Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/mUeue1NiXBy0XJkQ37WkqC0RCf4.roa
File: mUeue1NiXBy0XJkQ37WkqC0RCf4.roa (raw, json)
Hash identifier: nYeS9Aoh1PW2DLfjj2KXIHIq4m9xml3nwVqnpaOQi2o=
Subject key identifier: 99:47:AE:7B:53:62:5C:1C:B4:5C:99:10:DF:B5:A4:A8:2D:11:09:FE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B9A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mUeue1NiXBy0XJkQ37WkqC0RCf4.roa
Signing time: Fri 03 Jan 2025 23:55:03 +0000
ROA not before: Fri 03 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 3 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9947AE7B53625C1CB45C9910DFB5A4A82D1109FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:74:f3:12:a4:24:18:c0:bc:91:49:7f:b5:
9d:2a:5e:fc:58:4a:81:62:e9:8e:f7:8e:87:58:b0:
28:ff:28:14:a2:9d:be:9c:4e:6c:7c:6c:54:8c:de:
7d:b4:32:2e:5c:aa:77:44:c6:a6:27:0f:8d:ca:3d:
28:cd:32:d7:e7:4a:d1:7b:e0:03:d8:92:c6:5a:9d:
26:7b:02:6a:33:0e:00:63:d2:83:4f:7d:f2:5d:d9:
30:ac:5c:fa:25:6e:b4:a3:d6:65:bf:07:31:20:93:
72:01:44:7c:70:62:ac:1d:7b:05:db:2c:65:24:c1:
c4:4d:eb:3c:b2:54:aa:c3:7a:ca:a1:69:f4:4a:9b:
a1:81:fe:5d:0a:55:cb:5c:92:88:8f:69:de:8f:63:
81:fc:d7:74:83:74:26:7b:7c:b4:bd:93:73:c9:5e:
c8:0d:de:ec:2b:e6:8f:d2:1d:db:09:c6:bc:67:54:
f7:77:61:68:ab:a5:0b:00:f0:b5:80:08:f5:04:23:
7f:ec:32:57:c7:21:02:8d:42:c5:f7:29:7f:99:ec:
d6:4a:2c:f3:5c:3e:20:43:c8:f4:4b:58:ff:66:1c:
a2:19:fe:e3:82:d1:23:bc:4a:aa:b0:d3:20:ca:f0:
27:3b:07:a5:a5:6c:f4:4c:3f:53:40:95:11:11:9c:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:AE:7B:53:62:5C:1C:B4:5C:99:10:DF:B5:A4:A8:2D:11:09:FE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/mUeue1NiXBy0XJkQ37WkqC0RCf4.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
df:99:67:c8:23:f2:37:37:b8:2d:8c:19:a2:c1:0a:54:e8:bb:
d1:ab:d8:ae:69:1c:71:94:94:c1:f7:e2:4f:f6:1f:ac:7d:ac:
06:ac:51:20:9d:99:99:09:9d:fe:6f:f8:5b:ae:43:8a:26:6c:
f5:fb:82:75:5b:bf:5b:d2:5a:50:48:a8:98:6d:b0:d2:af:fa:
b2:90:a4:79:87:1f:40:f0:0b:82:3c:35:b6:ca:cc:7d:b7:f9:
79:d3:07:ad:6d:35:e3:76:1d:cc:fd:37:39:88:6c:63:45:f3:
38:f0:25:21:65:80:86:28:6d:e6:3d:3e:a7:61:52:a3:31:ff:
12:19:37:5f:71:c2:82:fe:e5:6a:1b:6a:da:95:cb:2b:c5:3e:
af:82:0a:37:45:27:e0:c5:96:f8:fc:fc:d1:1f:1d:c4:f5:5b:
80:90:ab:4c:14:ad:6c:ad:a6:51:81:d9:4e:74:e6:d3:2a:75:
19:95:34:b8:4c:38:e0:ec:58:93:48:9a:0b:41:e3:28:75:9e:
16:8d:4c:30:82:38:60:33:e6:60:07:05:39:2f:4d:82:59:d6:
fa:64:dd:5d:63:4f:b1:58:74:da:5c:f7:89:e0:78:99:41:0c:
97:87:bb:b7:cb:80:66:17:47:99:f9:86:a3:dc:59:6e:6e:77:
ec:19:1a:37
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMDMy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk5NDdBRTdCNTM2MjVD
MUNCNDVDOTkxMERGQjVBNEE4MkQxMTA5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbNHTzEqQkGMC8kUl/tZ0qXvxYSoFi6Y73jodYsCj/KBSinb6c
Tmx8bFSM3n20Mi5cqndExqYnD43KPSjNMtfnStF74APYksZanSZ7AmozDgBj0oNP
ffJd2TCsXPolbrSj1mW/BzEgk3IBRHxwYqwdewXbLGUkwcRN6zyyVKrDesqhafRK
m6GB/l0KVctckoiPad6PY4H813SDdCZ7fLS9k3PJXsgN3uwr5o/SHdsJxrxnVPd3
YWirpQsA8LWACPUEI3/sMlfHIQKNQsX3KX+Z7NZKLPNcPiBDyPRLWP9mHKIZ/uOC
0SO8Sqqw0yDK8Cc7B6WlbPRMP1NAlRERnDqLAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUmUeue1NiXBy0XJkQ37WkqC0RCf4wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL21VZXVlMU5pWEJ5MFhK
a1EzN1drcUMwUkNmNC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAN+ZZ8gj8jc3uC2MGaLBClTou9Gr2K5pHHGU
lMH34k/2H6x9rAasUSCdmZkJnf5v+FuuQ4ombPX7gnVbv1vSWlBIqJhtsNKv+rKQ
pHmHH0DwC4I8NbbKzH23+XnTB61tNeN2Hcz9NzmIbGNF8zjwJSFlgIYobeY9Pqdh
UqMx/xIZN19xwoL+5WobatqVyyvFPq+CCjdFJ+DFlvj8/NEfHcT1W4CQq0wUrWyt
plGB2U505tMqdRmVNLhMOODsWJNImgtB4yh1nhaNTDCCOGAz5mAHBTkvTYJZ1vpk
3V1jT7FYdNpc94ngeJlBDJeHu7fLgGYXR5n5hqPcWW5ud+wZGjc=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:59:21 2025 by rpki-client