Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/n50mn8TdorAQS4UQ9hbkw6pHNzg.roa
File: n50mn8TdorAQS4UQ9hbkw6pHNzg.roa (raw, json)
Hash identifier: 0cMijGCBetXRojHpBBlyl/5OA/q0Fzq58U7vEnGfkF0=
Subject key identifier: 9F:9D:26:9F:C4:DD:A2:B0:10:4B:85:10:F6:16:E4:C3:AA:47:37:38
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BD0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n50mn8TdorAQS4UQ9hbkw6pHNzg.roa
Signing time: Thu 09 Jan 2025 23:55:03 +0000
ROA not before: Thu 09 Jan 2025 23:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 9 23:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9F9D269FC4DDA2B0104B8510F616E4C3AA473738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:66:23:84:08:08:3b:51:2c:ad:34:13:96:
71:30:93:38:ee:f8:96:95:e3:81:61:34:d4:fa:54:
df:70:a9:ce:52:3a:a6:cf:4e:44:a9:18:45:0e:0c:
5b:32:41:ac:19:d8:7c:6c:26:28:e9:a4:68:ca:8a:
e7:83:52:93:37:1a:0d:db:48:0d:df:35:fc:59:77:
9f:4d:8c:5f:1a:66:a6:38:03:e0:16:b0:e1:c6:da:
8c:50:d6:45:ba:45:72:a6:1b:ba:e2:00:8a:90:9e:
93:a4:75:65:10:e6:04:b4:bf:95:58:e2:01:d5:7e:
42:69:53:7b:39:99:94:60:ab:15:0d:7a:2e:b5:71:
60:e6:87:30:76:58:e3:82:63:12:4a:4f:f9:ce:0c:
90:b9:1c:41:c8:43:2e:aa:7f:56:f5:1b:83:ba:ce:
03:72:86:87:d6:03:27:65:58:91:11:a8:b1:74:09:
39:aa:68:35:ac:79:de:f9:63:18:b3:39:67:a1:8b:
7a:88:c8:dd:a8:4b:09:c5:84:b4:5b:e5:32:d8:13:
07:24:73:d1:b3:60:eb:08:c7:99:ab:57:a0:9c:15:
5c:48:68:57:43:59:19:af:6c:39:60:45:3f:12:c8:
8b:e0:2f:63:7f:17:8b:32:4f:c1:3f:25:73:85:15:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:26:9F:C4:DD:A2:B0:10:4B:85:10:F6:16:E4:C3:AA:47:37:38
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/n50mn8TdorAQS4UQ9hbkw6pHNzg.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f2:42:94:d7:9e:b1:ab:58:36:c4:ab:59:09:88:64:8b:7c:
d0:34:1f:24:9f:50:42:37:db:3f:5f:77:b2:89:c1:8b:f5:d9:
c1:2e:31:6a:ca:74:b5:e8:84:d3:80:92:32:6c:8e:d2:c8:8c:
6a:cf:73:55:d0:36:80:04:f8:71:8e:6b:64:ae:3d:27:ab:d8:
fd:8c:ce:7f:10:12:64:e2:cf:93:c7:ef:fb:ab:c8:e5:1c:72:
45:3f:85:b0:8a:36:49:4e:70:2d:44:a7:bf:bb:82:00:36:c4:
70:67:da:6d:5e:c4:ca:ad:ac:22:f8:80:95:7b:a1:f4:42:b6:
24:07:7f:3c:fe:44:68:97:e5:7a:42:53:31:53:ce:7b:ce:e0:
33:05:7c:19:78:4f:a4:dc:89:b7:3c:91:8d:c4:35:09:15:7e:
9f:dc:54:78:6d:85:cb:50:7f:ab:f3:f2:0e:c6:80:d8:4d:f8:
1a:a3:49:d6:fe:45:3c:25:bb:23:81:35:41:34:2e:23:c5:95:
88:8a:86:d5:c6:0b:b4:b7:e8:74:eb:54:82:d0:5e:99:9c:da:
fd:89:da:51:f9:64:04:10:43:59:d3:30:56:e8:37:6d:96:8c:
2c:cf:95:c9:80:d3:2b:3a:1e:89:8f:11:f8:04:32:b7:14:eb:
b7:5c:e0:b9
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMDky
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDlGOUQyNjlGQzREREEy
QjAxMDRCODUxMEY2MTZFNEMzQUE0NzM3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdK2YjhAgIO1EsrTQTlnEwkzju+JaV44FhNNT6VN9wqc5SOqbP
TkSpGEUODFsyQawZ2HxsJijppGjKiueDUpM3Gg3bSA3fNfxZd59NjF8aZqY4A+AW
sOHG2oxQ1kW6RXKmG7riAIqQnpOkdWUQ5gS0v5VY4gHVfkJpU3s5mZRgqxUNei61
cWDmhzB2WOOCYxJKT/nODJC5HEHIQy6qf1b1G4O6zgNyhofWAydlWJERqLF0CTmq
aDWsed75YxizOWehi3qIyN2oSwnFhLRb5TLYEwckc9GzYOsIx5mrV6CcFVxIaFdD
WRmvbDlgRT8SyIvgL2N/F4syT8E/JXOFFbbRAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUn50mn8TdorAQS4UQ9hbkw6pHNzgwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL241MG1uOFRkb3JBUVM0
VVE5aGJrdzZwSE56Zy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGbyQpTXnrGrWDbEq1kJiGSLfNA0HySfUEI3
2z9fd7KJwYv12cEuMWrKdLXohNOAkjJsjtLIjGrPc1XQNoAE+HGOa2SuPSer2P2M
zn8QEmTiz5PH7/uryOUcckU/hbCKNklOcC1Ep7+7ggA2xHBn2m1exMqtrCL4gJV7
ofRCtiQHfzz+RGiX5XpCUzFTznvO4DMFfBl4T6Tcibc8kY3ENQkVfp/cVHhthctQ
f6vz8g7GgNhN+BqjSdb+RTwluyOBNUE0LiPFlYiKhtXGC7S36HTrVILQXpmc2v2J
2lH5ZAQQQ1nTMFboN22WjCzPlcmA0ys6HomPEfgEMrcU67dc4Lk=
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:42:36 2025 by rpki-client