Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/gzyXPL7bqjE8qmJmHoxtr4TuScU.roa
File: gzyXPL7bqjE8qmJmHoxtr4TuScU.roa (raw, json)
Hash identifier: 0sLNPpAT6OyurySvIzo9HHoPt1s4qmKDPDDjFzDVGgI=
Subject key identifier: 83:3C:97:3C:BE:DB:AA:31:3C:AA:62:66:1E:8C:6D:AF:84:EE:49:C5
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A3A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gzyXPL7bqjE8qmJmHoxtr4TuScU.roa
Signing time: Mon 25 Nov 2024 23:55:03 +0000
ROA not before: Mon 25 Nov 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 25 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=833C973CBEDBAA313CAA62661E8C6DAF84EE49C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:4f:23:3d:08:3e:fb:9a:a2:c5:57:96:8b:
e4:2d:50:c2:c2:63:e6:0e:f0:39:7f:1d:4e:ef:c7:
6f:09:b4:be:8a:c3:a1:4a:61:64:59:7f:df:d6:78:
85:0a:a3:a6:5b:d3:77:2c:7c:00:29:46:d3:7a:88:
42:5d:b5:92:ae:99:d5:74:db:fc:b0:94:43:0a:5a:
73:80:6e:18:0e:88:0c:1d:36:dc:67:6d:eb:de:58:
51:83:b0:77:11:85:36:5b:e9:1a:14:68:6b:5b:87:
d0:53:28:cd:67:f2:64:63:ce:7d:9d:82:ad:d8:24:
8d:cc:46:93:d3:4e:da:91:7d:09:af:9a:3b:70:46:
10:be:e7:af:02:2f:6e:a5:81:91:3c:ff:de:8e:28:
98:68:ba:cd:28:b5:79:f3:68:c4:e7:b3:5f:59:65:
39:8a:70:7b:e0:d5:c5:d5:ac:28:c1:b9:fe:fb:8e:
88:7f:7c:49:8c:f2:2a:a9:c6:2b:84:d5:6c:2b:9b:
3f:33:78:82:e3:88:2c:d4:8e:00:b7:17:83:c0:13:
62:1e:14:fd:7f:b9:ef:a7:b3:3d:65:c5:8b:65:d1:
18:fc:1c:c3:b9:57:b3:07:31:0a:af:18:00:66:6e:
a4:ac:d7:e2:e0:10:86:42:ca:b4:1d:2c:3a:f3:36:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3C:97:3C:BE:DB:AA:31:3C:AA:62:66:1E:8C:6D:AF:84:EE:49:C5
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gzyXPL7bqjE8qmJmHoxtr4TuScU.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:fe:f6:54:f8:3c:68:05:70:a1:4c:87:89:57:32:c8:42:b0:
f1:5e:8e:75:9c:0b:b8:aa:ec:f8:0a:29:f2:cf:40:5a:f0:ae:
ce:58:b0:ee:3a:87:ba:ea:a4:1d:1a:42:a9:86:1e:b0:a5:ea:
83:18:49:12:4d:82:09:11:e4:89:c9:01:be:ba:d5:ec:78:ad:
b3:4e:ba:64:49:cf:c9:94:46:ae:ee:34:f3:72:a4:41:ea:fc:
a0:ab:8b:47:2e:94:96:15:21:51:19:5f:4e:a1:a6:47:66:15:
6f:0e:d3:0e:ec:45:9e:98:e5:b0:c2:7e:f9:b3:ed:b3:b8:a2:
e2:ee:f4:a1:17:0f:9a:86:52:0f:93:3e:b5:f6:f9:1a:c4:dc:
9a:c9:49:bd:0f:de:c1:4a:e8:60:a8:a5:e2:02:3f:62:9c:ce:
e1:d4:48:25:fc:bb:90:1b:70:33:47:81:34:7d:bc:cd:61:31:
26:96:df:59:d7:a0:38:e2:a7:44:43:2f:71:f1:96:9d:fc:d7:
56:c7:e3:3b:86:6c:fb:07:99:6c:ee:cc:53:3a:a1:84:0f:b9:
ed:00:5a:3f:f9:17:a1:b0:28:2e:23:f0:cd:79:b8:d4:62:c3:
dd:29:5f:a4:26:7b:a7:dd:7a:2a:39:70:55:48:ff:78:98:e3:
40:23:4b:6b
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMjUy
MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDgzM0M5NzNDQkVEQkFB
MzEzQ0FBNjI2NjFFOEM2REFGODRFRTQ5QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrkk8jPQg++5qixVeWi+QtUMLCY+YO8Dl/HU7vx28JtL6Kw6FK
YWRZf9/WeIUKo6Zb03csfAApRtN6iEJdtZKumdV02/ywlEMKWnOAbhgOiAwdNtxn
beveWFGDsHcRhTZb6RoUaGtbh9BTKM1n8mRjzn2dgq3YJI3MRpPTTtqRfQmvmjtw
RhC+568CL26lgZE8/96OKJhous0otXnzaMTns19ZZTmKcHvg1cXVrCjBuf77joh/
fEmM8iqpxiuE1Wwrmz8zeILjiCzUjgC3F4PAE2IeFP1/ue+nsz1lxYtl0Rj8HMO5
V7MHMQqvGABmbqSs1+LgEIZCyrQdLDrzNnerAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUgzyXPL7bqjE8qmJmHoxtr4TuScUwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2d6eVhQTDdicWpFOHFt
Sm1Ib3h0cjRUdVNjVS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBANX+9lT4PGgFcKFMh4lXMshCsPFejnWcC7iq
7PgKKfLPQFrwrs5YsO46h7rqpB0aQqmGHrCl6oMYSRJNggkR5InJAb661ex4rbNO
umRJz8mURq7uNPNypEHq/KCri0culJYVIVEZX06hpkdmFW8O0w7sRZ6Y5bDCfvmz
7bO4ouLu9KEXD5qGUg+TPrX2+RrE3JrJSb0P3sFK6GCopeICP2KczuHUSCX8u5Ab
cDNHgTR9vM1hMSaW31nXoDjip0RDL3Hxlp3811bH4zuGbPsHmWzuzFM6oYQPue0A
Wj/5F6GwKC4j8M15uNRiw90pX6Qme6fdeio5cFVI/3iY40AjS2s=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:01:25 2025 by rpki-client