Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/QV1VddAh6KIh6Qqs4u5d4DPGGBE.roa
File: QV1VddAh6KIh6Qqs4u5d4DPGGBE.roa (raw, json)
Hash identifier: /oWCIfelQ9COlTtjjtWsbErWRFcjgQqUp7oV4tWFasc=
Subject key identifier: 41:5D:55:75:D0:21:E8:A2:21:E9:0A:AC:E2:EE:5D:E0:33:C6:18:11
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A8E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QV1VddAh6KIh6Qqs4u5d4DPGGBE.roa
Signing time: Thu 05 Dec 2024 07:55:02 +0000
ROA not before: Thu 05 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2702 (0xa8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 5 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=415D5575D021E8A221E90AACE2EE5DE033C61811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:33:f4:60:fe:96:2d:99:75:f1:ed:03:ec:
3a:64:f7:0b:14:1b:a2:ad:2f:2c:92:c9:c4:35:94:
16:d8:a0:1b:0c:91:08:06:db:29:b0:40:b6:59:16:
25:38:45:df:5f:80:25:d2:15:c1:ab:f4:be:c1:a1:
89:70:3c:02:91:58:25:43:b3:03:72:49:f2:ae:eb:
f1:5f:11:af:78:eb:eb:30:29:9d:95:df:c1:f7:89:
55:c5:2b:81:90:22:cb:82:56:a2:52:f7:aa:ae:25:
bf:ef:0e:cf:d2:e0:4c:24:ff:5d:93:cd:6a:4f:24:
76:e3:3b:6b:6b:44:d7:56:e6:ea:1e:ee:62:c4:ff:
18:1d:64:56:5e:75:73:ca:d3:6a:cd:f3:6c:f9:77:
1f:93:65:87:c3:7f:3c:74:ba:b3:44:92:44:b1:d8:
43:4a:2b:df:20:f2:a2:2a:ff:25:d0:a6:f0:a2:b2:
20:fe:cd:ce:bd:c2:8a:36:55:71:28:99:df:e0:18:
9b:f6:49:cf:ce:18:e2:ff:70:01:ac:7c:4b:4c:55:
c5:bd:dc:3a:68:04:53:63:a3:1e:6b:9b:a7:e8:63:
8e:9c:10:45:72:be:d9:9c:25:90:e7:d1:98:a5:9d:
6e:24:a9:b8:13:94:42:d2:55:b3:80:e0:91:15:f7:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:55:75:D0:21:E8:A2:21:E9:0A:AC:E2:EE:5D:E0:33:C6:18:11
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/QV1VddAh6KIh6Qqs4u5d4DPGGBE.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:06:cd:f0:f9:4b:8d:44:f1:39:74:7b:f1:07:47:ac:c6:a9:
b2:84:d0:1b:f9:35:b8:10:f1:67:2a:f3:8e:43:25:74:86:69:
76:54:73:af:eb:c8:94:4b:8a:48:ba:e7:aa:66:b1:ae:4a:df:
53:5e:93:f6:53:d4:77:9c:57:66:0d:ab:7c:de:21:a0:72:80:
32:92:e0:a2:c0:22:41:bf:be:d4:a3:65:3b:bc:1c:35:65:54:
74:ab:70:50:69:db:5d:38:0a:e0:26:77:82:0e:c1:e0:e9:68:
0c:89:d1:f7:29:6a:30:ba:bc:fe:3b:44:fa:9c:1a:40:23:ad:
c6:68:e5:59:68:b5:1e:6a:e9:27:e2:a1:3e:51:6e:da:2a:2a:
04:65:89:ff:56:86:bb:fb:0e:13:e7:1e:f9:ba:62:e8:ec:ef:
4a:f0:88:d9:b7:b6:5f:e8:a1:cf:74:5f:a2:dd:2f:76:b7:4c:
c1:52:c7:c4:15:40:0d:07:ca:1d:9e:b3:14:fa:7b:1d:64:ef:
28:56:31:20:88:54:1d:e8:01:cc:40:c5:2d:cb:de:f0:54:e9:
ea:26:bf:81:31:53:b4:2e:c1:8b:70:c2:b6:1c:76:fc:af:ee:
9f:ad:84:2c:38:9f:93:b3:6b:d9:94:9e:35:2f:fa:f7:8e:10:
42:bc:33:68
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMDUw
NzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQxNUQ1NTc1RDAyMUU4
QTIyMUU5MEFBQ0UyRUU1REUwMzNDNjE4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWeTP0YP6WLZl18e0D7Dpk9wsUG6KtLyySycQ1lBbYoBsMkQgG
2ymwQLZZFiU4Rd9fgCXSFcGr9L7BoYlwPAKRWCVDswNySfKu6/FfEa946+swKZ2V
38H3iVXFK4GQIsuCVqJS96quJb/vDs/S4Ewk/12TzWpPJHbjO2trRNdW5uoe7mLE
/xgdZFZedXPK02rN82z5dx+TZYfDfzx0urNEkkSx2ENKK98g8qIq/yXQpvCisiD+
zc69woo2VXEomd/gGJv2Sc/OGOL/cAGsfEtMVcW93DpoBFNjox5rm6foY46cEEVy
vtmcJZDn0ZilnW4kqbgTlELSVbOA4JEV97gNAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUQV1VddAh6KIh6Qqs4u5d4DPGGBEwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1FWMVZkZEFoNktJaDZR
cXM0dTVkNERQR0dCRS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBABQGzfD5S41E8Tl0e/EHR6zGqbKE0Bv5NbgQ
8Wcq845DJXSGaXZUc6/ryJRLiki656pmsa5K31Nek/ZT1HecV2YNq3zeIaBygDKS
4KLAIkG/vtSjZTu8HDVlVHSrcFBp2104CuAmd4IOweDpaAyJ0fcpajC6vP47RPqc
GkAjrcZo5VlotR5q6SfioT5RbtoqKgRlif9Whrv7DhPnHvm6Yujs70rwiNm3tl/o
oc90X6LdL3a3TMFSx8QVQA0Hyh2esxT6ex1k7yhWMSCIVB3oAcxAxS3L3vBU6eom
v4ExU7QuwYtwwrYcdvyv7p+thCw4n5Oza9mUnjUv+veOEEK8M2g=
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:41:19 2025 by rpki-client