Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa
File:                     EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa (raw, json)
Hash identifier:          Fp0tEiDLZ8D+49+JjKP90XTxEXok9yNM5hK/oFDUifQ=
Subject key identifier:   11:63:77:5A:20:E0:75:18:3B:60:74:07:84:61:91:94:14:71:EC:5A
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C15
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa
Signing time:             Fri 17 Jan 2025 15:55:03 +0000
ROA not before:           Fri 17 Jan 2025 15:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 17 15:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1163775A20E075183B607407846191941471EC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:c8:ce:30:e9:ef:91:7a:75:75:b1:e3:bc:
                    00:33:e6:0d:43:0e:2f:c4:06:40:c4:88:fe:1a:ec:
                    ff:f4:75:0e:74:9f:c7:f5:13:ea:7a:bf:98:09:ea:
                    61:43:b0:c0:9b:3a:14:ec:d3:0c:17:b8:f8:e0:12:
                    6f:eb:71:54:34:81:a3:7d:d7:e1:f9:24:3e:04:ba:
                    24:f7:22:23:f1:e4:f2:88:5a:04:4f:f2:95:9b:61:
                    da:7c:ec:ee:68:26:f6:2a:b9:78:30:67:d0:0f:ec:
                    60:e5:b1:25:b9:0f:8c:30:7d:2b:dd:3e:d0:e4:38:
                    ac:13:2e:55:1a:85:d3:a0:c6:64:35:cf:98:a8:19:
                    8a:2a:c4:91:11:5d:b3:75:28:8c:5a:f8:42:da:07:
                    49:26:25:e9:95:f4:d8:c9:e6:c5:af:8a:05:de:52:
                    1d:85:9c:0e:ca:99:13:5f:39:39:a3:03:53:a3:85:
                    1a:6a:5c:3c:f8:19:2f:79:19:0a:5a:d0:86:dd:25:
                    49:8a:2a:ad:b1:10:fd:8c:a0:23:27:de:f3:6d:2c:
                    3e:84:6f:c0:24:2f:bb:ad:9b:0f:94:62:41:ca:51:
                    f4:11:97:b8:aa:d4:64:c2:a9:aa:96:d2:84:22:ed:
                    00:66:72:b7:06:01:b6:12:58:0c:73:8d:36:da:9c:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:77:5A:20:E0:75:18:3B:60:74:07:84:61:91:94:14:71:EC:5A
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EWN3WiDgdRg7YHQHhGGRlBRx7Fo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:4a:1d:fc:19:bc:c5:be:75:33:f8:09:3f:bf:e5:40:c3:
         a7:11:8c:d1:c7:dd:ff:f9:eb:2a:70:ea:17:21:9a:b9:82:ce:
         f8:bf:af:36:53:bc:50:e9:17:fa:d7:f5:21:57:a1:b7:d6:8d:
         8c:2f:63:15:27:86:6d:62:b9:18:12:98:d9:e9:a1:88:48:71:
         1b:02:a6:3b:90:a3:f4:ca:81:9b:c3:20:a6:89:bb:bb:cc:57:
         d1:06:43:ef:ef:4f:34:06:50:3b:6b:7c:ec:e3:74:c7:e1:46:
         88:66:e5:87:d6:a7:94:7c:0e:be:85:0a:10:90:ee:c4:0f:07:
         d3:e3:b5:1d:bd:63:39:a4:ec:fd:fa:fe:2b:06:ed:1d:62:40:
         51:a0:23:d8:1a:45:9b:3e:3f:dc:c1:71:b0:0b:04:52:4c:28:
         76:bf:a1:7d:9b:ad:9c:54:45:25:62:22:4e:1a:59:c1:7d:27:
         4b:7a:55:c3:65:99:6d:09:f1:0e:57:93:38:1b:8b:ba:29:da:
         6f:f5:d2:6e:ee:a7:0d:98:9c:4e:39:dc:fa:3f:30:a8:3d:22:
         a2:5d:e4:d9:80:97:f9:d1:4a:ea:ca:fb:73:ee:6d:f4:10:7c:
         d6:ff:70:ea:78:eb:2a:2b:11:f6:97:e3:f0:6d:78:6b:cd:4d:
         1f:27:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:44:25 2025 by rpki-client