94:a3:26:9c:52:6a:26:b7:80:da:5d:83:e9:
16:51:85:79:80:12:03:dc:c4:f3:41:9b:d3:8b:c5:
b0:4d:03:80:c4:78:72:d3:28:8b:b9:c1:59:bc:48:
c1:6f:be:89:2a:32:c0:38:69:71:38:77:7e:bd:84:
f8:16:a6:58:47:6b:93:72:bb:3f:ab:c4:e3:1c:13:
34:b6:08:d4:b2:22:ba:2c:d3:ad:fc:8a:af:d1:e4:
42:a6:fb:8e:ac:26:28:56:c6:a4:88:90:4e:5a:23:
89:8c:17:1a:b2:91:5f:6f:b7:15:e2:c0:83:9e:8d:
3e:b6:6c:15:6a:53:de:08:ee:8f:89:c4:27:4d:a1:
6e:8c:8e:40:f6:ae:ad:e4:09:2c:d7:44:8c:ab:8e:
9b:aa:25:d4:89:7d:1a:fe:a5:72:c4:31:bd:b2:a3:
c9:4c:f8:90:a6:e6:6f:ce:c2:38:f8:e0:dc:7f:a8:
e4:be:9c:a3:2f:9b:80:cb:bf:3c:47:ef:d2:f2:86:
07:75:2d:bc:b0:a2:e0:71:f4:61:7e:c2:bf:cc:71:
c3:81:83:30:5e:38:86:c2:5c:16:73:69:df:bf:c6:
0b:74:cb:2a:ab:43:46:34:24:46:f2:05:58:a7:1e:
21:c4:ed:c0:8f:db:40:92:3e:3d:25:34:d5:ef:aa:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:54:4A:29:E5:9E:12:69:C3:A4:00:42:57:18:F8:B5:C0:0B:6B
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/CL5USinlnhJpw6QAQlcY-LXAC2s.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c0:d3:d7:df:62:e3:86:be:4b:7e:4a:86:fc:d1:ff:8c:3a:
61:91:71:5b:04:c9:07:a4:8b:1e:59:b3:19:ad:a0:bd:da:a0:
aa:71:b1:ac:7d:dc:45:27:2d:09:22:0c:ef:e9:a4:35:e2:50:
54:d7:7e:f2:42:cb:47:bd:ac:0a:48:fa:aa:54:94:45:93:2e:
d4:85:76:11:b0:5e:ad:58:b2:17:f7:c0:e3:f9:99:5e:64:39:
a3:54:68:50:6f:fc:2b:a9:18:d7:5a:bc:d6:67:54:ee:ce:ce:
6c:99:64:a3:20:ba:98:36:02:49:19:27:aa:5a:ea:02:55:34:
1c:7a:4d:0d:7d:94:10:55:56:e6:a4:ed:83:41:1f:84:2f:b7:
65:0c:a1:e6:91:23:81:5b:35:58:e7:b8:37:42:e7:28:01:3d:
c7:9a:7c:fe:7a:62:b6:be:2c:00:3b:1b:62:d7:8e:10:c4:3a:
ee:12:85:15:fe:37:76:71:e1:10:34:2a:b7:2c:1d:45:f2:a5:
10:ce:95:b4:ed:8c:f8:d2:33:1e:d0:68:68:8c:dd:8f:26:a9:
de:d4:4e:59:d6:f9:f7:37:c7:db:01:7d:c3:ef:2b:b8:fc:8b:
fb:15:f0:36:de:d0:dd:65:b4:b2:ca:63:18:37:ca:fa:88:eb:
7c:82:36:04
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTUy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDA4QkU1NDRBMjlFNTlF
MTI2OUMzQTQwMDQyNTcxOEY4QjVDMDBCNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2lKMmnFJqJreA2l2D6RZRhXmAEgPcxPNBm9OLxbBNA4DEeHLT
KIu5wVm8SMFvvokqMsA4aXE4d369hPgWplhHa5Nyuz+rxOMcEzS2CNSyIros0638
iq/R5EKm+46sJihWxqSIkE5aI4mMFxqykV9vtxXiwIOejT62bBVqU94I7o+JxCdN
oW6MjkD2rq3kCSzXRIyrjpuqJdSJfRr+pXLEMb2yo8lM+JCm5m/Owjj44Nx/qOS+
nKMvm4DLvzxH79Lyhgd1LbywouBx9GF+wr/MccOBgzBeOIbCXBZzad+/xgt0yyqr
Q0Y0JEbyBVinHiHE7cCP20CSPj0lNNXvqtH/AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUCL5USinlnhJpw6QAQlcY+LXAC2swHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0NMNVVTaW5sbmhKcHc2
UUFRbGNZLUxYQUMycy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAC7A09ffYuOGvkt+Sob80f+MOmGRcVsEyQek
ix5ZsxmtoL3aoKpxsax93EUnLQkiDO/ppDXiUFTXfvJCy0e9rApI+qpUlEWTLtSF
dhGwXq1Yshf3wOP5mV5kOaNUaFBv/CupGNdavNZnVO7OzmyZZKMgupg2AkkZJ6pa
6gJVNBx6TQ19lBBVVuak7YNBH4Qvt2UMoeaRI4FbNVjnuDdC5ygBPceafP56Yra+
LAA7G2LXjhDEOu4ShRX+N3Zx4RA0KrcsHUXypRDOlbTtjPjSMx7QaGiM3Y8mqd7U
TlnW+fc3x9sBfcPvK7j8i/sV8Dbe0N1ltLLKYxg3yvqI63yCNgQ=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:20 2025 by rpki-client