Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/etu137lS8BcmHayt159WbutmRRM.roa
File: etu137lS8BcmHayt159WbutmRRM.roa (raw, json)
Hash identifier: PqXeT8+bgx5hWkkjRcBsAbBgtcwqk7R9fAi+cGKyflo=
Subject key identifier: 7A:DB:B5:DF:B9:52:F0:17:26:1D:AC:AD:D7:9F:56:6E:EB:66:45:13
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C1E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/etu137lS8BcmHayt159WbutmRRM.roa
Signing time: Sat 18 Jan 2025 15:55:03 +0000
ROA not before: Sat 18 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 18 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ADBB5DFB952F017261DACADD79F566EEB664513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:eb:4a:32:d8:49:0d:2e:84:ef:50:98:50:
60:79:8a:fd:5c:24:97:b1:24:1a:09:b9:1c:9f:96:
38:df:a0:72:d6:d8:d3:7c:c1:ba:2a:7f:e3:f5:0c:
f6:74:a2:c6:35:b4:2f:af:00:24:6b:05:63:10:26:
de:6c:83:a6:6c:93:be:64:e6:4f:28:66:54:1e:69:
ed:dc:a3:d4:f1:64:56:80:52:c2:f7:df:c9:e9:d7:
db:08:fe:16:4f:d6:39:27:a2:0a:81:a7:45:6e:69:
b9:36:8a:52:3e:19:18:42:b4:5e:d7:d2:33:8c:72:
4a:5b:34:ad:fe:13:4a:17:e4:c6:40:d5:4d:5d:fa:
e9:f0:9d:19:bc:9c:6c:69:39:0d:66:34:da:d4:48:
37:a7:e9:63:d6:b5:4c:24:28:a0:10:63:10:74:de:
7a:1f:1c:e5:4a:2b:d0:d5:eb:5f:06:d9:e1:c2:ca:
21:b8:a4:95:4a:ab:63:e5:31:ea:f3:99:68:6e:2a:
65:88:59:2b:7e:e8:c4:10:c3:23:28:c0:d6:1c:13:
34:e0:45:8b:e7:78:86:b3:15:9a:47:31:d1:4e:ce:
f0:27:f5:83:a6:4b:64:13:ea:8b:65:22:3b:22:4a:
e4:13:67:12:9c:ba:09:3c:45:af:d7:f8:cc:b3:bd:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:B5:DF:B9:52:F0:17:26:1D:AC:AD:D7:9F:56:6E:EB:66:45:13
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/etu137lS8BcmHayt159WbutmRRM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
60:eb:15:f7:bf:78:5a:3c:7d:c8:46:d9:90:e9:c5:80:77:47:
99:ed:8e:66:96:39:84:54:6d:2a:2a:19:fb:b8:f3:b7:ab:c9:
e7:cc:e0:f7:85:62:36:60:bf:d6:88:07:fb:51:45:13:94:6c:
f3:9b:ba:ec:e9:f0:b4:79:be:47:f7:03:91:06:6f:2f:5d:3d:
1c:89:a3:ad:04:5f:02:1a:22:6d:81:99:4b:9f:8e:e7:2d:b8:
ea:40:44:ca:9d:8b:9a:ad:dc:f1:21:ec:04:a0:aa:be:17:2e:
46:c3:fc:9f:92:14:1d:71:94:f1:23:40:38:40:29:5e:8f:91:
9b:6a:51:13:f7:89:5f:71:3e:88:80:cf:8b:ad:26:59:46:18:
fd:c5:c8:e2:de:ac:d4:b5:bf:82:ce:05:03:d8:21:72:17:92:
0f:de:58:22:30:d9:f6:80:81:f0:7f:a6:c2:80:c2:5b:16:bd:
83:d1:40:76:4e:53:cf:0e:cd:2e:2b:a1:d5:39:15:8a:ed:e2:
49:55:70:14:c6:f9:a5:5b:1c:5b:a9:8e:82:96:1e:ee:85:86:
94:fa:31:40:8e:34:75:a8:95:fa:df:a5:e9:df:c1:fd:ec:42:
a8:72:30:0b:51:95:04:18:20:48:27:e8:f2:29:48:53:92:27:
6a:fb:64:5d
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTgx
NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdBREJCNURGQjk1MkYw
MTcyNjFEQUNBREQ3OUY1NjZFRUI2NjQ1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhWOtKMthJDS6E71CYUGB5iv1cJJexJBoJuRyfljjfoHLW2NN8
wboqf+P1DPZ0osY1tC+vACRrBWMQJt5sg6Zsk75k5k8oZlQeae3co9TxZFaAUsL3
38np19sI/hZP1jknogqBp0Vuabk2ilI+GRhCtF7X0jOMckpbNK3+E0oX5MZA1U1d
+unwnRm8nGxpOQ1mNNrUSDen6WPWtUwkKKAQYxB03nofHOVKK9DV618G2eHCyiG4
pJVKq2PlMerzmWhuKmWIWSt+6MQQwyMowNYcEzTgRYvneIazFZpHMdFOzvAn9YOm
S2QT6otlIjsiSuQTZxKcugk8Ra/X+MyzvbPPAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUetu137lS8BcmHayt159WbutmRRMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2V0dTEzN2xTOEJjbUhh
eXQxNTlXYnV0bVJSTS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGDrFfe/eFo8fchG2ZDpxYB3R5ntjmaWOYRU
bSoqGfu487eryefM4PeFYjZgv9aIB/tRRROUbPObuuzp8LR5vkf3A5EGby9dPRyJ
o60EXwIaIm2BmUufjuctuOpARMqdi5qt3PEh7ASgqr4XLkbD/J+SFB1xlPEjQDhA
KV6PkZtqURP3iV9xPoiAz4utJllGGP3FyOLerNS1v4LOBQPYIXIXkg/eWCIw2faA
gfB/psKAwlsWvYPRQHZOU88OzS4rodU5FYrt4klVcBTG+aVbHFupjoKWHu6FhpT6
MUCONHWolfrfpenfwf3sQqhyMAtRlQQYIEgn6PIpSFOSJ2r7ZF0=
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:58:00 2025 by rpki-client