Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eNFlCzlgl2A-N9zeixSlwStmF48.roa
File: eNFlCzlgl2A-N9zeixSlwStmF48.roa (raw, json)
Hash identifier: tkN/TRBz08oPpYqNjGzrzHMKUvX6JUABq85CDYGdOZo=
Subject key identifier: 78:D1:65:0B:39:60:97:60:3E:37:DC:DE:8B:14:A5:C1:2B:66:17:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A40
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eNFlCzlgl2A-N9zeixSlwStmF48.roa
Signing time: Tue 26 Nov 2024 15:55:03 +0000
ROA not before: Tue 26 Nov 2024 15:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 26 15:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78D1650B396097603E37DCDE8B14A5C12B66178F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:e4:d9:5e:6e:31:14:50:c7:27:8f:20:0b:
e0:99:59:4b:ff:71:74:05:6d:c1:5c:8d:1a:01:80:
3f:84:fb:57:0d:e0:ae:6d:a2:8d:49:f6:bc:04:4f:
ad:52:0b:7d:c6:d0:64:cc:1d:69:df:80:e7:2f:cf:
dc:ba:ea:bd:b8:61:1f:cf:6b:ee:a1:06:0a:b3:1d:
9b:2d:e9:42:52:6f:82:4f:38:f7:e4:8a:f8:35:02:
82:f3:50:25:19:8b:41:d4:26:0d:6d:4c:e9:dc:8e:
06:59:e1:17:e0:e8:39:7c:5c:3f:82:72:de:11:34:
c4:35:a8:de:23:12:47:ff:f9:f3:44:c5:b8:10:49:
d1:50:df:c5:cf:a4:4a:df:a7:23:6a:01:be:57:52:
5b:1b:76:cb:b0:2a:4f:c9:7d:ca:bc:36:0b:e5:c8:
be:c0:91:16:e5:71:80:4c:36:d0:25:8a:a7:d4:af:
b8:91:34:98:82:ac:8d:5b:02:c6:6c:e2:e8:5d:48:
5f:b6:bb:eb:cc:cf:2e:85:4c:00:df:12:66:b6:02:
74:87:5a:7c:d1:ab:c8:98:52:c4:47:4f:de:a5:17:
1d:06:24:2f:8b:56:b5:d8:38:d6:ee:d1:b9:89:ce:
3c:8b:bd:b1:33:80:f8:ae:6e:f5:44:e9:65:1e:11:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:65:0B:39:60:97:60:3E:37:DC:DE:8B:14:A5:C1:2B:66:17:8F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eNFlCzlgl2A-N9zeixSlwStmF48.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a1:e2:f1:69:c9:52:de:08:c6:a4:7e:0b:f7:27:e5:f8:41:
b9:b1:c0:1e:01:1f:96:7b:7c:b5:a9:54:7c:bd:80:0a:36:a7:
9b:5c:ec:90:41:55:1d:f2:f1:39:ed:92:2e:c4:a0:ed:35:f6:
3b:2d:1e:6d:e1:06:0a:03:aa:a0:9f:70:3a:ff:2e:54:31:b2:
08:19:f1:29:7a:d4:8e:76:13:4d:fb:e6:cb:d3:98:06:1f:0a:
73:15:b8:e1:98:ea:92:12:05:10:15:76:f3:e1:4b:e8:14:2c:
7a:a8:f0:f0:65:52:73:59:ab:a8:35:24:05:13:8c:0c:6d:1e:
87:11:20:b9:34:13:62:a6:89:a3:07:bf:a9:e3:48:9b:db:1e:
4a:8c:b1:c4:dd:66:a4:d7:0b:0a:55:d5:0f:76:8a:2e:0c:b7:
0d:1a:7e:a2:fa:be:ee:2f:e0:f5:d6:19:10:0d:08:0c:88:a8:
2f:e7:ca:a3:a7:8d:6b:a7:3a:91:b4:42:5c:05:e6:5f:ed:71:
59:f0:77:93:c5:54:26:2f:7d:5f:bc:1d:62:35:5c:4e:ed:21:
f7:e3:17:79:47:e7:c6:dd:5f:db:20:3c:bc:64:c0:66:ec:d4:
c5:6e:02:e8:63:89:23:1f:cd:c1:f9:e2:d7:ef:9b:44:b3:cd:
7f:6c:4e:09
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMjYx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc4RDE2NTBCMzk2MDk3
NjAzRTM3RENERThCMTRBNUMxMkI2NjE3OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlrOTZXm4xFFDHJ48gC+CZWUv/cXQFbcFcjRoBgD+E+1cN4K5t
oo1J9rwET61SC33G0GTMHWnfgOcvz9y66r24YR/Pa+6hBgqzHZst6UJSb4JPOPfk
ivg1AoLzUCUZi0HUJg1tTOncjgZZ4Rfg6Dl8XD+Cct4RNMQ1qN4jEkf/+fNExbgQ
SdFQ38XPpErfpyNqAb5XUlsbdsuwKk/Jfcq8NgvlyL7AkRblcYBMNtAliqfUr7iR
NJiCrI1bAsZs4uhdSF+2u+vMzy6FTADfEma2AnSHWnzRq8iYUsRHT96lFx0GJC+L
VrXYONbu0bmJzjyLvbEzgPiubvVE6WUeEV87AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUeNFlCzlgl2A+N9zeixSlwStmF48wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2VORmxDemxnbDJBLU45
emVpeFNsd1N0bUY0OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACCh4vFpyVLeCMakfgv3J+X4QbmxwB4BH5Z7
fLWpVHy9gAo2p5tc7JBBVR3y8Tntki7EoO019jstHm3hBgoDqqCfcDr/LlQxsggZ
8Sl61I52E0375svTmAYfCnMVuOGY6pISBRAVdvPhS+gULHqo8PBlUnNZq6g1JAUT
jAxtHocRILk0E2KmiaMHv6njSJvbHkqMscTdZqTXCwpV1Q92ii4Mtw0afqL6vu4v
4PXWGRANCAyIqC/nyqOnjWunOpG0QlwF5l/tcVnwd5PFVCYvfV+8HWI1XE7tIffj
F3lH58bdX9sgPLxkwGbs1MVuAuhjiSMfzcH54tfvm0SzzX9sTgk=
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:40:41 2025 by rpki-client