Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa
File: SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa (raw, json)
Hash identifier: teYSzL6LBffELUiQfhk5hZtwJCccKNwJx5j1ow9dofk=
Subject key identifier: 49:76:BE:45:FC:E2:DA:D7:83:5B:FC:40:BD:30:7D:6F:B4:0C:C9:F6
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0ADF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa
Signing time: Sat 14 Dec 2024 07:55:05 +0000
ROA not before: Sat 14 Dec 2024 07:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 14 07:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4976BE45FCE2DAD7835BFC40BD307D6FB40CC9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:ab:cd:e7:9b:b5:47:b8:37:5b:33:78:5b:
83:61:c7:81:1b:40:ef:98:57:50:10:d3:d4:26:7a:
4b:a3:c6:3a:ba:9f:42:7f:13:ab:b0:5f:c0:b9:e0:
3e:91:6c:60:61:80:ed:b0:0f:21:5c:b7:a9:61:3f:
b3:bc:87:95:eb:3f:1f:80:5d:5f:1a:0c:22:81:41:
5d:55:b7:4e:c0:65:71:8f:4c:83:fe:ed:5a:4d:a8:
71:75:b9:0d:45:95:9b:78:a0:02:95:c9:95:d9:c3:
88:3e:b5:e8:4f:ad:a4:34:10:b4:7a:db:0f:42:63:
4b:2c:13:29:a2:33:74:3b:76:40:ce:d6:03:78:ad:
9c:00:e1:97:34:d0:8e:4b:9d:fb:ba:48:28:ec:f7:
c1:65:38:aa:18:11:30:db:6b:4a:01:6a:ca:7e:c2:
e7:35:9d:fa:9d:4f:f9:0a:46:d3:23:0c:57:3f:3f:
bf:f5:59:c1:db:87:d4:5a:0e:a9:90:28:3d:8f:7f:
7e:40:be:ee:01:9c:ce:88:a8:74:34:77:44:c4:df:
15:3b:18:74:9c:5e:a1:bd:86:b3:a1:e5:95:73:27:
37:4d:60:24:05:ab:94:2b:7a:d6:ab:bc:3c:91:af:
9a:07:ec:d0:ea:2c:97:90:bf:a1:e1:5a:35:db:58:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:BE:45:FC:E2:DA:D7:83:5B:FC:40:BD:30:7D:6F:B4:0C:C9:F6
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:85:c3:39:0f:7e:1b:e6:11:24:ab:5e:97:3d:41:f7:61:86:
c2:2d:29:a5:52:16:5e:42:a3:79:92:65:bf:0c:17:fb:e2:6b:
3a:14:9b:12:2b:ab:d7:f3:bc:b5:43:6c:a8:8d:3a:7c:8e:aa:
a1:01:64:c0:1c:d7:db:0a:63:a2:94:65:77:d6:41:aa:07:3c:
b4:78:fb:e5:9a:1f:70:3b:83:94:c9:f0:60:98:cf:73:87:e3:
a3:e3:36:74:81:37:1e:a1:b7:14:03:80:f3:e4:bd:14:0e:7f:
bf:e3:59:c5:b3:9e:91:25:c8:58:7e:67:f2:d7:a5:42:88:f4:
6d:cf:11:c1:d7:4d:4a:63:ae:97:9c:41:f0:a2:98:8e:e6:60:
f1:35:71:23:38:57:da:1d:99:36:8b:1a:31:14:fd:a5:7b:69:
58:59:2c:ac:e2:10:df:74:0f:a2:40:29:75:19:be:c2:5e:3c:
98:37:ef:90:3d:76:86:33:a2:c5:1d:ac:12:ed:da:fa:3b:d6:
8c:c5:75:c8:d6:cd:04:fa:ef:c2:00:2e:02:cb:1c:25:0a:45:
30:31:2c:8f:8e:c1:57:48:81:f0:03:be:53:7a:71:90:c9:49:
06:3d:06:ec:68:40:e4:23:13:6e:a8:af:ac:dd:81:79:e3:df:
bf:0e:88:b2
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTQw
NzU1MDVaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ5NzZCRTQ1RkNFMkRB
RDc4MzVCRkM0MEJEMzA3RDZGQjQwQ0M5RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNmqvN55u1R7g3WzN4W4Nhx4EbQO+YV1AQ09Qmekujxjq6n0J/
E6uwX8C54D6RbGBhgO2wDyFct6lhP7O8h5XrPx+AXV8aDCKBQV1Vt07AZXGPTIP+
7VpNqHF1uQ1FlZt4oAKVyZXZw4g+tehPraQ0ELR62w9CY0ssEymiM3Q7dkDO1gN4
rZwA4Zc00I5Lnfu6SCjs98FlOKoYETDba0oBasp+wuc1nfqdT/kKRtMjDFc/P7/1
WcHbh9RaDqmQKD2Pf35Avu4BnM6IqHQ0d0TE3xU7GHScXqG9hrOh5ZVzJzdNYCQF
q5QretarvDyRr5oH7NDqLJeQv6HhWjXbWMGHAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUSXa+Rfzi2teDW/xAvTB9b7QMyfYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1NYYS1SZnppMnRlRFdf
eEF2VEI5YjdRTXlmWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAC+FwzkPfhvmESSrXpc9QfdhhsItKaVSFl5C
o3mSZb8MF/viazoUmxIrq9fzvLVDbKiNOnyOqqEBZMAc19sKY6KUZXfWQaoHPLR4
++WaH3A7g5TJ8GCYz3OH46PjNnSBNx6htxQDgPPkvRQOf7/jWcWznpElyFh+Z/LX
pUKI9G3PEcHXTUpjrpecQfCimI7mYPE1cSM4V9odmTaLGjEU/aV7aVhZLKziEN90
D6JAKXUZvsJePJg375A9doYzosUdrBLt2vo71ozFdcjWzQT678IALgLLHCUKRTAx
LI+OwVdIgfADvlN6cZDJSQY9BuxoQOQjE26or6zdgXnj378OiLI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:18 2025 by rpki-client