Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lk_Jl2k-5Vfb-aT7X1qdscd8ZwM.roa
File: lk_Jl2k-5Vfb-aT7X1qdscd8ZwM.roa (raw, json)
Hash identifier: ntFn7iALKPc6RXxRDvbkXo+CTMnD/gIfQSWCux2tK3E=
Subject key identifier: 96:4F:C9:97:69:3E:E5:57:DB:F9:A4:FB:5F:5A:9D:B1:C7:7C:67:03
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C42
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lk_Jl2k-5Vfb-aT7X1qdscd8ZwM.roa
Signing time: Wed 22 Jan 2025 15:55:02 +0000
ROA not before: Wed 22 Jan 2025 15:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 22 15:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964FC997693EE557DBF9A4FB5F5A9DB1C77C6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:69:fa:a4:ad:b2:db:3b:e0:c3:13:94:5c:
19:60:68:45:55:1c:39:9a:6c:59:37:28:9d:7f:61:
cc:ff:06:37:a4:e8:f9:3a:84:0e:f8:06:6e:46:ad:
a4:a2:90:54:fc:dd:90:44:1d:22:3a:b0:d2:40:5f:
1a:e6:51:b7:b7:db:c3:f8:e0:a4:79:7f:1b:1c:22:
4c:4c:4e:8d:cd:0a:d8:4f:9e:fb:14:71:21:1d:8e:
7b:bb:75:1d:8c:62:f6:44:3d:f3:b4:e0:c7:3d:34:
e4:58:0a:85:2d:db:40:c6:f9:0a:9e:02:64:af:c8:
7e:2c:2a:cf:bb:ff:95:d4:d3:fb:e2:43:f0:7a:5b:
c5:db:79:aa:bb:5e:14:bc:d6:63:86:46:87:f6:f5:
01:62:6a:e4:64:9d:34:75:b4:6c:78:15:6b:09:3d:
2b:ce:1e:19:cc:c1:5d:49:dc:e1:12:bf:ed:59:2e:
fb:1e:1c:fe:50:31:cd:9b:17:ef:d8:6e:45:8c:47:
37:ee:30:ae:72:cb:57:34:7e:ee:37:3b:b6:54:35:
e7:38:6a:28:34:ed:ee:ef:51:58:45:60:45:b0:65:
5a:f5:84:e4:4c:02:84:1d:08:1e:49:2b:9b:9a:58:
ad:c8:c8:ea:bb:99:d0:a7:88:5c:52:ba:da:7f:af:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:C9:97:69:3E:E5:57:DB:F9:A4:FB:5F:5A:9D:B1:C7:7C:67:03
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lk_Jl2k-5Vfb-aT7X1qdscd8ZwM.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e8:ad:57:c5:f7:80:7c:92:9f:42:b6:d6:1c:7a:a8:65:13:
92:7e:df:46:02:08:e9:b9:d5:c0:2d:51:91:39:a4:6d:6e:db:
e7:ca:c0:ab:86:87:ee:ee:63:e0:fd:85:7d:77:96:d2:a7:42:
c4:cb:bc:e4:3c:22:b2:d0:70:18:f0:02:f1:ac:cb:7f:d6:e6:
35:c4:7c:9b:7b:4d:cd:60:8e:21:b1:0c:09:01:fb:a6:d6:4e:
ce:e5:70:7d:b4:b0:f0:44:cb:9b:c7:85:40:3e:dc:7e:ba:e8:
3c:f8:ac:ad:f5:ca:03:85:a7:5f:5e:fe:3d:02:a4:b4:7c:6a:
25:64:38:3a:43:5a:ff:05:8d:75:66:39:f6:68:a6:ab:07:3f:
38:a0:13:15:f3:18:ca:9d:24:82:50:30:56:55:ce:4f:23:46:
4d:32:78:b1:6a:6a:b2:ce:3b:81:1d:ce:4d:6f:56:bd:2d:2a:
3c:cf:bf:e8:56:31:cf:03:20:d0:ce:dd:c4:f4:cb:ef:0a:ac:
78:e6:c2:94:4e:50:91:d8:17:67:60:66:50:29:c8:b5:7f:8a:
be:05:03:b0:c4:0f:47:8b:10:75:54:ce:db:05:41:ad:0f:4b:
bb:40:25:d8:ce:b3:45:2c:17:e7:9b:cf:4f:0d:bc:f5:ce:a7:
f7:16:9d:a9
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjIx
NTU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk2NEZDOTk3NjkzRUU1
NTdEQkY5QTRGQjVGNUE5REIxQzc3QzY3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZR2n6pK2y2zvgwxOUXBlgaEVVHDmabFk3KJ1/Ycz/Bjek6Pk6
hA74Bm5GraSikFT83ZBEHSI6sNJAXxrmUbe328P44KR5fxscIkxMTo3NCthPnvsU
cSEdjnu7dR2MYvZEPfO04Mc9NORYCoUt20DG+QqeAmSvyH4sKs+7/5XU0/viQ/B6
W8Xbeaq7XhS81mOGRof29QFiauRknTR1tGx4FWsJPSvOHhnMwV1J3OESv+1ZLvse
HP5QMc2bF+/YbkWMRzfuMK5yy1c0fu43O7ZUNec4aig07e7vUVhFYEWwZVr1hORM
AoQdCB5JK5uaWK3IyOq7mdCniFxSutp/r0eNAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUlk/Jl2k+5Vfb+aT7X1qdscd8ZwMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2xrX0psMmstNVZmYi1h
VDdYMXFkc2NkOFp3TS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAH7orVfF94B8kp9CttYceqhlE5J+30YCCOm5
1cAtUZE5pG1u2+fKwKuGh+7uY+D9hX13ltKnQsTLvOQ8IrLQcBjwAvGsy3/W5jXE
fJt7Tc1gjiGxDAkB+6bWTs7lcH20sPBEy5vHhUA+3H666Dz4rK31ygOFp19e/j0C
pLR8aiVkODpDWv8FjXVmOfZopqsHPzigExXzGMqdJIJQMFZVzk8jRk0yeLFqarLO
O4Edzk1vVr0tKjzPv+hWMc8DINDO3cT0y+8KrHjmwpROUJHYF2dgZlApyLV/ir4F
A7DED0eLEHVUztsFQa0PS7tAJdjOs0UsF+ebz08NvPXOp/cWnak=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:11 2025 by rpki-client