Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa
File:                     6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa (raw, json)
Hash identifier:          s/wG5QRYYe8KSaywRGA15LzSydzu8Fg2vZuEGUwsxsE=
Subject key identifier:   EA:DF:E8:E2:97:B8:4E:E4:5A:03:22:91:0F:82:AE:52:43:C6:BD:D4
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0AA0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa
Signing time:             Sat 07 Dec 2024 07:55:03 +0000
ROA not before:           Sat 07 Dec 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720 (0xaa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec  7 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=EADFE8E297B84EE45A0322910F82AE5243C6BDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:8e:99:1f:ab:e1:76:a6:23:ba:0d:72:8a:
                    72:82:da:07:a7:9f:c5:ef:62:f5:04:b3:94:86:68:
                    be:a1:43:24:bc:df:01:21:2c:25:56:f4:ce:53:dd:
                    5a:ea:8e:62:c4:28:5d:70:07:84:d0:bb:a6:11:b6:
                    9b:07:62:8c:8c:d9:a4:f3:f6:2f:54:7a:09:ff:f8:
                    e2:6b:e3:cd:88:a0:00:e4:41:ea:ab:34:d2:43:aa:
                    58:80:dc:5c:94:2f:09:32:fa:9c:35:50:3f:b4:05:
                    34:ac:6f:ad:2c:f0:8f:2a:bb:1b:45:3a:26:6d:18:
                    06:d7:fb:97:13:93:df:e5:94:d6:f5:1e:46:df:85:
                    45:d5:60:18:af:51:6c:c9:f0:84:f1:34:34:a1:00:
                    1a:5a:c5:a7:19:88:d6:e9:30:ed:85:e7:4e:5d:0d:
                    98:d1:ba:59:ab:01:ef:d7:bd:56:aa:98:64:7d:d5:
                    95:eb:a4:3b:d2:93:5f:97:ff:16:f9:fb:b7:b0:63:
                    c5:cd:bc:3a:97:24:f5:d6:64:28:3e:ab:94:d8:17:
                    03:59:b6:5f:97:97:ad:26:8a:4e:af:c8:8c:ca:48:
                    57:35:8b:e5:3c:3d:dd:1c:fe:0d:a6:bc:fa:ef:dd:
                    21:ed:5f:80:4a:1a:fd:7a:b8:44:d2:80:5f:b4:6d:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:E8:E2:97:B8:4E:E4:5A:03:22:91:0F:82:AE:52:43:C6:BD:D4
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6t_o4pe4TuRaAyKRD4KuUkPGvdQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:9c:a9:5b:cc:34:ee:32:9c:47:b3:fc:8e:de:08:d3:94:
         62:83:83:3a:4e:84:02:91:86:34:0d:e8:6f:8d:47:67:b4:79:
         66:c3:c8:ff:5c:fb:8c:f0:a2:82:22:5e:09:06:81:a2:8d:ff:
         13:1c:2a:7e:d2:de:58:70:e5:a8:93:75:35:31:1c:8f:fe:a7:
         2e:b1:ea:a4:17:86:f8:95:ad:ec:5a:3b:85:29:ef:8a:ed:05:
         7a:7e:6b:73:9c:ed:3c:f6:62:78:05:98:76:54:4c:35:44:75:
         f6:f5:31:dd:12:57:7e:ca:b5:e3:ab:f9:46:fc:53:2e:59:41:
         69:d5:bb:5d:1f:65:7d:06:77:66:df:bc:01:88:e4:f0:db:d7:
         e6:c4:9e:19:4b:46:76:21:94:70:79:bd:e3:01:b0:47:ac:b7:
         81:f3:2b:93:e1:5c:81:b5:b5:81:ec:d6:d5:81:87:99:c7:97:
         b5:aa:84:f6:aa:3c:ea:dc:fb:66:37:77:82:d4:f7:4c:9c:4e:
         55:e3:1b:60:5e:ae:2a:de:41:b3:4c:5a:33:40:56:59:03:ae:
         56:ea:f9:79:cd:85:ac:b0:df:34:10:90:0d:c4:18:56:dd:53:
         1a:ec:6f:55:50:db:eb:65:42:88:d9:56:81:16:1a:a1:b4:ae:
         e3:96:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:10 2025 by rpki-client