Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/o7hzjW7JjxjE5LsA-jl6LU9Tr1w.roa
File: o7hzjW7JjxjE5LsA-jl6LU9Tr1w.roa (raw, json)
Hash identifier: sscqrV0AlOe69kVtZQfDMoXCjrMdhWeg/7hyLGddzuA=
Subject key identifier: A3:B8:73:8D:6E:C9:8F:18:C4:E4:BB:00:FA:39:7A:2D:4F:53:AF:5C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B78
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/o7hzjW7JjxjE5LsA-jl6LU9Tr1w.roa
Signing time: Tue 31 Dec 2024 07:55:03 +0000
ROA not before: Tue 31 Dec 2024 07:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 31 07:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A3B8738D6EC98F18C4E4BB00FA397A2D4F53AF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:ce:35:03:c7:5f:77:b0:ed:4b:95:78:70:
60:7f:1d:61:f8:89:a1:fd:3e:a4:f9:01:39:82:f9:
21:b0:05:58:70:53:9d:b9:91:a0:f9:fe:1b:24:99:
f3:31:98:d0:56:6b:2f:8b:80:e2:c0:e0:a6:5d:27:
d9:64:ef:cd:25:f4:14:c1:d8:34:dd:ee:0f:ac:8e:
b2:d6:fd:46:bd:83:e5:5a:81:17:00:c8:12:28:d3:
20:44:b6:14:ef:27:87:de:6d:ff:c8:12:74:ba:7d:
d3:84:f9:84:eb:7d:3a:8f:5b:1a:3b:07:f4:43:24:
f4:b5:85:61:1c:53:2a:77:29:a2:51:7e:df:91:d4:
51:81:51:a5:d0:51:f3:b2:d9:78:70:da:3d:37:39:
5d:3d:25:11:b8:94:30:b6:64:eb:b1:04:d8:ad:ce:
08:03:f1:4a:b9:8d:8e:b9:96:e3:03:06:53:b5:82:
5e:24:66:12:af:d6:cc:8d:4f:c0:76:38:ad:39:10:
26:5b:b8:27:a1:bb:2c:d5:36:bd:13:66:ab:88:5c:
84:a8:13:2a:7e:31:ed:28:9e:80:2c:47:e5:4c:00:
1e:f2:66:96:ed:85:e8:2a:06:73:80:de:bf:70:14:
6b:14:2b:24:5c:dc:bf:cd:7f:34:ae:1e:d2:82:58:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:73:8D:6E:C9:8F:18:C4:E4:BB:00:FA:39:7A:2D:4F:53:AF:5C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/o7hzjW7JjxjE5LsA-jl6LU9Tr1w.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d8:b7:9c:e4:04:57:5a:4a:29:18:c9:a3:f2:47:16:cf:cc:
9b:6e:c0:33:6d:c5:c9:f7:bd:40:b7:45:be:49:6b:fc:c7:99:
09:30:af:14:66:c1:de:15:d6:e0:e9:84:bd:8d:29:c6:9a:98:
25:14:0d:68:61:f1:2e:db:af:fe:50:74:25:28:ca:b9:91:e5:
60:ca:93:6f:f8:9a:3c:75:86:5b:0e:9d:1e:50:d4:46:96:09:
7e:49:98:01:d3:7c:7d:28:18:25:b9:bf:43:d5:25:73:6a:70:
86:ca:56:63:23:9c:bd:54:e4:11:72:4f:2d:90:34:13:e4:0d:
0b:6b:f0:c4:5e:4e:53:a0:e4:3f:02:34:95:4d:24:10:26:90:
7b:c7:d2:3d:00:1f:8d:96:b2:d5:3f:34:7f:c0:f9:10:16:87:
eb:2b:bf:1e:4f:47:ae:0a:6e:e9:0c:ca:4e:8f:5a:d1:f9:d5:
f6:a8:f5:f1:ca:f3:88:ca:47:ae:e7:e5:c9:8c:53:86:cb:cd:
1e:de:e1:b6:a0:3f:fc:29:28:76:58:8e:d2:3b:85:16:4f:7f:
c9:8e:05:73:e4:33:c3:d5:73:15:43:09:36:af:9c:9b:24:1b:
f1:4b:5b:b2:c7:19:65:94:4c:f2:81:0b:c0:fc:30:c1:77:37:
0c:33:18:36
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMzEw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEEzQjg3MzhENkVDOThG
MThDNEU0QkIwMEZBMzk3QTJENEY1M0FGNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC55c41A8dfd7DtS5V4cGB/HWH4iaH9PqT5ATmC+SGwBVhwU525
kaD5/hskmfMxmNBWay+LgOLA4KZdJ9lk780l9BTB2DTd7g+sjrLW/Ua9g+VagRcA
yBIo0yBEthTvJ4febf/IEnS6fdOE+YTrfTqPWxo7B/RDJPS1hWEcUyp3KaJRft+R
1FGBUaXQUfOy2Xhw2j03OV09JRG4lDC2ZOuxBNitzggD8Uq5jY65luMDBlO1gl4k
ZhKv1syNT8B2OK05ECZbuCehuyzVNr0TZquIXISoEyp+Me0onoAsR+VMAB7yZpbt
hegqBnOA3r9wFGsUKyRc3L/NfzSuHtKCWD4fAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUo7hzjW7JjxjE5LsA+jl6LU9Tr1wwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL283aHpqVzdKanhqRTVM
c0Etamw2TFU5VHIxdy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBADrYt5zkBFdaSikYyaPyRxbPzJtuwDNtxcn3
vUC3Rb5Ja/zHmQkwrxRmwd4V1uDphL2NKcaamCUUDWhh8S7br/5QdCUoyrmR5WDK
k2/4mjx1hlsOnR5Q1EaWCX5JmAHTfH0oGCW5v0PVJXNqcIbKVmMjnL1U5BFyTy2Q
NBPkDQtr8MReTlOg5D8CNJVNJBAmkHvH0j0AH42WstU/NH/A+RAWh+srvx5PR64K
bukMyk6PWtH51fao9fHK84jKR67n5cmMU4bLzR7e4bagP/wpKHZYjtI7hRZPf8mO
BXPkM8PVcxVDCTavnJskG/FLW7LHGWWUTPKBC8D8MMF3NwwzGDY=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:27:16 2025 by rpki-client