Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Zh4ZxzO_hjJ4DD9DknnU67kwVgc.roa
File: Zh4ZxzO_hjJ4DD9DknnU67kwVgc.roa (raw, json)
Hash identifier: 0fxGPECPOiJY8Bi3v4jqAttyY997LnMJUToeVKYRqfA=
Subject key identifier: 66:1E:19:C7:33:BF:86:32:78:0C:3F:43:92:79:D4:EB:B9:30:56:07
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C6C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Zh4ZxzO_hjJ4DD9DknnU67kwVgc.roa
Signing time: Mon 27 Jan 2025 07:55:03 +0000
ROA not before: Mon 27 Jan 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 27 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661E19C733BF8632780C3F439279D4EBB9305607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:50:2e:03:8f:d9:d7:f5:f4:f2:b0:fc:f6:
05:dd:19:41:41:c7:a1:96:56:0f:83:09:f0:21:0f:
ae:f4:ee:07:64:13:ae:4d:0c:5d:3a:24:60:2a:1c:
0d:ad:94:e8:f4:66:d9:ed:6f:e5:79:86:c9:86:db:
7d:22:7e:32:0d:5f:0c:01:f0:cf:77:e2:43:29:75:
76:6e:3a:9f:27:59:c6:3e:b2:c5:d3:f1:56:e3:f9:
af:bd:d8:a7:54:20:b5:ca:bd:84:ed:e5:8e:b3:08:
17:9d:bf:68:4b:3f:74:68:d5:2b:39:f6:dd:d0:2c:
4c:b9:e7:d2:ae:ee:f6:20:68:06:ba:a6:0f:68:4c:
b9:b7:99:22:f4:8c:92:d3:09:f3:92:5c:ef:a2:38:
9e:5a:8b:06:31:4f:08:e1:19:61:a7:0a:66:45:45:
63:55:ea:15:f2:df:f7:91:02:88:d9:db:2d:6a:36:
4d:ab:56:bc:b4:7c:fc:a2:76:40:14:d2:80:6e:19:
71:dc:c4:0c:89:8b:46:e4:25:a0:d1:99:c8:1b:51:
1b:90:6f:ec:65:6d:9d:ee:18:58:2a:1d:19:dd:c3:
81:de:2d:bc:40:c2:a5:41:33:23:a9:2f:c2:d3:0a:
a2:b1:c3:24:52:8a:dd:25:e9:c3:3f:74:64:22:3a:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:19:C7:33:BF:86:32:78:0C:3F:43:92:79:D4:EB:B9:30:56:07
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Zh4ZxzO_hjJ4DD9DknnU67kwVgc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5f:b0:22:09:78:36:c3:df:91:07:5b:b0:fc:70:1d:9c:8b:
a6:a7:20:80:da:19:ac:1d:9a:8c:62:6e:2c:56:4d:84:b6:20:
16:6e:09:73:23:f1:c3:0a:10:20:5f:d7:72:14:63:a3:35:84:
1b:a2:b5:16:16:1b:b5:46:da:23:d8:78:b2:01:7f:4e:25:de:
97:e6:de:f8:ee:8d:72:57:5b:2c:e4:9c:75:30:48:19:87:11:
02:b2:ab:fe:b9:78:52:3e:0b:f2:74:c7:e4:90:05:3a:98:93:
72:d2:99:63:59:14:c5:63:6a:50:6d:c4:1e:b3:20:c2:24:56:
0b:fd:b0:e4:82:9f:16:0e:87:7b:fd:9b:80:b7:d8:d7:b1:ba:
1d:58:55:d3:a9:96:f4:98:3a:84:35:f1:fe:86:47:b9:d7:71:
26:9f:d5:bc:5c:0a:60:3c:c6:cf:af:99:a7:2f:8f:9c:f8:e8:
b3:d6:5f:c7:18:0a:a7:b4:2d:56:83:4f:f0:45:73:69:8c:f1:
a3:db:7f:d8:ed:84:fc:29:9e:a7:ad:c2:db:4e:ba:7d:8d:73:
79:8c:b3:d7:0c:1d:3d:b4:15:5f:f9:1b:ec:c5:96:22:e4:23:
4f:01:88:b3:ff:51:7d:da:e7:e3:13:90:3e:45:b4:54:26:e8:
6e:fe:b5:7c
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjcw
NzU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY2MUUxOUM3MzNCRjg2
MzI3ODBDM0Y0MzkyNzlENEVCQjkzMDU2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUnVAuA4/Z1/X08rD89gXdGUFBx6GWVg+DCfAhD6707gdkE65N
DF06JGAqHA2tlOj0Ztntb+V5hsmG230ifjINXwwB8M934kMpdXZuOp8nWcY+ssXT
8Vbj+a+92KdUILXKvYTt5Y6zCBedv2hLP3Ro1Ss59t3QLEy559Ku7vYgaAa6pg9o
TLm3mSL0jJLTCfOSXO+iOJ5aiwYxTwjhGWGnCmZFRWNV6hXy3/eRAojZ2y1qNk2r
Vry0fPyidkAU0oBuGXHcxAyJi0bkJaDRmcgbURuQb+xlbZ3uGFgqHRndw4HeLbxA
wqVBMyOpL8LTCqKxwyRSit0l6cM/dGQiOicdAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUZh4ZxzO/hjJ4DD9DknnU67kwVgcwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1poNFp4ek9faGpKNERE
OURrbm5VNjdrd1ZnYy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAL5fsCIJeDbD35EHW7D8cB2ci6anIIDaGawd
moxibixWTYS2IBZuCXMj8cMKECBf13IUY6M1hBuitRYWG7VG2iPYeLIBf04l3pfm
3vjujXJXWyzknHUwSBmHEQKyq/65eFI+C/J0x+SQBTqYk3LSmWNZFMVjalBtxB6z
IMIkVgv9sOSCnxYOh3v9m4C32Nexuh1YVdOplvSYOoQ18f6GR7nXcSaf1bxcCmA8
xs+vmacvj5z46LPWX8cYCqe0LVaDT/BFc2mM8aPbf9jthPwpnqetwttOun2Nc3mM
s9cMHT20FV/5G+zFliLkI08BiLP/UX3a5+MTkD5FtFQm6G7+tXw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:00 2025 by rpki-client