Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa
File: Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa (raw, json)
Hash identifier: 6S3BqVDbcK4xDcoR4CeE4rKNxf6wSWWHAOdtyLgS+S4=
Subject key identifier: 2A:0F:EC:6F:55:5D:F9:0A:AE:E9:14:64:D3:54:86:70:FA:D9:AD:64
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B0F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa
Signing time: Thu 19 Dec 2024 15:55:02 +0000
ROA not before: Thu 19 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2831 (0xb0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 19 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2A0FEC6F555DF90AAEE91464D3548670FAD9AD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:c8:fc:b9:1d:8d:97:d4:c6:bb:08:f4:69:
5c:a0:a9:59:40:7f:17:48:3b:fc:33:4b:ff:b6:51:
a5:11:c7:2d:de:04:d9:9f:8d:3f:71:fc:d8:9e:00:
f0:3b:78:35:d4:f1:74:c8:0e:3e:aa:a9:d5:30:0c:
e5:c7:62:09:c8:26:58:c1:1c:cb:48:1c:2e:88:45:
03:bb:2f:65:59:07:a0:9f:80:e8:06:af:72:b3:f9:
84:8b:fc:c5:6e:39:61:01:ae:c4:10:48:bb:97:90:
f0:bd:e9:b3:a9:5b:54:21:f3:7d:86:77:e0:99:3a:
a4:c0:5f:7c:2b:27:71:62:83:94:07:2b:48:63:ed:
3c:af:09:74:e0:3b:b5:0c:68:1a:ff:61:fd:f8:68:
7e:8e:b6:3a:a4:a3:f8:20:2e:1f:2c:66:e9:af:3c:
96:a0:9b:83:27:91:d5:1e:3b:33:b3:0c:94:93:9a:
2f:5a:f9:94:33:92:10:07:55:30:a1:95:ee:e7:90:
b0:e2:fc:d8:08:d6:a4:2c:df:9c:05:82:0f:56:3e:
7e:5b:7c:76:1d:f9:6f:bf:f7:ea:ed:83:5a:5b:c2:
95:b8:69:2e:92:e6:83:89:cc:fa:c1:13:37:04:fd:
fe:ff:d6:ae:cc:c5:ec:a8:5b:4a:de:26:82:ad:55:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:EC:6F:55:5D:F9:0A:AE:E9:14:64:D3:54:86:70:FA:D9:AD:64
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ed:60:b0:d5:ea:bc:1c:a4:f5:ce:97:44:56:67:b4:f1:b3:
0f:c7:ec:5a:9d:4e:fe:9a:6b:d2:76:41:f8:c6:71:2d:a8:e1:
a6:ab:72:a8:aa:d4:72:b1:74:f4:40:ee:ac:c6:8b:80:43:3e:
6c:27:4a:8d:90:c4:17:d9:3f:6a:04:62:7b:b2:c1:0e:8a:be:
d8:e9:0a:dd:68:ad:f6:d5:5d:70:b4:58:fa:cc:bf:fc:32:ac:
46:20:b3:78:3d:8d:03:bd:38:8f:2d:f8:97:9c:01:84:62:7a:
12:f0:32:36:9a:b1:41:17:fa:bc:a0:71:09:23:53:24:56:d0:
d9:6b:f1:89:a1:b9:77:17:ec:e1:c9:8a:24:87:bb:c3:9a:05:
b8:1b:8f:9c:10:17:16:c0:27:f7:ff:04:0f:74:ef:dc:f9:f4:
13:74:6e:30:8d:a0:8e:ce:dc:5f:a6:3c:14:f7:8c:46:ed:e1:
29:82:a3:ed:ef:ae:4d:97:74:af:44:cf:d9:00:69:dd:15:f1:
3f:18:41:6e:a4:05:a9:c2:e7:d4:18:cd:a3:93:d2:2a:6c:f2:
55:71:1f:79:a5:37:73:52:77:cb:89:d9:6f:7b:94:a4:11:e8:
92:85:3b:0b:ff:ed:6a:e5:7a:59:ac:a1:fc:8f:b0:b5:70:64:
ca:6d:d2:d4
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTkx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJBMEZFQzZGNTU1REY5
MEFBRUU5MTQ2NEQzNTQ4NjcwRkFEOUFENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd0cj8uR2Nl9TGuwj0aVygqVlAfxdIO/wzS/+2UaURxy3eBNmf
jT9x/NieAPA7eDXU8XTIDj6qqdUwDOXHYgnIJljBHMtIHC6IRQO7L2VZB6CfgOgG
r3Kz+YSL/MVuOWEBrsQQSLuXkPC96bOpW1Qh832Gd+CZOqTAX3wrJ3Fig5QHK0hj
7TyvCXTgO7UMaBr/Yf34aH6Otjqko/ggLh8sZumvPJagm4MnkdUeOzOzDJSTmi9a
+ZQzkhAHVTChle7nkLDi/NgI1qQs35wFgg9WPn5bfHYd+W+/9+rtg1pbwpW4aS6S
5oOJzPrBEzcE/f7/1q7MxeyoW0reJoKtVTtJAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUKg/sb1Vd+Qqu6RRk01SGcPrZrWQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0tnX3NiMVZkLVFxdTZS
UmswMVNHY1ByWnJXUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAMntYLDV6rwcpPXOl0RWZ7Txsw/H7FqdTv6a
a9J2QfjGcS2o4aarcqiq1HKxdPRA7qzGi4BDPmwnSo2QxBfZP2oEYnuywQ6Kvtjp
Ct1orfbVXXC0WPrMv/wyrEYgs3g9jQO9OI8t+JecAYRiehLwMjaasUEX+rygcQkj
UyRW0Nlr8YmhuXcX7OHJiiSHu8OaBbgbj5wQFxbAJ/f/BA9079z59BN0bjCNoI7O
3F+mPBT3jEbt4SmCo+3vrk2XdK9Ez9kAad0V8T8YQW6kBanC59QYzaOT0ips8lVx
H3mlN3NSd8uJ2W97lKQR6JKFOwv/7WrlelmsofyPsLVwZMpt0tQ=
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:06:16 2025 by rpki-client