Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa
File:                     Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa (raw, json)
Hash identifier:          6S3BqVDbcK4xDcoR4CeE4rKNxf6wSWWHAOdtyLgS+S4=
Subject key identifier:   2A:0F:EC:6F:55:5D:F9:0A:AE:E9:14:64:D3:54:86:70:FA:D9:AD:64
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0B0F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa
Signing time:             Thu 19 Dec 2024 15:55:02 +0000
ROA not before:           Thu 19 Dec 2024 15:55:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2831 (0xb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec 19 15:55:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2A0FEC6F555DF90AAEE91464D3548670FAD9AD64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:c8:fc:b9:1d:8d:97:d4:c6:bb:08:f4:69:
                    5c:a0:a9:59:40:7f:17:48:3b:fc:33:4b:ff:b6:51:
                    a5:11:c7:2d:de:04:d9:9f:8d:3f:71:fc:d8:9e:00:
                    f0:3b:78:35:d4:f1:74:c8:0e:3e:aa:a9:d5:30:0c:
                    e5:c7:62:09:c8:26:58:c1:1c:cb:48:1c:2e:88:45:
                    03:bb:2f:65:59:07:a0:9f:80:e8:06:af:72:b3:f9:
                    84:8b:fc:c5:6e:39:61:01:ae:c4:10:48:bb:97:90:
                    f0:bd:e9:b3:a9:5b:54:21:f3:7d:86:77:e0:99:3a:
                    a4:c0:5f:7c:2b:27:71:62:83:94:07:2b:48:63:ed:
                    3c:af:09:74:e0:3b:b5:0c:68:1a:ff:61:fd:f8:68:
                    7e:8e:b6:3a:a4:a3:f8:20:2e:1f:2c:66:e9:af:3c:
                    96:a0:9b:83:27:91:d5:1e:3b:33:b3:0c:94:93:9a:
                    2f:5a:f9:94:33:92:10:07:55:30:a1:95:ee:e7:90:
                    b0:e2:fc:d8:08:d6:a4:2c:df:9c:05:82:0f:56:3e:
                    7e:5b:7c:76:1d:f9:6f:bf:f7:ea:ed:83:5a:5b:c2:
                    95:b8:69:2e:92:e6:83:89:cc:fa:c1:13:37:04:fd:
                    fe:ff:d6:ae:cc:c5:ec:a8:5b:4a:de:26:82:ad:55:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:EC:6F:55:5D:F9:0A:AE:E9:14:64:D3:54:86:70:FA:D9:AD:64
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Kg_sb1Vd-Qqu6RRk01SGcPrZrWQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:ed:60:b0:d5:ea:bc:1c:a4:f5:ce:97:44:56:67:b4:f1:b3:
         0f:c7:ec:5a:9d:4e:fe:9a:6b:d2:76:41:f8:c6:71:2d:a8:e1:
         a6:ab:72:a8:aa:d4:72:b1:74:f4:40:ee:ac:c6:8b:80:43:3e:
         6c:27:4a:8d:90:c4:17:d9:3f:6a:04:62:7b:b2:c1:0e:8a:be:
         d8:e9:0a:dd:68:ad:f6:d5:5d:70:b4:58:fa:cc:bf:fc:32:ac:
         46:20:b3:78:3d:8d:03:bd:38:8f:2d:f8:97:9c:01:84:62:7a:
         12:f0:32:36:9a:b1:41:17:fa:bc:a0:71:09:23:53:24:56:d0:
         d9:6b:f1:89:a1:b9:77:17:ec:e1:c9:8a:24:87:bb:c3:9a:05:
         b8:1b:8f:9c:10:17:16:c0:27:f7:ff:04:0f:74:ef:dc:f9:f4:
         13:74:6e:30:8d:a0:8e:ce:dc:5f:a6:3c:14:f7:8c:46:ed:e1:
         29:82:a3:ed:ef:ae:4d:97:74:af:44:cf:d9:00:69:dd:15:f1:
         3f:18:41:6e:a4:05:a9:c2:e7:d4:18:cd:a3:93:d2:2a:6c:f2:
         55:71:1f:79:a5:37:73:52:77:cb:89:d9:6f:7b:94:a4:11:e8:
         92:85:3b:0b:ff:ed:6a:e5:7a:59:ac:a1:fc:8f:b0:b5:70:64:
         ca:6d:d2:d4
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTkx
NTU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJBMEZFQzZGNTU1REY5
MEFBRUU5MTQ2NEQzNTQ4NjcwRkFEOUFENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd0cj8uR2Nl9TGuwj0aVygqVlAfxdIO/wzS/+2UaURxy3eBNmf
jT9x/NieAPA7eDXU8XTIDj6qqdUwDOXHYgnIJljBHMtIHC6IRQO7L2VZB6CfgOgG
r3Kz+YSL/MVuOWEBrsQQSLuXkPC96bOpW1Qh832Gd+CZOqTAX3wrJ3Fig5QHK0hj
7TyvCXTgO7UMaBr/Yf34aH6Otjqko/ggLh8sZumvPJagm4MnkdUeOzOzDJSTmi9a
+ZQzkhAHVTChle7nkLDi/NgI1qQs35wFgg9WPn5bfHYd+W+/9+rtg1pbwpW4aS6S
5oOJzPrBEzcE/f7/1q7MxeyoW0reJoKtVTtJAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUKg/sb1Vd+Qqu6RRk01SGcPrZrWQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0tnX3NiMVZkLVFxdTZS
UmswMVNHY1ByWnJXUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAMntYLDV6rwcpPXOl0RWZ7Txsw/H7FqdTv6a
a9J2QfjGcS2o4aarcqiq1HKxdPRA7qzGi4BDPmwnSo2QxBfZP2oEYnuywQ6Kvtjp
Ct1orfbVXXC0WPrMv/wyrEYgs3g9jQO9OI8t+JecAYRiehLwMjaasUEX+rygcQkj
UyRW0Nlr8YmhuXcX7OHJiiSHu8OaBbgbj5wQFxbAJ/f/BA9079z59BN0bjCNoI7O
3F+mPBT3jEbt4SmCo+3vrk2XdK9Ez9kAad0V8T8YQW6kBanC59QYzaOT0ips8lVx
H3mlN3NSd8uJ2W97lKQR6JKFOwv/7WrlelmsofyPsLVwZMpt0tQ=
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:06:16 2025 by rpki-client