Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/wPrb_1SkN8uqjFKPSohAl4Bvwos.roa
File:                     wPrb_1SkN8uqjFKPSohAl4Bvwos.roa (raw, json)
Hash identifier:          NX3bU90Yy+YGTFSI57tASNP6oFtdKVG+E61HUQpDqGI=
Subject key identifier:   C0:FA:DB:FF:54:A4:37:CB:AA:8C:52:8F:4A:88:40:97:80:6F:C2:8B
Certificate issuer:       /CN=2ccabc2a5dcb9161aab6271a68b97a200192b09e
Certificate serial:       09
Authority key identifier: 2C:CA:BC:2A:5D:CB:91:61:AA:B6:27:1A:68:B9:7A:20:01:92:B0:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMq8Kl3LkWGqticaaLl6IAGSsJ4.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/wPrb_1SkN8uqjFKPSohAl4Bvwos.roa
Signing time:             Sat 30 Jan 2021 20:12:56 +0000
ROA not before:           Sat 30 Jan 2021 20:12:56 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48
                          2a0e:b240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccabc2a5dcb9161aab6271a68b97a200192b09e
        Validity
            Not Before: Jan 30 20:12:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=C0FADBFF54A437CBAA8C528F4A884097806FC28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:ef:e7:1a:4d:96:9f:5a:a3:bc:48:25:b6:
                    eb:46:c1:fa:66:fd:d5:01:26:a6:e5:bc:ff:d5:20:
                    f9:4e:64:d8:f8:ea:59:84:35:ee:0f:03:86:f7:4d:
                    13:01:1a:ae:02:61:f4:e4:17:8e:7a:0f:11:d1:c4:
                    68:14:f1:ed:a4:0a:42:8b:b6:45:eb:8e:f7:8b:cb:
                    ce:68:10:ac:d6:f4:00:78:a8:06:3a:1d:ee:c0:5b:
                    a1:70:db:42:d3:95:86:84:07:4e:56:60:01:27:eb:
                    32:78:3c:23:8e:16:00:6e:71:33:b4:d9:fa:53:cd:
                    2e:5c:39:6a:af:eb:87:a1:0a:2f:c5:fd:dc:d1:ff:
                    af:6f:90:2b:fb:4a:6f:92:9b:73:08:af:c4:99:48:
                    3c:40:14:0f:30:9c:4a:e2:2c:2a:7e:5a:30:42:15:
                    f2:5e:86:15:9b:60:43:1c:d6:14:7d:66:57:ee:1b:
                    fd:b3:b1:b2:0e:3b:9d:c7:1d:40:1d:a3:5a:71:b6:
                    95:36:4a:da:c9:be:20:e4:55:4b:1c:60:86:36:a4:
                    4f:9a:92:c5:c4:bd:2e:c4:3e:48:be:11:cb:94:d3:
                    3c:8a:02:08:4a:2f:61:b2:b9:f8:d6:7f:b3:85:19:
                    76:32:91:66:53:ac:d7:e5:7c:49:12:33:6c:2b:39:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:DB:FF:54:A4:37:CB:AA:8C:52:8F:4A:88:40:97:80:6F:C2:8B
            X509v3 Authority Key Identifier:
                keyid:2C:CA:BC:2A:5D:CB:91:61:AA:B6:27:1A:68:B9:7A:20:01:92:B0:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LMq8Kl3LkWGqticaaLl6IAGSsJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMq8Kl3LkWGqticaaLl6IAGSsJ4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/wPrb_1SkN8uqjFKPSohAl4Bvwos.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48
                  2a0e:b240::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:ba:fb:2a:9d:38:bf:39:46:61:01:5f:89:5f:36:28:76:
         a6:df:c3:81:64:d6:7e:7f:04:03:3c:d9:ef:0f:a5:b7:a3:e4:
         ac:18:43:4f:9e:91:50:e3:f7:c2:0f:19:71:bd:b5:9f:33:08:
         a1:61:85:72:a6:bc:1a:1d:a4:8c:f3:01:42:39:50:25:5d:97:
         3e:28:ad:d0:a8:30:ff:31:d8:83:49:03:97:1e:91:f1:e6:c1:
         35:c9:5c:3c:fd:98:4f:36:78:09:b0:ec:79:f5:41:8c:9a:1d:
         7d:d3:48:6e:f2:76:26:3f:d6:2a:9e:47:ed:56:8c:a4:2d:3b:
         1f:d3:33:8d:c7:22:5d:44:eb:f0:a6:6b:8f:1e:97:61:76:d0:
         e7:46:d0:e9:bf:c6:d4:11:a2:29:a1:61:5f:53:10:51:f8:a0:
         b0:01:52:ce:11:5e:70:18:96:a9:3f:e2:4e:06:3d:d1:ad:84:
         af:fa:99:c8:9a:21:2f:4c:5d:15:2c:f6:b3:8a:9f:3c:c8:b5:
         b3:f0:e7:35:d8:d8:c7:65:6b:6a:ea:b9:d4:a6:99:6f:4c:9c:
         5d:e0:ec:68:39:32:91:a8:c1:4c:0d:4e:46:1b:83:dc:23:a0:
         f9:82:63:df:63:a1:8b:9d:0c:69:55:ca:d5:25:5b:58:03:2a:
         d4:c0:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org