Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/p9ThmpcFQNuGCD_44HqzPc-V5dc.roa
File: p9ThmpcFQNuGCD_44HqzPc-V5dc.roa (raw, json)
Hash identifier: DPY6fZ1SbgsjiGfgWNxF8oxGViExQ7AcW9yFjGB+O9Y=
Subject key identifier: A7:D4:E1:9A:97:05:40:DB:86:08:3F:F8:E0:7A:B3:3D:CF:95:E5:D7
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0C60
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/p9ThmpcFQNuGCD_44HqzPc-V5dc.roa
Signing time: Sat 25 Jan 2025 23:55:02 +0000
ROA not before: Sat 25 Jan 2025 23:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 25 23:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A7D4E19A970540DB86083FF8E07AB33DCF95E5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:d1:3e:c2:92:56:66:e0:f3:fe:40:c8:80:
c4:f0:90:ad:17:63:ba:66:d8:6d:00:2b:2e:18:a0:
e3:c8:d3:9e:ad:47:ff:6a:a5:89:f4:ec:b7:3a:d6:
c8:80:f0:42:36:91:04:c9:ab:79:fc:00:82:20:b6:
c3:fb:94:db:d4:47:74:c2:fd:de:81:37:a0:b3:16:
cb:f3:ea:ba:bf:be:f8:31:13:57:c0:b2:1e:d7:7c:
38:5a:a1:79:6b:83:10:c5:4a:9b:a9:a7:88:70:df:
79:4d:b2:d2:28:e1:96:01:49:f4:10:62:ff:3f:e1:
80:76:75:fb:eb:6c:27:35:7a:a9:67:2a:32:6e:73:
44:69:5e:20:92:ca:e2:08:9e:1b:d8:1f:60:82:dc:
b9:69:b2:b9:d6:b5:ef:25:bd:a0:40:42:b1:a1:a6:
f4:d6:89:3d:4d:70:61:55:fd:55:b4:fe:59:93:0b:
72:4e:eb:cd:f0:55:e0:3b:68:a4:96:29:80:b9:40:
91:cd:9e:99:df:4c:95:fb:64:03:5a:a6:fa:a2:43:
ec:d5:dd:73:e2:df:80:92:c3:bf:94:9b:02:18:81:
1d:33:4c:76:7b:2c:a1:ff:20:13:a1:5b:53:cb:d5:
c2:95:28:e8:a1:96:45:26:06:9d:94:1b:c3:6d:2a:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:E1:9A:97:05:40:DB:86:08:3F:F8:E0:7A:B3:3D:CF:95:E5:D7
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/p9ThmpcFQNuGCD_44HqzPc-V5dc.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:93:41:b5:30:3c:ea:fc:00:86:14:47:7b:5e:4c:c0:1e:21:
c3:11:24:95:8c:bf:34:55:b4:81:07:67:e8:df:38:57:d7:09:
61:ba:1e:aa:e7:8a:58:31:a6:dc:cb:c9:49:88:c9:f3:d9:27:
26:f6:33:c8:64:a3:6e:60:fd:de:93:0e:a9:2e:c8:57:75:f7:
85:a7:33:59:31:80:9a:73:2a:26:d9:81:8b:df:57:c4:ef:b1:
b5:e5:1f:21:c2:0b:82:1a:44:96:ad:0e:40:b2:9a:48:f1:1e:
99:71:e5:f2:d7:f3:50:6d:b5:bb:3c:7d:3a:a6:dc:19:b6:9c:
40:fc:4c:00:64:b4:ec:96:61:06:8a:44:46:14:80:33:09:ee:
3d:a6:24:1a:fd:c1:67:8c:54:eb:25:5e:9d:26:8a:8c:8a:6f:
00:db:eb:fb:19:e1:db:3a:98:9e:e3:04:26:03:22:52:b0:20:
55:20:c3:c0:f0:75:3e:d2:b6:0a:9d:84:73:c4:fc:e3:a3:d5:
7d:0f:6b:2e:3a:04:83:30:78:0c:1f:4c:28:c3:b0:e6:cc:ca:
cf:61:60:c6:dd:58:b2:76:e8:92:13:ee:a5:b6:4e:e6:d6:e8:
44:83:83:23:2c:16:d8:9e:62:33:24:0a:d3:cb:46:80:ba:ba:
ac:a3:ff:86
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjUy
MzU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEE3RDRFMTlBOTcwNTQw
REI4NjA4M0ZGOEUwN0FCMzNEQ0Y5NUU1RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1utE+wpJWZuDz/kDIgMTwkK0XY7pm2G0AKy4YoOPI056tR/9q
pYn07Lc61siA8EI2kQTJq3n8AIIgtsP7lNvUR3TC/d6BN6CzFsvz6rq/vvgxE1fA
sh7XfDhaoXlrgxDFSpupp4hw33lNstIo4ZYBSfQQYv8/4YB2dfvrbCc1eqlnKjJu
c0RpXiCSyuIInhvYH2CC3LlpsrnWte8lvaBAQrGhpvTWiT1NcGFV/VW0/lmTC3JO
683wVeA7aKSWKYC5QJHNnpnfTJX7ZANapvqiQ+zV3XPi34CSw7+UmwIYgR0zTHZ7
LKH/IBOhW1PL1cKVKOihlkUmBp2UG8NtKihdAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUp9ThmpcFQNuGCD/44HqzPc+V5dcwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3A5VGhtcGNGUU51R0NE
XzQ0SHF6UGMtVjVkYy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAASTQbUwPOr8AIYUR3teTMAeIcMRJJWMvzRV
tIEHZ+jfOFfXCWG6HqrnilgxptzLyUmIyfPZJyb2M8hko25g/d6TDqkuyFd194Wn
M1kxgJpzKibZgYvfV8TvsbXlHyHCC4IaRJatDkCymkjxHplx5fLX81Bttbs8fTqm
3Bm2nED8TABktOyWYQaKREYUgDMJ7j2mJBr9wWeMVOslXp0mioyKbwDb6/sZ4ds6
mJ7jBCYDIlKwIFUgw8DwdT7StgqdhHPE/OOj1X0Pay46BIMweAwfTCjDsObMys9h
YMbdWLJ26JIT7qW2TubW6ESDgyMsFtieYjMkCtPLRoC6uqyj/4Y=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:48:36 2025 by rpki-client