Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa
File: yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa (raw, json)
Hash identifier: j66J6qUEf5NNpT9VgjDUTkMs2qEFvhs2tXfc6GZslR8=
Subject key identifier: CA:E1:31:C1:A0:E3:43:44:01:1D:4F:62:0C:14:E8:CE:42:29:F4:44
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0BBB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa
Signing time: Tue 07 Jan 2025 15:55:04 +0000
ROA not before: Tue 07 Jan 2025 15:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Jan 7 15:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CAE131C1A0E34344011D4F620C14E8CE4229F444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:8f:77:bb:67:e1:1c:bb:94:73:f0:92:bf:
d9:3e:8b:3d:cd:76:93:ac:6f:f4:ea:21:ea:89:c7:
b9:a4:2a:3c:df:1f:58:19:b5:f9:e0:61:6c:af:e1:
bf:3e:70:34:b7:b2:3a:86:13:38:18:a4:60:d0:0d:
a8:8e:68:f2:be:4d:8f:01:4f:5a:b2:dd:52:eb:d2:
60:4b:89:c1:b5:e0:5f:5f:bc:97:c9:9f:97:ea:8a:
0e:03:1f:66:e6:12:c6:4a:8c:1f:49:58:1d:06:f3:
33:c5:40:de:f4:28:99:ef:0e:d0:99:36:f3:45:d3:
92:ce:db:f2:39:d8:21:ee:dc:43:02:05:c3:d6:51:
d3:76:0c:84:64:f2:72:cc:06:a1:7a:91:95:3c:e3:
0f:83:12:4d:3b:1f:59:29:5b:48:50:f6:5c:80:ae:
14:97:91:cc:f2:7f:23:14:a1:b4:f2:0b:0e:ee:3d:
2c:e1:76:28:77:1d:db:30:fd:ca:0c:b2:13:99:75:
98:73:c6:48:6f:bb:6b:e3:28:9a:6d:f6:3a:0e:c6:
b9:c4:ab:6f:cc:a1:9c:ac:e3:97:c4:3d:71:f3:49:
8d:00:05:fb:81:6c:de:63:39:db:13:b7:8a:bf:f0:
8c:e2:f3:0c:51:5c:0b:b9:a3:11:2b:e3:04:ba:ee:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:31:C1:A0:E3:43:44:01:1D:4F:62:0C:14:E8:CE:42:29:F4:44
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2f:62:d2:23:c7:75:de:77:fb:9b:b5:01:24:35:f5:22:a4:
21:d4:31:34:b6:3e:cb:1f:cd:84:72:aa:78:93:5c:54:78:e0:
97:0e:70:1d:55:dc:4c:bf:ef:07:1b:59:ae:3c:94:8a:b7:34:
65:8d:e6:3a:1d:45:56:e1:ad:d5:5a:2c:14:50:7a:e2:3c:19:
66:d8:40:dd:ef:e6:8b:5d:ee:42:08:cd:ec:55:87:d6:f6:15:
32:e0:86:b3:0b:ea:36:86:79:95:b0:a5:42:0e:36:9e:98:0c:
f4:ab:c4:5b:80:fe:f7:3b:4c:ef:bc:35:ca:82:b6:f6:c0:0f:
83:7e:69:cc:dc:43:2f:7f:88:04:aa:a3:cb:4d:3e:8d:57:97:
0b:0f:ec:80:57:5d:57:1f:30:c8:c6:1c:cc:11:53:9d:05:ad:
e5:7a:11:7b:9b:ea:39:35:fc:50:e5:a6:09:b1:1e:69:84:f4:
26:7d:40:aa:c4:96:78:4c:df:7c:81:f0:69:dd:d6:96:37:6f:
c4:d6:f5:1e:b6:f2:93:67:17:44:89:a8:6c:31:17:9a:e4:18:
62:af:56:fe:cb:5c:c4:12:00:2e:fd:f0:be:b5:4a:72:d5:99:
dc:76:05:69:7b:13:ef:92:15:b7:10:1e:5b:15:48:fd:2b:97:
dc:5d:c5:42
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMDcx
NTU1MDRaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKENBRTEzMUMxQTBFMzQz
NDQwMTFENEY2MjBDMTRFOENFNDIyOUY0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKtI93u2fhHLuUc/CSv9k+iz3NdpOsb/TqIeqJx7mkKjzfH1gZ
tfngYWyv4b8+cDS3sjqGEzgYpGDQDaiOaPK+TY8BT1qy3VLr0mBLicG14F9fvJfJ
n5fqig4DH2bmEsZKjB9JWB0G8zPFQN70KJnvDtCZNvNF05LO2/I52CHu3EMCBcPW
UdN2DIRk8nLMBqF6kZU84w+DEk07H1kpW0hQ9lyArhSXkczyfyMUobTyCw7uPSzh
dih3Hdsw/coMshOZdZhzxkhvu2vjKJpt9joOxrnEq2/MoZys45fEPXHzSY0ABfuB
bN5jOdsTt4q/8Izi8wxRXAu5oxEr4wS67jMzAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUyuExwaDjQ0QBHU9iDBTozkIp9EQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL3l1RXh3YURqUTBRQkhV
OWlEQlRvemtJcDlFUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBACYvYtIjx3Xed/ubtQEkNfUipCHUMTS2Pssf
zYRyqniTXFR44JcOcB1V3Ey/7wcbWa48lIq3NGWN5jodRVbhrdVaLBRQeuI8GWbY
QN3v5otd7kIIzexVh9b2FTLghrML6jaGeZWwpUIONp6YDPSrxFuA/vc7TO+8NcqC
tvbAD4N+aczcQy9/iASqo8tNPo1XlwsP7IBXXVcfMMjGHMwRU50FreV6EXub6jk1
/FDlpgmxHmmE9CZ9QKrElnhM33yB8Gnd1pY3b8TW9R628pNnF0SJqGwxF5rkGGKv
Vv7LXMQSAC798L61SnLVmdx2BWl7E++SFbcQHlsVSP0rl9xdxUI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:34:15 2025 by rpki-client