Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/J2AOtM9WozlKKr7e_6j0PNkq4hg.roa
File: J2AOtM9WozlKKr7e_6j0PNkq4hg.roa (raw, json)
Hash identifier: dGJXsSy1voDbapSY1aPq6FTVvBmp3ZBkUlGxWTdsc1c=
Subject key identifier: 27:60:0E:B4:CF:56:A3:39:4A:2A:BE:DE:FF:A8:F4:3C:D9:2A:E2:18
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0AFD
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/J2AOtM9WozlKKr7e_6j0PNkq4hg.roa
Signing time: Tue 17 Dec 2024 15:55:03 +0000
ROA not before: Tue 17 Dec 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 17 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27600EB4CF56A3394A2ABEDEFFA8F43CD92AE218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:3c:83:fd:fc:c8:4d:0e:7c:25:cf:96:62:
1d:67:6c:a3:33:f5:8e:78:22:c9:16:76:6a:e8:c6:
1c:9a:46:dd:4a:74:7c:91:94:d3:4c:a9:01:13:e0:
9f:56:e5:40:b4:3a:c5:ad:a7:30:40:e8:19:ac:32:
0c:43:61:f1:d5:81:d3:49:0f:51:ca:0b:58:59:92:
bc:0c:6e:77:1f:c6:f8:01:c3:95:dd:7a:7b:7a:e4:
a6:36:ba:00:c8:ab:ce:25:ed:ab:76:05:4b:38:a8:
62:bc:4c:52:69:5e:e8:5a:19:6b:f5:cc:cd:83:61:
20:48:f3:0b:f9:aa:c9:10:d9:4d:fc:26:ee:a8:5b:
50:ed:09:6b:d9:9e:74:94:05:e1:e6:5b:ed:d9:2a:
7f:de:21:dd:75:20:d8:df:8a:d2:d7:76:e8:eb:b2:
09:f2:9b:0b:23:5b:c4:6c:d1:1c:d3:67:75:42:ae:
37:69:51:ad:a8:58:93:14:3c:c1:59:8c:34:59:0f:
cf:70:9d:86:7e:cd:ee:5c:42:39:5f:26:7e:6b:01:
4f:1f:50:3c:85:26:9a:3c:02:c6:3e:a7:9b:0f:e4:
cc:96:1a:cc:bd:bf:3d:39:0f:e2:7e:d4:25:59:8f:
f6:42:b7:04:91:3a:c4:e6:16:13:d4:71:d6:6d:e2:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:0E:B4:CF:56:A3:39:4A:2A:BE:DE:FF:A8:F4:3C:D9:2A:E2:18
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/J2AOtM9WozlKKr7e_6j0PNkq4hg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b3:05:ae:a3:c0:d9:c4:cf:ad:fe:de:41:4b:68:c7:99:c7:
4d:ce:6d:dd:36:db:39:46:d4:8b:e5:61:42:5f:6c:48:74:8e:
eb:2b:bf:ba:56:44:a6:a2:a4:9a:a9:56:58:19:d8:6b:09:3c:
e5:d1:b0:39:2b:74:11:e7:ba:49:15:ba:ed:42:4c:1b:47:40:
e5:b8:d5:a3:72:02:d7:c2:66:6a:2c:b6:47:b6:fd:85:b2:50:
7c:d9:cb:22:c0:42:9d:44:e6:8f:5b:07:27:1f:9d:e1:fe:8c:
13:c0:b2:a9:0b:ff:bf:43:17:97:07:2c:7f:30:51:f3:a1:d2:
cc:fa:9a:8b:4c:e9:22:60:5d:cf:6f:23:e3:f4:8c:aa:3f:a3:
5f:c6:fb:88:ca:cf:3d:78:a6:96:90:c6:62:d1:fa:3f:28:03:
03:e8:d8:ee:98:b2:5a:f4:e1:da:f9:93:05:24:d9:98:10:ce:
94:69:08:31:0e:b3:c0:f3:de:f7:d5:a4:9e:30:f0:f2:6f:40:
ff:ec:bb:f1:27:d2:d8:1e:df:17:0e:73:92:99:1a:f6:d8:bc:
7c:16:01:0c:87:31:5f:45:de:87:00:12:12:0f:00:ad:5f:77:
b4:ce:8f:7b:d3:5f:df:8c:4a:2c:9e:11:56:88:62:54:d1:50:
21:bb:57:14
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTcx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI3NjAwRUI0Q0Y1NkEz
Mzk0QTJBQkVERUZGQThGNDNDRDkyQUUyMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiyjyD/fzITQ58Jc+WYh1nbKMz9Y54IskWdmroxhyaRt1KdHyR
lNNMqQET4J9W5UC0OsWtpzBA6BmsMgxDYfHVgdNJD1HKC1hZkrwMbncfxvgBw5Xd
ent65KY2ugDIq84l7at2BUs4qGK8TFJpXuhaGWv1zM2DYSBI8wv5qskQ2U38Ju6o
W1DtCWvZnnSUBeHmW+3ZKn/eId11INjfitLXdujrsgnymwsjW8Rs0RzTZ3VCrjdp
Ua2oWJMUPMFZjDRZD89wnYZ+ze5cQjlfJn5rAU8fUDyFJpo8AsY+p5sP5MyWGsy9
vz05D+J+1CVZj/ZCtwSROsTmFhPUcdZt4r+nAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUJ2AOtM9WozlKKr7e/6j0PNkq4hgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0oyQU90TTlXb3psS0ty
N2VfNmowUE5rcTRoZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAE2zBa6jwNnEz63+3kFLaMeZx03Obd022zlG
1IvlYUJfbEh0jusrv7pWRKaipJqpVlgZ2GsJPOXRsDkrdBHnukkVuu1CTBtHQOW4
1aNyAtfCZmostke2/YWyUHzZyyLAQp1E5o9bBycfneH+jBPAsqkL/79DF5cHLH8w
UfOh0sz6motM6SJgXc9vI+P0jKo/o1/G+4jKzz14ppaQxmLR+j8oAwPo2O6Yslr0
4dr5kwUk2ZgQzpRpCDEOs8Dz3vfVpJ4w8PJvQP/su/En0tge3xcOc5KZGvbYvHwW
AQyHMV9F3ocAEhIPAK1fd7TOj3vTX9+MSiyeEVaIYlTRUCG7VxQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:45:54 2025 by rpki-client