Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/La0gPkGYEpEXB47Fwxv8fMN8SHg.roa
File: La0gPkGYEpEXB47Fwxv8fMN8SHg.roa (raw, json)
Hash identifier: 6d7tT0OT1mUmW3NPdPH4iaMIBuqkFmcUOX/3q1EZHf4=
Subject key identifier: 2D:AD:20:3E:41:98:12:91:17:07:8E:C5:C3:1B:FC:7C:C3:7C:48:78
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BFA
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/La0gPkGYEpEXB47Fwxv8fMN8SHg.roa
Signing time: Tue 14 Jan 2025 15:55:03 +0000
ROA not before: Tue 14 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3066 (0xbfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 14 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2DAD203E4198129117078EC5C31BFC7CC37C4878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:be:cd:11:25:6a:2c:d8:fa:90:0d:e2:ee:
d0:0d:a7:85:b9:56:b7:58:c7:ec:87:ed:5b:17:58:
f7:14:25:d3:9f:17:52:b0:ed:71:dc:a4:36:ba:42:
ae:ec:a3:b0:50:af:ce:45:0f:cd:3e:8c:69:3a:ec:
2f:62:1f:d5:32:af:2c:d5:1c:df:3f:96:17:e7:97:
ca:66:e9:e7:f9:0c:8e:1f:c3:20:9d:a0:95:d6:ab:
ce:b1:d8:6a:02:93:65:ca:d3:1b:87:f6:90:97:7c:
ca:54:a5:62:8d:af:55:25:ca:ea:31:b4:a3:6e:f3:
9c:a0:d0:9b:d7:f4:fe:32:0e:3c:d8:65:9d:57:01:
d1:46:0d:34:9e:8c:d0:82:96:af:84:28:8e:7b:f1:
03:69:ab:9f:c7:9b:eb:05:fa:aa:eb:3e:53:19:c8:
99:db:1d:a6:81:03:e9:35:5c:e8:4b:d3:c9:88:fb:
49:80:ae:21:8f:df:58:7a:d3:4e:19:8c:37:4a:41:
06:38:93:08:13:d8:ac:a0:51:ce:67:17:cc:64:d0:
d7:e8:52:e6:e9:9f:5f:30:3d:78:25:22:f8:51:f9:
9d:a9:96:05:7b:ba:1d:cf:36:fb:86:43:19:fd:56:
3c:ee:19:8d:43:91:24:ef:d8:8e:65:67:b4:45:7e:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:20:3E:41:98:12:91:17:07:8E:C5:C3:1B:FC:7C:C3:7C:48:78
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/La0gPkGYEpEXB47Fwxv8fMN8SHg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:99:39:45:e3:24:a2:31:88:ae:f0:a6:e0:1d:8a:21:aa:b9:
66:7c:a5:23:32:d2:e1:d3:17:7a:20:16:22:20:8a:4f:61:5d:
02:94:e7:16:d4:cc:92:c4:94:60:72:c0:19:d5:16:45:2b:15:
70:7c:8d:4d:89:3b:c4:79:4e:0f:60:36:be:bb:d7:33:b2:4c:
05:d3:8e:97:8a:78:64:42:ff:f6:28:91:f8:b2:80:b4:91:f2:
e2:41:2c:aa:34:24:32:ac:e1:bc:04:86:b9:90:55:27:a0:10:
f4:f5:fc:78:68:fe:82:9e:4b:dd:ff:80:5f:84:83:24:37:74:
e0:40:f5:44:c2:88:eb:f1:3f:f3:30:26:57:25:dd:c8:0e:f2:
89:ee:4f:ad:ed:98:5d:4e:d6:a6:65:49:4d:3a:95:5e:0d:fc:
f0:03:fa:99:ec:99:98:c1:f2:ab:78:2b:da:6c:ab:ef:e4:16:
73:47:ed:15:78:2a:e8:e5:42:ff:29:f8:7e:f4:90:99:b9:71:
ea:e4:d0:3b:49:92:8d:71:bf:25:4f:eb:2d:ca:ba:aa:06:90:
d3:f7:d9:a1:09:f1:87:cb:42:29:88:03:d8:d0:f0:44:4e:f7:
68:74:f4:e3:a1:10:2a:08:f4:c1:e1:40:f0:0c:9e:c5:60:1c:
e4:e0:16:67
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTQx
NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJEQUQyMDNFNDE5ODEy
OTExNzA3OEVDNUMzMUJGQzdDQzM3QzQ4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN4b7NESVqLNj6kA3i7tANp4W5VrdYx+yH7VsXWPcUJdOfF1Kw
7XHcpDa6Qq7so7BQr85FD80+jGk67C9iH9UyryzVHN8/lhfnl8pm6ef5DI4fwyCd
oJXWq86x2GoCk2XK0xuH9pCXfMpUpWKNr1UlyuoxtKNu85yg0JvX9P4yDjzYZZ1X
AdFGDTSejNCClq+EKI578QNpq5/Hm+sF+qrrPlMZyJnbHaaBA+k1XOhL08mI+0mA
riGP31h6004ZjDdKQQY4kwgT2KygUc5nF8xk0NfoUubpn18wPXglIvhR+Z2plgV7
uh3PNvuGQxn9VjzuGY1DkSTv2I5lZ7RFfgAtAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQULa0gPkGYEpEXB47Fwxv8fMN8SHgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0xhMGdQa0dZRXBFWEI0
N0Z3eHY4Zk1OOFNIZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAK2ZOUXjJKIxiK7wpuAdiiGquWZ8pSMy0uHT
F3ogFiIgik9hXQKU5xbUzJLElGBywBnVFkUrFXB8jU2JO8R5Tg9gNr671zOyTAXT
jpeKeGRC//YokfiygLSR8uJBLKo0JDKs4bwEhrmQVSegEPT1/Hho/oKeS93/gF+E
gyQ3dOBA9UTCiOvxP/MwJlcl3cgO8onuT63tmF1O1qZlSU06lV4N/PAD+pnsmZjB
8qt4K9psq+/kFnNH7RV4KujlQv8p+H70kJm5cerk0DtJko1xvyVP6y3KuqoGkNP3
2aEJ8YfLQimIA9jQ8ERO92h09OOhECoI9MHhQPAMnsVgHOTgFmc=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:52:03 2025 by rpki-client