Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Mu6Tyifm_zh8Dh2pXUz83YfBGN4.roa
File: Mu6Tyifm_zh8Dh2pXUz83YfBGN4.roa (raw, json)
Hash identifier: F9c7gV5Aml8riF3L8zg7K0BaBfmrQFaa8xWunHF+QCE=
Subject key identifier: 32:EE:93:CA:27:E6:FF:38:7C:0E:1D:A9:5D:4C:FC:DD:87:C1:18:DE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C1B
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Mu6Tyifm_zh8Dh2pXUz83YfBGN4.roa
Signing time: Sat 18 Jan 2025 07:55:04 +0000
ROA not before: Sat 18 Jan 2025 07:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 18 07:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32EE93CA27E6FF387C0E1DA95D4CFCDD87C118DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:0d:87:74:39:1d:19:14:47:b1:7f:a8:0c:
6f:b6:27:60:25:f9:91:45:44:64:a8:ad:00:63:94:
58:0a:27:2a:f9:61:e2:49:04:a7:17:f9:5c:c7:2b:
af:eb:61:d4:3a:80:ce:e0:5e:0f:3e:d2:b5:1e:9d:
4d:29:62:4b:28:39:23:a9:20:ae:da:f9:8d:3e:bc:
e1:89:69:18:7d:21:b8:d3:e8:28:af:48:e3:cc:ff:
7c:76:7c:5f:8e:0e:c5:e4:cc:c0:3e:3c:18:ac:e4:
d2:df:d1:d4:7f:5d:b8:9e:77:1b:1b:e5:e5:e4:be:
21:03:f9:e1:bd:eb:ce:2b:7b:18:a7:27:fb:5c:18:
fa:11:e7:a0:df:3a:f9:9f:27:78:59:0d:29:77:19:
c5:13:fe:fa:ef:9d:8c:0b:c3:8a:6d:f1:f3:29:f2:
56:2e:3e:4b:5b:e0:da:7c:9d:cb:dd:77:3a:85:07:
ff:72:b7:1c:f3:8d:ff:9d:44:15:0f:4b:0c:9e:71:
bd:87:37:38:ca:8c:7a:0e:b7:05:0c:a0:a0:f7:79:
20:93:19:11:eb:8e:74:aa:6f:5e:ef:18:a0:4b:85:
ab:e8:42:d1:87:bf:a1:ed:62:2d:0f:4f:7f:a4:af:
59:77:db:f6:fb:28:0a:50:5b:f1:5a:94:9e:fc:66:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:93:CA:27:E6:FF:38:7C:0E:1D:A9:5D:4C:FC:DD:87:C1:18:DE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Mu6Tyifm_zh8Dh2pXUz83YfBGN4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8e:e2:56:67:e7:2d:6e:70:f3:49:92:4b:20:8a:4a:e8:84:
34:86:56:01:6a:42:c9:37:38:a3:70:e4:e4:55:90:db:e9:1e:
74:41:c7:cb:92:f7:6b:a6:63:4f:6e:f9:b6:8b:46:ed:71:c9:
a7:58:cd:76:3a:fa:8a:b9:89:96:32:6f:db:ba:84:66:5d:6a:
bd:62:72:e2:a6:02:0f:e0:ca:92:39:0f:b8:1f:08:8d:18:69:
84:3b:5a:1b:94:fa:4f:7e:24:ae:f2:20:74:f3:87:6d:4d:7d:
08:17:25:a2:54:c4:68:1a:68:a8:c5:94:d3:4f:e5:d0:e2:a3:
66:2c:5f:4b:25:16:71:84:5e:e0:f5:18:21:61:07:55:42:89:
10:9f:6d:5e:ff:17:7f:a0:0c:09:4c:e9:85:df:be:ed:69:2c:
7b:54:34:b0:d9:c2:15:2c:80:ba:1f:dc:d3:23:22:c2:5d:f6:
d2:00:a6:1e:ce:09:81:b0:fb:a4:5a:dc:05:ed:f0:9f:fb:72:
8f:1c:00:fa:04:05:51:8b:0c:da:ca:fb:d7:04:38:3e:60:92:
01:34:d0:fa:76:84:a0:7c:cd:dd:9d:40:e7:76:d3:23:f4:b0:
f9:91:32:25:3f:b4:84:63:f0:0c:fb:d7:0f:af:81:18:f5:b2:
b8:9a:94:37
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTgw
NzU1MDRaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDMyRUU5M0NBMjdFNkZG
Mzg3QzBFMURBOTVENENGQ0REODdDMTE4REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmJw2HdDkdGRRHsX+oDG+2J2Al+ZFFRGSorQBjlFgKJyr5YeJJ
BKcX+VzHK6/rYdQ6gM7gXg8+0rUenU0pYksoOSOpIK7a+Y0+vOGJaRh9IbjT6Civ
SOPM/3x2fF+ODsXkzMA+PBis5NLf0dR/Xbiedxsb5eXkviED+eG9684rexinJ/tc
GPoR56DfOvmfJ3hZDSl3GcUT/vrvnYwLw4pt8fMp8lYuPktb4Np8ncvddzqFB/9y
txzzjf+dRBUPSwyecb2HNzjKjHoOtwUMoKD3eSCTGRHrjnSqb17vGKBLhavoQtGH
v6HtYi0PT3+kr1l32/b7KApQW/FalJ78ZjsvAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUMu6Tyifm/zh8Dh2pXUz83YfBGN4wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL011NlR5aWZtX3poOERo
MnBYVXo4M1lmQkdONC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAHeO4lZn5y1ucPNJkksgikrohDSGVgFqQsk3
OKNw5ORVkNvpHnRBx8uS92umY09u+baLRu1xyadYzXY6+oq5iZYyb9u6hGZdar1i
cuKmAg/gypI5D7gfCI0YaYQ7WhuU+k9+JK7yIHTzh21NfQgXJaJUxGgaaKjFlNNP
5dDio2YsX0slFnGEXuD1GCFhB1VCiRCfbV7/F3+gDAlM6YXfvu1pLHtUNLDZwhUs
gLof3NMjIsJd9tIAph7OCYGw+6Ra3AXt8J/7co8cAPoEBVGLDNrK+9cEOD5gkgE0
0Pp2hKB8zd2dQOd20yP0sPmRMiU/tIRj8Az71w+vgRj1srialDc=
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:20:05 2025 by rpki-client