Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/OIRqXfkOmQ-GYXM9yqoGJ5iPq8Y.roa
File: OIRqXfkOmQ-GYXM9yqoGJ5iPq8Y.roa (raw, json)
Hash identifier: eeQo/aXubq7buoGOcGff1dOciotLlcbw6I/TXyhMctY=
Subject key identifier: 38:84:6A:5D:F9:0E:99:0F:86:61:73:3D:CA:AA:06:27:98:8F:AB:C6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0CB1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OIRqXfkOmQ-GYXM9yqoGJ5iPq8Y.roa
Signing time: Mon 03 Feb 2025 23:55:03 +0000
ROA not before: Mon 03 Feb 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Feb 3 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38846A5DF90E990F8661733DCAAA0627988FABC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:8f:4d:84:ea:57:58:86:e3:a7:3b:12:53:
d3:44:e1:4f:56:31:5a:73:a8:8a:8d:5a:15:cc:9e:
99:1d:99:1b:c2:80:24:1a:ae:80:94:68:1e:9e:f3:
bf:f0:fa:d4:08:9c:18:76:75:cf:4c:d4:56:bb:3e:
c0:14:21:63:6d:15:49:52:f6:4e:6b:23:1f:8d:b5:
9b:f6:fd:87:79:fe:07:35:da:e3:18:4d:f7:c4:ac:
cc:ee:22:14:6c:8f:2e:45:50:f7:3b:c4:6e:97:b1:
00:a1:1c:70:69:2d:df:07:c7:7d:7e:f4:dc:4f:3a:
aa:ba:8d:9f:89:08:53:9a:ac:9e:6f:31:64:f0:8e:
fc:bf:20:90:6d:ca:c2:e6:94:9d:40:5c:b4:67:0b:
61:9d:d5:1e:a6:2f:66:4e:29:8c:04:b6:62:d7:e7:
a5:b9:6e:5a:ab:3e:e2:f3:dc:95:ba:ac:ce:32:97:
92:e1:f2:91:e9:af:81:29:19:9f:47:4d:85:8f:3e:
01:12:04:8d:b5:57:a5:a7:fa:e8:d3:3f:b8:2d:a0:
04:bf:c5:d7:00:2f:e3:ab:90:03:e1:f4:9a:9a:bc:
56:c8:38:fb:45:8c:d9:91:29:0f:34:49:75:8c:21:
8c:aa:d2:41:eb:3f:0c:b8:a4:09:49:90:10:c4:0f:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:6A:5D:F9:0E:99:0F:86:61:73:3D:CA:AA:06:27:98:8F:AB:C6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/OIRqXfkOmQ-GYXM9yqoGJ5iPq8Y.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:cf:b0:8d:2a:ac:42:92:7b:c2:30:09:f9:e9:e2:38:bd:ba:
e2:46:44:b5:88:38:83:74:de:72:c4:47:0d:75:30:2e:87:c0:
40:46:7e:52:e0:d7:0e:b6:5c:59:c3:a4:7a:8c:0a:8c:78:c6:
09:68:7c:61:93:71:6b:a6:66:f7:cd:b0:7f:1b:e3:58:6c:41:
e7:c9:49:0d:8e:d9:b0:89:71:d2:2c:36:0d:48:d5:97:d2:b5:
e5:0e:26:b9:fe:41:08:41:2b:98:93:59:95:6d:47:2a:41:8d:
16:36:ff:97:0f:69:40:a4:8c:07:84:59:2c:ec:32:32:ce:1b:
21:fe:a1:94:05:18:0f:42:ce:f8:96:57:ef:96:8f:8e:f2:4f:
e3:f7:c8:56:b6:cf:53:59:5b:84:d9:68:55:d3:8a:3c:01:c1:
6e:59:48:ab:58:6a:db:0a:64:4d:f3:fb:8e:a3:ec:80:08:61:
2b:ab:11:4b:a9:33:66:65:9c:a2:a4:ef:d0:18:50:7f:9b:fe:
2c:a8:33:7b:cd:08:2f:c0:36:a5:2f:be:80:eb:cb:3d:4a:28:
fd:93:8f:cb:ed:7b:90:48:28:5b:24:58:30:6d:6e:3a:a5:7f:
89:34:04:e8:d1:64:a9:33:af:51:8a:7e:63:36:f0:ea:bc:a9:
c3:35:6c:5a
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAyMDMy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDM4ODQ2QTVERjkwRTk5
MEY4NjYxNzMzRENBQUEwNjI3OTg4RkFCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCi49NhOpXWIbjpzsSU9NE4U9WMVpzqIqNWhXMnpkdmRvCgCQa
roCUaB6e87/w+tQInBh2dc9M1Fa7PsAUIWNtFUlS9k5rIx+NtZv2/Yd5/gc12uMY
TffErMzuIhRsjy5FUPc7xG6XsQChHHBpLd8Hx31+9NxPOqq6jZ+JCFOarJ5vMWTw
jvy/IJBtysLmlJ1AXLRnC2Gd1R6mL2ZOKYwEtmLX56W5blqrPuLz3JW6rM4yl5Lh
8pHpr4EpGZ9HTYWPPgESBI21V6Wn+ujTP7gtoAS/xdcAL+OrkAPh9JqavFbIOPtF
jNmRKQ80SXWMIYyq0kHrPwy4pAlJkBDED8etAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUOIRqXfkOmQ+GYXM9yqoGJ5iPq8YwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL09JUnFYZmtPbVEtR1lY
TTl5cW9HSjVpUHE4WS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANjPsI0qrEKSe8IwCfnp4ji9uuJGRLWIOIN0
3nLERw11MC6HwEBGflLg1w62XFnDpHqMCox4xglofGGTcWumZvfNsH8b41hsQefJ
SQ2O2bCJcdIsNg1I1ZfSteUOJrn+QQhBK5iTWZVtRypBjRY2/5cPaUCkjAeEWSzs
MjLOGyH+oZQFGA9CzviWV++Wj47yT+P3yFa2z1NZW4TZaFXTijwBwW5ZSKtYatsK
ZE3z+46j7IAIYSurEUupM2ZlnKKk79AYUH+b/iyoM3vNCC/ANqUvvoDryz1KKP2T
j8vte5BIKFskWDBtbjqlf4k0BOjRZKkzr1GKfmM28Oq8qcM1bFo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:12:30 2025 by rpki-client