Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa
File:                     Gwux-bgoARMf0DAmjpnBLxIQDac.roa (raw, json)
Hash identifier:          +yza7C4jODTeO4JPQsFBRNtrHopfCeH3koSgv2LLq1s=
Subject key identifier:   1B:0B:B1:F9:B8:28:01:13:1F:D0:30:26:8E:99:C1:2F:12:10:0D:A7
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0A61
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa
Signing time:             Sat 30 Nov 2024 07:55:03 +0000
ROA not before:           Sat 30 Nov 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657 (0xa61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Nov 30 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1B0BB1F9B82801131FD030268E99C12F12100DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:20:17:01:7d:ee:45:1c:91:43:e5:48:3a:
                    ae:91:a8:56:ac:36:66:5c:12:23:95:ef:bd:ec:a8:
                    b8:90:d4:c7:03:5a:e6:05:1c:f6:f5:aa:bc:ce:ca:
                    f9:96:1e:e3:74:84:bd:33:d3:ca:9d:50:1e:c8:b7:
                    b3:b4:da:ed:d1:43:a0:62:25:67:5f:09:85:64:ba:
                    14:28:0b:79:60:d0:9c:b8:dc:aa:68:74:54:88:e9:
                    83:e5:23:2a:f3:a3:77:a2:3a:30:c7:71:60:93:e6:
                    aa:5f:63:9d:3d:fc:e8:7d:08:4b:96:c1:36:41:4c:
                    7d:6a:c0:36:8f:28:a0:ae:a6:88:cc:16:55:40:06:
                    b1:bc:59:3d:28:c5:f8:a5:6c:0d:41:dd:29:18:e9:
                    fe:4e:0b:7e:1a:92:49:ed:c2:56:cc:78:7b:e8:31:
                    a7:99:76:44:d5:e7:3f:f9:46:0d:ec:a2:de:ac:25:
                    d3:72:3a:b8:01:10:d4:88:55:ce:89:58:f1:7f:14:
                    30:94:1f:ea:32:f7:52:7a:8a:98:e5:4f:03:60:9c:
                    7f:66:ff:6e:94:32:f6:3b:f5:dc:2c:ad:21:95:5f:
                    05:7b:04:05:00:8b:e2:88:5a:d3:7e:49:c9:2c:64:
                    81:01:f3:d2:6a:35:7a:66:10:06:8b:83:02:5b:24:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:B1:F9:B8:28:01:13:1F:D0:30:26:8E:99:C1:2F:12:10:0D:A7
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Gwux-bgoARMf0DAmjpnBLxIQDac.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:62:f8:78:05:39:88:67:55:72:96:d5:71:9e:f1:d0:50:
         d1:15:ec:f6:63:0b:cc:09:4c:4f:de:a6:21:97:26:b6:78:a8:
         75:1b:e7:ad:ac:a6:a9:09:3f:b1:c1:f5:49:be:29:ab:6f:c5:
         34:81:ec:11:a8:5d:aa:8f:cd:b0:b6:6d:ce:14:24:d2:d7:e1:
         6b:31:71:1d:40:38:fa:24:9d:1d:1b:ce:08:78:a2:cb:ab:b8:
         89:06:19:19:7d:a8:09:be:c6:4e:75:e3:6a:90:6f:d9:06:51:
         67:2f:be:90:ec:38:8a:3a:33:58:20:5d:8c:64:a5:94:c8:c2:
         37:dd:9b:65:44:b4:cf:2a:2b:a3:8b:a7:9f:9d:95:97:c6:78:
         07:c3:0d:7a:89:c0:ef:b7:18:c6:15:a5:8f:bd:41:cf:34:07:
         41:22:2c:2e:52:fb:4d:74:8f:f1:1a:5d:c9:6b:c6:8a:71:50:
         22:31:de:af:ff:be:80:76:f1:fc:11:8e:f6:a9:0c:88:13:2e:
         8e:51:4c:d2:a8:ca:bd:d9:11:cf:77:ba:d9:b9:67:63:25:15:
         99:15:bc:d8:16:81:50:4d:84:bc:43:c1:c3:af:8c:12:3c:42:
         bd:57:d0:82:a0:7a:b5:4c:d1:97:11:18:e1:55:c0:a7:82:43:
         02:25:e6:ac
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDExMzAw
NzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDFCMEJCMUY5QjgyODAx
MTMxRkQwMzAyNjhFOTlDMTJGMTIxMDBEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+9SAXAX3uRRyRQ+VIOq6RqFasNmZcEiOV773sqLiQ1McDWuYF
HPb1qrzOyvmWHuN0hL0z08qdUB7It7O02u3RQ6BiJWdfCYVkuhQoC3lg0Jy43Kpo
dFSI6YPlIyrzo3eiOjDHcWCT5qpfY509/Oh9CEuWwTZBTH1qwDaPKKCupojMFlVA
BrG8WT0oxfilbA1B3SkY6f5OC34akkntwlbMeHvoMaeZdkTV5z/5Rg3sot6sJdNy
OrgBENSIVc6JWPF/FDCUH+oy91J6ipjlTwNgnH9m/26UMvY79dwsrSGVXwV7BAUA
i+KIWtN+ScksZIEB89JqNXpmEAaLgwJbJBO7AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUGwux+bgoARMf0DAmjpnBLxIQDacwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0d3dXgtYmdvQVJNZjBE
QW1qcG5CTHhJUURhYy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAJ87Yvh4BTmIZ1VyltVxnvHQUNEV7PZjC8wJ
TE/epiGXJrZ4qHUb562spqkJP7HB9Um+KatvxTSB7BGoXaqPzbC2bc4UJNLX4Wsx
cR1AOPoknR0bzgh4osuruIkGGRl9qAm+xk5142qQb9kGUWcvvpDsOIo6M1ggXYxk
pZTIwjfdm2VEtM8qK6OLp5+dlZfGeAfDDXqJwO+3GMYVpY+9Qc80B0EiLC5S+010
j/EaXclrxopxUCIx3q//voB28fwRjvapDIgTLo5RTNKoyr3ZEc93utm5Z2MlFZkV
vNgWgVBNhLxDwcOvjBI8Qr1X0IKgerVM0ZcRGOFVwKeCQwIl5qw=
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:05:08 2025 by rpki-client