Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa
File:                     4myWyiV27jzongHLmZE-_v-ZKSQ.roa (raw, json)
Hash identifier:          ZwDQqLhZhZ+KnKPIkYcDcRUs8nLsKiMVU5LfXdrmFKQ=
Subject key identifier:   E2:6C:96:CA:25:76:EE:3C:E8:9E:01:CB:99:91:3E:FE:FF:99:29:24
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       087D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa
Signing time:             Mon 07 Oct 2024 15:55:03 +0000
ROA not before:           Mon 07 Oct 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Oct  7 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=E26C96CA2576EE3CE89E01CB99913EFEFF992924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:4a:59:a0:c0:a8:26:db:10:ad:a4:3d:b1:
                    f4:37:89:dc:9b:12:67:52:0a:b3:83:42:41:70:93:
                    61:8a:05:f0:11:48:34:1a:55:39:d1:97:0d:02:60:
                    b3:fc:53:20:eb:c5:16:52:d6:b2:df:57:a6:da:c4:
                    48:6b:f1:2c:85:d7:6f:6b:ab:7f:79:17:1e:6d:a9:
                    28:aa:e3:a7:c5:ff:85:29:74:81:05:59:ef:fb:32:
                    c4:8c:b9:bf:5a:fe:49:31:5c:88:f4:69:d4:f4:0b:
                    fb:8e:5d:48:87:4b:a7:d4:d3:ad:80:74:62:6f:d3:
                    e7:82:41:88:65:42:77:c8:6e:22:53:a0:4b:ba:dd:
                    6d:91:05:e5:84:e1:6c:85:ae:59:97:32:11:0b:33:
                    43:cb:ed:17:1a:cc:0c:c8:4b:fc:a1:fd:1c:4d:ef:
                    b8:61:62:11:ca:11:9d:5e:68:aa:7d:e6:b3:12:55:
                    42:fe:a8:37:f7:b3:b0:b7:77:fc:b0:e3:df:ed:3e:
                    99:ab:5c:21:f6:3a:e4:71:46:bc:79:5c:e4:d6:cf:
                    06:d2:9a:52:96:98:4f:67:bf:3c:e1:2c:40:1e:23:
                    0e:6c:8c:a1:89:2d:66:b1:4c:69:ff:08:9f:b0:72:
                    92:09:9a:14:8c:21:7a:d4:89:ae:62:26:cf:06:8f:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6C:96:CA:25:76:EE:3C:E8:9E:01:CB:99:91:3E:FE:FF:99:29:24
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/4myWyiV27jzongHLmZE-_v-ZKSQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:09:43:1d:14:aa:68:b2:50:9c:56:c9:94:7d:28:95:8a:
         73:8c:fc:55:6d:0c:dd:28:74:bc:ca:1b:e0:51:e6:60:c5:27:
         d0:2c:96:ee:a7:25:c3:be:8c:2f:49:db:d7:af:8a:61:7c:27:
         78:41:27:90:cb:74:bb:99:98:3a:93:e1:47:cf:5d:ac:dc:2d:
         d0:b8:1c:4f:2e:68:9a:1d:69:39:30:dd:3f:a7:6a:57:d3:87:
         5d:cb:d4:9f:1e:56:68:47:5a:57:29:02:ea:6b:a3:59:60:8c:
         11:f1:cc:6c:95:96:2e:19:2e:a9:e5:77:03:3c:94:74:9a:84:
         55:b1:fc:1f:6b:58:ca:b8:2c:0c:96:cb:96:f0:af:81:07:70:
         b4:c7:0f:41:ee:6d:ff:2e:38:fc:b9:30:7a:7e:f4:e8:fd:26:
         20:8f:84:8b:71:5b:1a:89:5c:02:5d:07:f1:32:5f:2c:5d:b9:
         2c:9b:a9:9a:12:7c:42:0f:f6:c4:17:32:13:bf:3c:f4:ff:23:
         be:46:f2:fa:f7:fa:46:63:98:e7:15:58:3b:3a:c1:69:05:54:
         69:76:ab:8c:cf:26:28:8c:d1:7f:65:ec:4c:db:6c:6d:cb:2b:
         0c:79:8a:da:ac:0b:09:5b:45:e5:0c:ec:31:04:6d:c5:fa:fc:
         ef:06:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:28:35 2025 by rpki-client