Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/x2yiSe_AR4jo9_zv3jVOtNXZtA8.roa
File: x2yiSe_AR4jo9_zv3jVOtNXZtA8.roa (raw, json)
Hash identifier: EK7QKBTLVwAvD4dcGCSTz93sDK9lQHP/o/zP8Q7+EjI=
Subject key identifier: C7:6C:A2:49:EF:C0:47:88:E8:F7:FC:EF:DE:35:4E:B4:D5:D9:B4:0F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BF1
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/x2yiSe_AR4jo9_zv3jVOtNXZtA8.roa
Signing time: Mon 13 Jan 2025 15:55:03 +0000
ROA not before: Mon 13 Jan 2025 15:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 13 15:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=C76CA249EFC04788E8F7FCEFDE354EB4D5D9B40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:e6:5d:64:e5:30:9f:02:f8:c1:19:1d:21:
7a:b7:ea:1e:af:60:02:c9:65:87:c2:b9:ed:2d:de:
46:bd:9a:49:46:ab:43:ac:4b:3d:47:39:9a:74:ea:
aa:c4:9a:17:11:ec:66:6b:21:fe:ff:e5:61:4d:4c:
ca:48:07:06:92:c0:8e:e4:b2:50:1f:5e:8a:7e:9b:
e2:28:6b:a1:6c:29:ad:44:86:64:45:b3:bb:fb:d3:
97:3c:3d:d3:14:fc:77:64:2d:04:a7:1d:08:88:4b:
de:9a:62:e7:5b:12:0e:d0:3f:ad:c0:ab:ad:f3:1d:
bb:a1:04:97:24:2e:ad:fd:51:68:a5:26:fa:b4:65:
3c:5c:95:eb:29:7e:c8:48:11:2b:87:ac:38:91:f8:
96:5b:12:79:47:95:a9:f4:ae:b6:50:08:ff:7e:b7:
a3:50:12:4a:4a:0d:b1:3b:4c:a8:b4:b0:0e:99:6d:
05:a1:5d:41:44:fa:71:bd:ba:be:78:bf:a2:82:a3:
4e:a9:ab:e5:73:5d:dd:86:50:b1:2b:dd:c8:27:c5:
8c:bd:40:02:89:b4:8f:06:e8:32:68:aa:c9:67:7b:
13:7a:70:12:74:1f:8e:e2:73:36:54:f3:fc:14:e8:
d6:3c:d5:5a:74:9a:e6:32:eb:93:36:5f:bf:04:3e:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:A2:49:EF:C0:47:88:E8:F7:FC:EF:DE:35:4E:B4:D5:D9:B4:0F
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/x2yiSe_AR4jo9_zv3jVOtNXZtA8.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:63:1c:26:98:0b:a9:d6:df:43:2f:8c:04:5b:70:2c:f3:b9:
8e:28:ed:75:01:8c:8a:80:cb:75:f1:4a:73:e5:48:40:aa:f6:
93:92:b8:74:17:72:76:9a:f9:aa:11:86:d5:3f:d0:7c:0d:77:
f3:ed:f7:76:48:0e:4b:39:b8:4d:aa:82:85:40:e3:8d:79:45:
13:99:19:7b:f3:e4:d4:b2:89:a2:23:28:cf:de:d3:0d:4b:a5:
c1:b1:26:14:19:b2:48:55:07:91:a9:84:4d:fc:00:a8:71:f9:
d7:e0:9c:21:bb:d8:6f:ab:43:25:11:1b:8b:3d:99:73:7f:0c:
52:39:12:ea:06:f4:75:c1:df:d3:ad:35:fe:4a:5a:68:51:d0:
4b:30:6f:57:8f:62:d7:47:a1:f5:4e:8b:a5:36:a7:71:d3:ae:
c8:a7:39:9d:34:9b:dc:36:f3:4d:b5:66:52:bc:bc:3b:35:db:
a5:8b:ac:2b:c1:7b:21:3a:b2:20:dc:52:c6:07:16:a0:34:79:
ec:01:20:ca:dc:cc:a1:3c:e0:a0:aa:0c:c8:e1:21:4f:81:f9:
c2:41:91:9e:58:be:63:6a:76:2f:60:5c:c5:8b:7d:9f:87:47:
b6:1f:b7:b5:9f:44:c3:f0:2f:bd:ae:ff:f0:5a:31:f3:a0:b4:
90:48:33:79
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTMx
NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEM3NkNBMjQ5RUZDMDQ3
ODhFOEY3RkNFRkRFMzU0RUI0RDVEOUI0MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpPuZdZOUwnwL4wRkdIXq36h6vYALJZYfCue0t3ka9mklGq0Os
Sz1HOZp06qrEmhcR7GZrIf7/5WFNTMpIBwaSwI7kslAfXop+m+Ioa6FsKa1EhmRF
s7v705c8PdMU/HdkLQSnHQiIS96aYudbEg7QP63Aq63zHbuhBJckLq39UWilJvq0
ZTxclespfshIESuHrDiR+JZbEnlHlan0rrZQCP9+t6NQEkpKDbE7TKi0sA6ZbQWh
XUFE+nG9ur54v6KCo06pq+VzXd2GULEr3cgnxYy9QAKJtI8G6DJoqslnexN6cBJ0
H47iczZU8/wU6NY81Vp0muYy65M2X78EPqpBAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUx2yiSe/AR4jo9/zv3jVOtNXZtA8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3gyeWlTZV9BUjRqbzlf
enYzalZPdE5YWnRBOC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACpjHCaYC6nW30MvjARbcCzzuY4o7XUBjIqA
y3XxSnPlSECq9pOSuHQXcnaa+aoRhtU/0HwNd/Pt93ZIDks5uE2qgoVA4415RROZ
GXvz5NSyiaIjKM/e0w1LpcGxJhQZskhVB5GphE38AKhx+dfgnCG72G+rQyURG4s9
mXN/DFI5EuoG9HXB39OtNf5KWmhR0Eswb1ePYtdHofVOi6U2p3HTrsinOZ00m9w2
8021ZlK8vDs126WLrCvBeyE6siDcUsYHFqA0eewBIMrczKE84KCqDMjhIU+B+cJB
kZ5YvmNqdi9gXMWLfZ+HR7Yft7WfRMPwL72u//BaMfOgtJBIM3k=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:06:47 2025 by rpki-client