Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa
File:                     JXHg5rccl5KkR81o84OhxrIGLb0.roa (raw, json)
Hash identifier:          ZO83FP598DT+dwDbxaApG29bSw0ctWTLYz3xO6tb3cU=
Subject key identifier:   25:71:E0:E6:B7:1C:97:92:A4:47:CD:68:F3:83:A1:C6:B2:06:2D:BD
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0BB8
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa
Signing time:             Tue 07 Jan 2025 07:55:03 +0000
ROA not before:           Tue 07 Jan 2025 07:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3000 (0xbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan  7 07:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2571E0E6B71C9792A447CD68F383A1C6B2062DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:e2:32:77:7a:c0:cc:d7:1d:c2:ba:6e:67:
                    4d:70:4f:87:68:27:1d:dd:ed:cf:d2:7a:03:ee:6b:
                    3b:08:a4:4b:39:9a:4c:9c:17:15:c5:3c:d9:60:35:
                    0f:27:16:a2:24:31:86:b2:33:70:b9:01:cf:65:8a:
                    08:cf:6f:93:3c:e5:50:e1:34:46:e0:00:84:5a:aa:
                    26:52:3a:f4:dc:dd:cb:d6:be:73:78:01:11:3d:18:
                    bf:06:dd:91:3d:e9:fb:60:1e:ec:fc:c5:56:63:29:
                    77:5d:ca:dc:d9:a3:19:5f:4a:51:2d:be:04:92:a5:
                    c3:80:01:ad:40:3b:11:c3:8e:06:96:57:4b:31:97:
                    9b:46:7a:c5:32:45:5b:65:e2:fa:5b:34:ad:66:e4:
                    37:ad:4f:bf:27:42:3c:5b:87:15:41:8b:c2:2f:aa:
                    79:a2:ad:e2:21:c0:74:0d:4b:00:76:e6:85:e1:17:
                    32:a1:73:e7:6d:1f:25:88:c1:42:06:8c:87:64:2f:
                    2a:d9:87:00:c9:7e:d9:e6:f2:6d:d0:13:b3:a5:be:
                    e3:3f:2a:db:29:e7:b5:e9:19:3b:cf:6f:f4:d6:3f:
                    8b:6d:49:16:83:bb:70:82:02:cb:81:14:8a:70:2a:
                    2f:98:a4:fe:64:f7:71:34:d3:d2:bf:56:e0:52:7b:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:71:E0:E6:B7:1C:97:92:A4:47:CD:68:F3:83:A1:C6:B2:06:2D:BD
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/JXHg5rccl5KkR81o84OhxrIGLb0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:e2:76:ca:30:20:22:f9:e5:fc:3a:92:15:83:38:80:8c:
         01:e3:54:2f:76:07:b7:1b:f7:36:cf:b9:65:28:be:e3:88:88:
         4b:7e:8a:97:78:5b:f7:2f:6a:af:e8:34:45:40:b8:04:08:dd:
         79:3b:97:a7:76:34:3a:14:40:c4:13:90:ed:6c:d5:7c:7d:e7:
         b5:bd:f3:8d:bb:91:bc:1b:6b:56:c8:4b:1d:0a:44:a2:44:4b:
         cf:6b:e9:0a:d0:d8:be:39:7a:60:9f:fa:60:d1:92:b1:8b:8d:
         5a:43:a4:6f:ab:5e:1b:bb:82:98:15:31:4d:fa:89:55:b9:c0:
         54:0e:39:5f:8f:17:5c:66:5e:56:99:f0:05:79:ab:44:de:53:
         3a:a4:02:1f:4f:07:33:1a:69:37:9a:5c:41:a8:de:6f:76:24:
         60:fb:b0:61:6c:c1:db:e4:ad:97:95:83:44:1d:66:67:12:05:
         c1:53:2b:0b:12:0b:bd:a2:9a:46:14:7e:1a:32:c4:6b:fe:40:
         76:ad:ea:e5:a7:ea:31:40:ed:f8:d9:00:18:a6:93:81:53:04:
         61:72:66:a2:0d:01:6b:3c:d0:a5:6f:a9:80:68:ae:94:2e:2c:
         88:29:ff:c6:00:fc:be:35:bb:3a:1b:1e:85:60:04:52:18:ea:
         73:12:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:33:06 2025 by rpki-client