Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa
File: eBrVmT0kQMFwSDJES03N7rm7tHA.roa (raw, json)
Hash identifier: SpX81bgb08Vw3ips/eDd540yRxK5o3H0gSt02WtkKu0=
Subject key identifier: 78:1A:D5:99:3D:24:40:C1:70:48:32:44:4B:4D:CD:EE:B9:BB:B4:70
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C48
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa
Signing time: Thu 23 Jan 2025 07:55:02 +0000
ROA not before: Thu 23 Jan 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 23 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=781AD5993D2440C1704832444B4DCDEEB9BBB470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:04:17:a9:73:5b:00:3c:12:2f:d3:6c:e5:
11:95:db:0a:f0:f9:ac:02:21:7b:36:4b:2a:20:fc:
98:df:d3:e1:56:fd:83:47:39:20:82:f0:b5:6a:7f:
fd:1e:86:ac:e1:b0:f7:3d:42:48:70:4c:bd:d5:2f:
9c:58:7e:4e:af:4c:7b:c9:5a:18:4d:be:c0:db:aa:
ca:4c:fa:4f:89:bd:24:44:d4:72:fb:1a:84:21:3c:
b6:e7:47:3b:af:49:01:f8:44:e9:22:ac:5d:de:c3:
f7:fc:95:a8:08:78:1e:9a:96:f9:4e:43:14:82:27:
97:0a:19:93:d8:b9:00:da:5f:cb:47:6d:12:57:eb:
22:3b:bd:a5:5e:4d:06:af:a4:ff:aa:5f:76:e0:d8:
fa:7a:5d:52:29:e8:b6:ee:e0:84:0f:a2:cb:29:99:
14:c4:f5:82:dc:06:c1:46:0c:01:a8:f8:c8:91:81:
6e:69:c7:ee:0d:f3:57:29:a2:38:de:c4:e9:b9:de:
46:ed:e5:b9:68:70:f4:f0:11:18:ee:b1:a4:87:a5:
5f:34:67:f5:cd:39:a0:ac:d8:e2:5d:55:2d:52:1b:
a3:1a:e4:cb:9f:e8:f9:8e:a9:78:18:5f:e3:b4:16:
56:ee:e7:6f:94:cf:7b:19:2f:cc:e5:01:d6:93:51:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1A:D5:99:3D:24:40:C1:70:48:32:44:4B:4D:CD:EE:B9:BB:B4:70
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b6:07:9f:3b:8e:fb:80:6a:9c:d1:f6:4f:c4:9a:bd:c7:7e:
df:92:30:35:86:dd:e1:f1:0b:fd:2a:23:ff:d5:3b:19:d2:20:
35:17:02:0a:80:6d:f9:74:d3:88:7d:2f:6d:61:3c:d8:1a:ed:
41:9f:a6:62:97:2e:d0:47:1c:7c:6f:7f:64:39:c0:ff:a6:d1:
72:33:0d:f6:71:c8:2c:7d:48:9c:cf:e0:88:a3:ef:32:9f:63:
32:fe:23:9d:26:d8:e0:ae:63:20:f7:ca:a5:89:60:e3:c6:09:
47:66:86:30:5b:0a:20:b8:98:5c:7d:08:db:d1:ca:f2:95:25:
fc:35:c3:25:67:bc:a6:82:1b:7b:74:73:12:cb:0e:56:f5:e9:
36:8a:40:9a:be:8b:6e:14:c6:29:d9:dd:09:fa:3d:97:b2:37:
e1:52:8f:a4:d6:56:ad:0e:0d:40:c5:11:5d:45:44:ae:59:df:
96:15:3c:1a:24:3c:24:a3:eb:71:06:7c:97:57:00:ce:1c:30:
42:fe:ac:aa:89:c0:dc:ed:1b:1b:08:3a:be:1a:00:58:0a:35:
35:fc:27:72:c6:8a:f8:26:12:91:6e:e2:87:cb:82:3d:80:96:
0e:11:60:b2:dd:47:87:1d:a6:ce:e2:23:40:a4:fe:d4:1e:13:
a3:ad:dc:04
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjMw
NzU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc4MUFENTk5M0QyNDQw
QzE3MDQ4MzI0NDRCNERDREVFQjlCQkI0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvSAQXqXNbADwSL9Ns5RGV2wrw+awCIXs2Syog/Jjf0+FW/YNH
OSCC8LVqf/0ehqzhsPc9QkhwTL3VL5xYfk6vTHvJWhhNvsDbqspM+k+JvSRE1HL7
GoQhPLbnRzuvSQH4ROkirF3ew/f8lagIeB6alvlOQxSCJ5cKGZPYuQDaX8tHbRJX
6yI7vaVeTQavpP+qX3bg2Pp6XVIp6Lbu4IQPosspmRTE9YLcBsFGDAGo+MiRgW5p
x+4N81cpojjexOm53kbt5blocPTwERjusaSHpV80Z/XNOaCs2OJdVS1SG6Ma5Muf
6PmOqXgYX+O0Flbu52+Uz3sZL8zlAdaTUdJ3AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUeBrVmT0kQMFwSDJES03N7rm7tHAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2VCclZtVDBrUU1Gd1NE
SkVTMDNON3JtN3RIQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAH62B587jvuAapzR9k/Emr3Hft+SMDWG3eHx
C/0qI//VOxnSIDUXAgqAbfl004h9L21hPNga7UGfpmKXLtBHHHxvf2Q5wP+m0XIz
DfZxyCx9SJzP4Iij7zKfYzL+I50m2OCuYyD3yqWJYOPGCUdmhjBbCiC4mFx9CNvR
yvKVJfw1wyVnvKaCG3t0cxLLDlb16TaKQJq+i24UxinZ3Qn6PZeyN+FSj6TWVq0O
DUDFEV1FRK5Z35YVPBokPCSj63EGfJdXAM4cMEL+rKqJwNztGxsIOr4aAFgKNTX8
J3LGivgmEpFu4ofLgj2Alg4RYLLdR4cdps7iI0Ck/tQeE6Ot3AQ=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:17:19 2025 by rpki-client