Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa
File:                     EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa (raw, json)
Hash identifier:          I8mLMnWeVQqFNcBeYKmEBsPEFYtwSAeFAVJtPX119y8=
Subject key identifier:   11:96:39:F6:95:6E:38:45:D4:A4:01:D7:3B:A3:9B:FF:64:BA:B3:66
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0B66
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa
Signing time:             Sun 29 Dec 2024 07:55:03 +0000
ROA not before:           Sun 29 Dec 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec 29 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=119639F6956E3845D4A401D73BA39BFF64BAB366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:5d:f3:e4:c6:ed:b0:90:54:df:9f:0e:5d:
                    59:86:c5:26:be:b4:b6:d1:e8:84:4b:ae:4b:97:93:
                    de:8d:dc:c6:2c:54:19:d0:c0:0e:41:1f:9b:c4:66:
                    7c:b1:27:4c:26:1f:f7:60:ea:15:b0:81:76:56:eb:
                    f6:7c:11:f7:f3:8f:ed:ef:45:85:3f:26:77:57:5c:
                    ae:07:3c:11:e3:c2:e3:1a:38:81:50:f6:0c:9f:13:
                    cc:25:d4:06:fc:6a:76:a0:7f:c9:9e:57:32:63:2c:
                    68:e0:c6:21:6b:c5:f8:83:09:85:73:bd:65:48:4d:
                    03:cd:db:d3:9a:16:90:70:e3:a4:d5:5c:eb:74:d1:
                    fd:75:73:df:bb:7f:1e:d1:ba:93:0b:ae:79:34:b4:
                    64:82:48:4d:b6:01:f4:29:6e:bc:43:5d:8b:90:de:
                    31:79:fc:9b:16:06:76:5b:2b:67:de:6c:8a:fd:4e:
                    ea:63:ec:11:09:8e:ac:ea:ec:74:8a:27:02:fe:77:
                    96:4f:c5:4f:18:69:25:5d:5c:a7:f5:1d:c3:7b:71:
                    c3:b8:63:69:79:83:73:c2:51:b6:da:6a:b7:d2:69:
                    1d:94:59:1b:c9:53:73:58:cd:3d:94:9a:2a:16:52:
                    18:83:b1:75:9b:5d:00:10:9b:b0:92:08:4a:7e:a0:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:39:F6:95:6E:38:45:D4:A4:01:D7:3B:A3:9B:FF:64:BA:B3:66
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/EZY59pVuOEXUpAHXO6Ob_2S6s2Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:6e:4c:e7:f0:e0:dc:48:58:cf:c6:a6:bd:75:cc:cc:bb:
         16:80:20:ce:5f:2d:e5:ae:72:f4:b5:49:8b:0f:47:dd:23:49:
         99:9f:62:16:45:a1:af:c8:d9:0b:76:2b:35:b1:90:dd:85:92:
         18:8b:84:f5:8d:35:e3:57:90:a3:8a:a8:4b:09:d4:e0:ee:04:
         21:5d:e4:a9:03:c2:41:90:80:bd:dd:1a:53:10:61:5f:cf:a3:
         3d:ec:c9:92:11:10:6d:8d:d3:a8:34:9e:74:19:e4:c2:96:e7:
         64:a8:82:cb:4b:1b:b9:4a:ba:21:ec:f5:d6:6c:f6:b1:c1:1b:
         6d:80:d8:1a:ab:76:9a:cc:96:ed:53:dc:d4:00:b6:e3:e9:d7:
         69:50:e1:99:a7:6c:78:b3:93:e7:53:2d:27:52:61:dc:c7:57:
         5f:9c:7b:ef:03:10:ad:47:c8:31:e4:bb:ae:3a:6a:82:9a:f0:
         79:0c:b9:22:1c:a3:22:36:48:9b:2c:1c:fb:6c:04:83:7a:68:
         92:7d:29:56:a3:8a:1d:7a:42:5a:6e:57:75:93:4c:0c:f2:22:
         a9:b0:d8:d2:bb:ae:aa:19:f4:04:e1:d3:12:21:e9:6a:5d:a9:
         ff:fa:75:cc:7a:f7:63:c5:bf:69:cc:72:29:97:7b:6d:5f:23:
         98:bf:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:32:05 2025 by rpki-client