Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/y1q2odQ8neHo4GYMudWNro-wOZY.roa
File: y1q2odQ8neHo4GYMudWNro-wOZY.roa (raw, json)
Hash identifier: 89IkT1qqLf3j65hPGtTMmx1d9Hf5JzV0Y+DCtDQvkhs=
Subject key identifier: CB:5A:B6:A1:D4:3C:9D:E1:E8:E0:66:0C:B9:D5:8D:AE:8F:B0:39:96
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0B0C
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/y1q2odQ8neHo4GYMudWNro-wOZY.roa
Signing time: Thu 19 Dec 2024 07:55:02 +0000
ROA not before: Thu 19 Dec 2024 07:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 19 07:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=CB5AB6A1D43C9DE1E8E0660CB9D58DAE8FB03996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:e0:cc:a9:43:2d:56:61:c2:87:d8:1a:3e:
ec:e6:25:d5:5f:c9:d6:14:41:b2:6e:99:79:37:6b:
27:d9:5a:d5:19:52:7d:fc:a2:e9:bd:2c:f9:2b:2d:
ab:f3:c0:20:27:0f:90:69:0b:4d:c9:6a:1f:95:d8:
0b:53:6d:19:bf:ce:54:9e:19:e1:82:fb:29:5a:91:
82:fd:50:f7:35:d3:c7:f6:78:f1:e2:e1:07:f4:3e:
4a:9a:02:f5:4e:12:23:eb:07:d7:af:27:0a:f8:da:
79:7b:7e:30:ea:e8:9a:4f:fd:7d:2c:c4:02:18:d8:
52:41:b1:b1:04:b5:a0:89:fb:d2:52:41:b8:fa:1b:
a2:0b:99:ee:ef:66:9a:4a:b0:99:01:0d:cf:47:72:
77:5d:b5:1b:34:66:a4:42:5f:78:cf:25:06:ed:83:
8a:00:cd:8b:8a:70:35:09:8e:f6:da:0b:8e:16:bc:
24:1b:7d:dd:72:53:e1:a0:04:24:51:4f:3a:6f:54:
9a:96:73:34:b2:4a:50:43:96:b6:5a:5d:df:6a:b9:
73:24:46:66:e7:95:74:a4:2d:07:9d:7a:21:33:b3:
93:59:71:f0:2b:6a:56:f2:c9:68:33:6b:4d:07:63:
8f:b6:e9:0c:0c:3a:dc:71:01:ea:4a:e4:37:29:86:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:B6:A1:D4:3C:9D:E1:E8:E0:66:0C:B9:D5:8D:AE:8F:B0:39:96
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/y1q2odQ8neHo4GYMudWNro-wOZY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
63:53:40:11:43:7a:7f:dc:7b:99:31:b3:ca:3e:90:ee:bb:e4:
ff:2a:b6:31:81:36:49:7f:64:69:0e:dd:d7:58:bf:8a:58:14:
6a:1f:05:38:35:fd:95:98:a0:1c:cc:14:ad:45:a4:1b:dc:4d:
4a:9b:64:1a:84:df:93:3b:4a:b6:dc:fc:8f:67:f1:e4:f7:64:
86:8f:e7:9e:d6:e3:6c:8c:5a:3b:58:50:d4:1a:f9:f3:66:d3:
b5:38:f6:0b:55:e2:a1:b5:ee:72:f2:bd:29:de:39:9c:86:fc:
23:50:ed:b2:a5:6c:e7:86:07:c4:c7:01:41:35:35:1e:25:fa:
2f:6e:db:26:98:5f:d9:ad:31:a0:30:5a:37:ed:09:0b:91:17:
de:1f:8f:6c:70:e8:d3:17:16:7e:55:c2:42:57:9b:aa:42:af:
d6:f9:6d:4f:2a:b5:41:44:44:b1:8e:26:b6:82:f5:1c:e3:ce:
9a:7c:f5:bd:c5:5c:bd:ff:7a:aa:08:4b:78:1c:89:6e:4f:3f:
4a:42:6a:b0:b1:79:ed:e5:80:a0:6a:8a:19:e5:38:ef:f1:fe:
93:7f:78:d2:50:14:6c:42:c6:ea:34:55:8b:e4:f8:1c:bf:a2:
8a:f7:87:36:57:80:eb:1e:91:0e:09:c8:3c:96:fa:5a:83:e6:
2e:56:95:66
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTkw
NzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKENCNUFCNkExRDQzQzlE
RTFFOEUwNjYwQ0I5RDU4REFFOEZCMDM5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWzODMqUMtVmHCh9gaPuzmJdVfydYUQbJumXk3ayfZWtUZUn38
oum9LPkrLavzwCAnD5BpC03Jah+V2AtTbRm/zlSeGeGC+ylakYL9UPc108f2ePHi
4Qf0PkqaAvVOEiPrB9evJwr42nl7fjDq6JpP/X0sxAIY2FJBsbEEtaCJ+9JSQbj6
G6ILme7vZppKsJkBDc9HcnddtRs0ZqRCX3jPJQbtg4oAzYuKcDUJjvbaC44WvCQb
fd1yU+GgBCRRTzpvVJqWczSySlBDlrZaXd9quXMkRmbnlXSkLQedeiEzs5NZcfAr
albyyWgza00HY4+26QwMOtxxAepK5DcphpmFAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUy1q2odQ8neHo4GYMudWNro+wOZYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3kxcTJvZFE4bmVIbzRH
WU11ZFdOcm8td09aWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGNTQBFDen/ce5kxs8o+kO675P8qtjGBNkl/
ZGkO3ddYv4pYFGofBTg1/ZWYoBzMFK1FpBvcTUqbZBqE35M7Srbc/I9n8eT3ZIaP
557W42yMWjtYUNQa+fNm07U49gtV4qG17nLyvSneOZyG/CNQ7bKlbOeGB8THAUE1
NR4l+i9u2yaYX9mtMaAwWjftCQuRF94fj2xw6NMXFn5VwkJXm6pCr9b5bU8qtUFE
RLGOJraC9Rzjzpp89b3FXL3/eqoIS3gciW5PP0pCarCxee3lgKBqihnlOO/x/pN/
eNJQFGxCxuo0VYvk+By/oor3hzZXgOsekQ4JyDyW+lqD5i5WlWY=
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:04:01 2025 by rpki-client