Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/fNDDZYiwYOMhvC4rT3inkfLTfqg.roa
File: fNDDZYiwYOMhvC4rT3inkfLTfqg.roa (raw, json)
Hash identifier: 3klK5wVDda959f09N/7+jnpjS4IrisntsAbZWWxDTCs=
Subject key identifier: 7C:D0:C3:65:88:B0:60:E3:21:BC:2E:2B:4F:78:A7:91:F2:D3:7E:A8
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C4E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fNDDZYiwYOMhvC4rT3inkfLTfqg.roa
Signing time: Thu 23 Jan 2025 23:55:03 +0000
ROA not before: Thu 23 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 23 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7CD0C36588B060E321BC2E2B4F78A791F2D37EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:9f:16:51:45:0d:53:91:35:b7:80:dd:18:
06:27:9c:2b:fa:6b:7a:43:f3:d5:02:ac:97:26:7a:
79:70:82:d8:d0:a3:78:e3:58:e5:14:1a:5c:5b:be:
2a:20:08:35:e4:87:b4:8a:27:bf:f9:d9:66:7e:0c:
fc:19:aa:9e:1b:66:38:7a:87:b6:4a:76:9e:10:44:
ec:22:4a:fe:d4:ce:50:24:2c:c5:f2:2a:e2:66:5d:
c3:f6:eb:ec:6a:1d:83:e6:71:29:51:81:c4:38:ce:
7e:cd:7f:3d:4b:5d:c5:24:d9:ab:bc:65:44:f4:4c:
13:92:cb:9f:23:7a:be:97:95:4c:86:5a:08:f7:63:
51:a3:70:e2:ff:5e:fa:5e:f2:97:a3:4d:d9:9f:c4:
68:e3:49:50:95:64:01:f2:88:7a:59:44:bc:53:9e:
f2:d7:61:c9:10:99:52:96:f1:1e:0d:5d:b1:00:ec:
65:44:21:85:ff:f2:6b:8a:93:aa:f2:70:9b:20:14:
ab:44:51:3a:15:60:ef:f3:d4:14:fe:aa:82:b2:b8:
cc:43:f5:f9:c8:f6:87:19:ba:f1:4b:fb:43:2d:21:
e6:3a:c7:85:fb:35:2a:dd:10:00:1c:15:48:89:0d:
25:e6:c7:96:73:ea:3c:9f:43:ff:1f:c4:81:b9:99:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D0:C3:65:88:B0:60:E3:21:BC:2E:2B:4F:78:A7:91:F2:D3:7E:A8
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/fNDDZYiwYOMhvC4rT3inkfLTfqg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:48:c1:75:b4:dc:97:10:28:b9:3b:13:23:04:3d:5b:58:5c:
5a:80:09:5b:52:1a:1f:31:d5:18:cc:b8:a0:4b:35:1a:1b:2b:
b0:41:42:8e:82:8b:cd:66:53:b7:01:f1:3b:a3:5b:9f:6e:ea:
ed:8a:70:9b:b3:05:14:89:b5:ff:95:4f:05:1c:50:67:74:da:
4f:c0:a7:a8:00:6d:f1:88:7f:05:c6:c9:f7:d8:27:b6:b6:82:
2c:b5:07:cb:7d:66:a0:c9:fe:ec:20:c7:d7:16:c8:55:1e:cd:
38:ff:a6:ad:8e:3b:38:11:e9:07:58:17:64:56:9f:2f:46:ce:
87:87:b4:c8:7b:e1:b0:da:cc:30:22:92:bf:26:ff:12:66:55:
32:56:55:b9:0c:04:59:be:aa:1f:a9:80:66:36:3b:00:1e:21:
39:0e:a2:31:d1:83:0a:c1:59:1b:16:eb:d0:a9:df:b7:8b:11:
32:aa:93:a8:01:ca:55:17:d9:97:7c:bd:4a:85:46:a3:1e:1c:
0a:ae:dd:f0:f9:d0:c0:01:8d:8f:66:6a:be:c1:f0:53:fa:d5:
99:c0:e4:f6:0a:84:d7:a9:32:9b:9f:c2:5f:f8:25:bf:5d:d7:
f2:0e:fd:46:ee:b0:3f:35:a7:7b:5c:53:48:16:0f:48:e3:76:
a8:33:a7:b7
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjMy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdDRDBDMzY1ODhCMDYw
RTMyMUJDMkUyQjRGNzhBNzkxRjJEMzdFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4kJ8WUUUNU5E1t4DdGAYnnCv6a3pD89UCrJcmenlwgtjQo3jj
WOUUGlxbviogCDXkh7SKJ7/52WZ+DPwZqp4bZjh6h7ZKdp4QROwiSv7UzlAkLMXy
KuJmXcP26+xqHYPmcSlRgcQ4zn7Nfz1LXcUk2au8ZUT0TBOSy58jer6XlUyGWgj3
Y1GjcOL/Xvpe8pejTdmfxGjjSVCVZAHyiHpZRLxTnvLXYckQmVKW8R4NXbEA7GVE
IYX/8muKk6rycJsgFKtEUToVYO/z1BT+qoKyuMxD9fnI9ocZuvFL+0MtIeY6x4X7
NSrdEAAcFUiJDSXmx5Zz6jyfQ/8fxIG5mQSfAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUfNDDZYiwYOMhvC4rT3inkfLTfqgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2ZORERaWWl3WU9NaHZD
NHJUM2lua2ZMVGZxZy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBALhIwXW03JcQKLk7EyMEPVtYXFqACVtSGh8x
1RjMuKBLNRobK7BBQo6Ci81mU7cB8TujW59u6u2KcJuzBRSJtf+VTwUcUGd02k/A
p6gAbfGIfwXGyffYJ7a2giy1B8t9ZqDJ/uwgx9cWyFUezTj/pq2OOzgR6QdYF2RW
ny9GzoeHtMh74bDazDAikr8m/xJmVTJWVbkMBFm+qh+pgGY2OwAeITkOojHRgwrB
WRsW69Cp37eLETKqk6gBylUX2Zd8vUqFRqMeHAqu3fD50MABjY9mar7B8FP61ZnA
5PYKhNepMpufwl/4Jb9d1/IO/UbusD81p3tcU0gWD0jjdqgzp7c=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:12:24 2025 by rpki-client