Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/BkYP2thFUg7gecLLgNrNy_LywtI.roa
File:                     BkYP2thFUg7gecLLgNrNy_LywtI.roa (raw, json)
Hash identifier:          XTRdl4JHMOo6K5MXQBAwauMSBiUa7cimEBNAu/bAypU=
Subject key identifier:   06:46:0F:DA:D8:45:52:0E:E0:79:C2:CB:80:DA:CD:CB:F2:F2:C2:D2
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0A79
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BkYP2thFUg7gecLLgNrNy_LywtI.roa
Signing time:             Mon 02 Dec 2024 23:55:03 +0000
ROA not before:           Mon 02 Dec 2024 23:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681 (0xa79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec  2 23:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=06460FDAD845520EE079C2CB80DACDCBF2F2C2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:92:b9:94:66:11:9a:ad:0e:a3:5b:19:74:
                    b7:35:b4:36:9f:8f:17:bf:7f:a1:23:f3:fe:8f:67:
                    d4:a3:f9:fb:4a:4d:ac:c9:a3:20:88:8d:9b:7e:13:
                    72:c0:a2:3a:fa:87:5e:63:24:c8:68:2c:dd:f4:e1:
                    bc:e2:4c:ab:c1:55:c2:17:dc:c1:de:93:a2:6f:b0:
                    9c:53:a3:0a:e5:28:0c:76:cf:c2:4d:fe:18:09:f7:
                    db:ad:75:27:38:21:72:36:01:ef:ba:8e:93:c3:3e:
                    f4:29:50:fa:2f:86:65:48:52:a7:fc:bc:f7:b1:10:
                    ee:07:c8:60:70:57:77:49:82:98:bc:32:45:b1:c1:
                    93:52:a0:b9:cc:f3:dd:79:48:ff:0c:64:38:7b:91:
                    6e:f9:e5:8f:7c:43:f9:25:aa:c8:42:a5:8c:e4:32:
                    8e:a2:d4:25:0f:8d:91:dc:4c:66:e9:e0:ca:ff:19:
                    b5:48:be:87:f1:e8:c2:71:49:f0:01:58:f4:03:50:
                    f1:39:0d:20:f5:dc:0a:80:ae:34:c9:be:2f:78:c4:
                    93:ff:49:64:5d:e8:4c:80:c1:23:3d:f2:b4:b5:4b:
                    9c:79:9b:7d:b5:93:ea:39:5a:f3:4d:e2:c7:af:90:
                    f4:1d:a0:24:9c:bb:77:53:3f:7e:dd:a0:98:1f:93:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:0F:DA:D8:45:52:0E:E0:79:C2:CB:80:DA:CD:CB:F2:F2:C2:D2
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/BkYP2thFUg7gecLLgNrNy_LywtI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:37:f9:f8:2c:2d:c8:2c:80:5b:be:5a:25:fe:dd:69:64:
         12:76:75:f0:13:48:41:65:cd:5d:84:82:e5:b6:ee:d9:be:1b:
         bd:e3:ce:0f:8e:57:55:b4:dd:b6:fe:63:e5:1d:19:5c:43:d0:
         2b:bd:be:9b:b5:21:23:63:08:ac:b3:aa:5e:3e:de:6e:a7:9d:
         80:f3:df:30:9d:38:a9:f3:dd:c4:b0:85:e9:9a:3d:11:07:2f:
         34:0c:0d:43:d4:b8:5f:09:7f:0c:d8:26:b8:9a:19:22:bb:2a:
         d4:17:fe:a7:e0:34:e9:3a:c7:60:ee:4e:da:b7:2b:01:99:8f:
         ba:7c:c1:ea:62:31:8e:66:58:4a:f3:74:09:89:54:6c:04:94:
         e9:25:48:f0:aa:0c:4c:e3:01:04:70:55:82:12:05:f3:1c:0a:
         e1:e8:20:f2:29:f1:59:ba:c2:fe:3b:ac:2c:9c:17:83:c6:19:
         b1:47:f3:42:3b:bc:ec:aa:93:3a:a1:f3:cc:22:3f:3e:3c:7a:
         50:7c:b4:d1:73:2d:ee:47:4d:7f:34:48:08:20:11:a3:50:3c:
         41:0b:5c:ac:63:f1:68:44:c3:f0:44:7a:7c:3f:d2:78:81:80:
         8b:7c:0d:8b:7b:4c:ef:25:d4:2d:ec:ef:5e:4d:e2:e1:5c:22:
         2c:30:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:13:45 2025 by rpki-client