Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aeC8oOg4AehWNLBnNaHC_CnwAPA.roa
File: aeC8oOg4AehWNLBnNaHC_CnwAPA.roa (raw, json)
Hash identifier: ChDHIWvaIONS95iyWnrbAiJw8Zp9mOujVDgY+zGt+aA=
Subject key identifier: 69:E0:BC:A0:E8:38:01:E8:56:34:B0:67:35:A1:C2:FC:29:F0:00:F0
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BE5
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aeC8oOg4AehWNLBnNaHC_CnwAPA.roa
Signing time: Sun 12 Jan 2025 07:55:02 +0000
ROA not before: Sun 12 Jan 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 12 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69E0BCA0E83801E85634B06735A1C2FC29F000F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:6f:46:ea:bf:d7:97:33:24:a8:3f:16:79:
d6:22:e1:8f:72:5c:c8:7c:80:50:56:ec:81:8a:40:
12:cd:ab:1b:35:e0:b8:95:c8:5b:17:43:a2:ff:9d:
d2:dd:b3:64:08:57:4c:a4:c6:56:2c:6f:9b:8c:3c:
82:21:a2:eb:53:be:12:cc:b2:81:fc:84:c1:bb:6c:
0b:f3:36:c3:bb:2f:8c:00:8b:5c:d3:12:dc:04:0c:
68:52:6f:6f:04:1c:ef:3b:87:4d:d9:5d:07:a2:7e:
bb:a5:35:3b:e1:06:d4:77:5d:c5:78:61:6b:7a:18:
72:94:c2:4a:2f:23:b0:80:b6:cd:d7:53:82:54:fc:
77:88:1c:02:38:75:6b:ea:c3:4e:0d:01:29:cf:32:
38:18:6e:6c:56:87:2c:a7:a3:09:e8:a8:96:d3:42:
37:04:c7:57:27:da:4f:11:a0:42:6f:e2:ac:e2:88:
68:88:d9:71:af:76:f1:78:68:2e:6b:46:24:14:78:
c5:6a:4a:20:aa:e5:94:4f:4b:de:7c:46:0d:e6:0f:
fe:a0:9c:51:24:68:a7:42:65:90:4d:f7:74:e0:fd:
48:30:cd:9e:60:88:5d:cb:2b:f3:49:de:5d:98:e9:
a7:fa:cf:6e:73:0a:83:ea:43:4c:22:d8:3e:06:d8:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:BC:A0:E8:38:01:E8:56:34:B0:67:35:A1:C2:FC:29:F0:00:F0
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aeC8oOg4AehWNLBnNaHC_CnwAPA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:62:1d:a3:53:52:0d:2c:3a:65:94:2a:e4:dc:6b:9e:67:0c:
6b:64:05:ff:0e:73:4b:bc:0c:9e:34:fd:5f:59:4b:bd:0b:45:
e6:b0:00:d3:41:2c:60:cb:a0:40:25:f4:ab:f8:76:b3:5a:e5:
e0:61:4e:c6:9b:b5:cc:54:5c:2a:13:4e:90:bc:eb:f1:40:b1:
90:86:29:2f:fb:25:15:29:68:3c:0e:c3:83:3f:fd:ba:99:5d:
a1:3d:e5:3a:af:7d:22:a6:29:40:b2:42:54:83:65:fc:d5:5d:
54:d6:8c:24:ba:de:18:3b:ce:77:64:ea:75:f0:79:c8:2e:c6:
0d:c1:5d:0a:37:65:8f:0a:37:12:a2:8b:1f:d6:ba:9e:ea:43:
e0:c8:88:4e:ff:84:4b:f2:fe:2e:23:f7:f0:d7:c7:a3:99:24:
ac:4c:fc:35:39:9a:a6:0d:91:29:e9:3b:08:4e:41:cf:e5:30:
c9:0b:cf:ca:2f:91:e0:3f:2f:24:f4:38:6c:45:72:96:74:af:
8f:a1:46:3b:86:92:71:27:4b:18:c1:75:0c:d9:a0:27:7f:e1:
1b:61:c4:43:b7:69:44:ce:a3:62:e7:4b:7b:6c:1c:f5:80:ba:
0b:0d:73:f0:f8:33:0c:47:ae:f5:d7:3d:f0:ca:ce:ad:46:ed:
f9:30:23:5a
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTIw
NzU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY5RTBCQ0EwRTgzODAx
RTg1NjM0QjA2NzM1QTFDMkZDMjlGMDAwRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoIG9G6r/XlzMkqD8WedYi4Y9yXMh8gFBW7IGKQBLNqxs14LiV
yFsXQ6L/ndLds2QIV0ykxlYsb5uMPIIhoutTvhLMsoH8hMG7bAvzNsO7L4wAi1zT
EtwEDGhSb28EHO87h03ZXQeifrulNTvhBtR3XcV4YWt6GHKUwkovI7CAts3XU4JU
/HeIHAI4dWvqw04NASnPMjgYbmxWhyynownoqJbTQjcEx1cn2k8RoEJv4qziiGiI
2XGvdvF4aC5rRiQUeMVqSiCq5ZRPS958Rg3mD/6gnFEkaKdCZZBN93Tg/UgwzZ5g
iF3LK/NJ3l2Y6af6z25zCoPqQ0wi2D4G2ISLAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUaeC8oOg4AehWNLBnNaHC/CnwAPAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2FlQzhvT2c0QWVoV05M
Qm5OYUhDX0Nud0FQQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAKZiHaNTUg0sOmWUKuTca55nDGtkBf8Oc0u8
DJ40/V9ZS70LReawANNBLGDLoEAl9Kv4drNa5eBhTsabtcxUXCoTTpC86/FAsZCG
KS/7JRUpaDwOw4M//bqZXaE95TqvfSKmKUCyQlSDZfzVXVTWjCS63hg7zndk6nXw
ecguxg3BXQo3ZY8KNxKiix/Wup7qQ+DIiE7/hEvy/i4j9/DXx6OZJKxM/DU5mqYN
kSnpOwhOQc/lMMkLz8ovkeA/LyT0OGxFcpZ0r4+hRjuGknEnSxjBdQzZoCd/4Rth
xEO3aUTOo2LnS3tsHPWAugsNc/D4MwxHrvXXPfDKzq1G7fkwI1o=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:05 2025 by rpki-client