Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa
File:                     SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa (raw, json)
Hash identifier:          teYSzL6LBffELUiQfhk5hZtwJCccKNwJx5j1ow9dofk=
Subject key identifier:   49:76:BE:45:FC:E2:DA:D7:83:5B:FC:40:BD:30:7D:6F:B4:0C:C9:F6
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0ADF
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa
Signing time:             Sat 14 Dec 2024 07:55:05 +0000
ROA not before:           Sat 14 Dec 2024 07:55:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec 14 07:55:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4976BE45FCE2DAD7835BFC40BD307D6FB40CC9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:ab:cd:e7:9b:b5:47:b8:37:5b:33:78:5b:
                    83:61:c7:81:1b:40:ef:98:57:50:10:d3:d4:26:7a:
                    4b:a3:c6:3a:ba:9f:42:7f:13:ab:b0:5f:c0:b9:e0:
                    3e:91:6c:60:61:80:ed:b0:0f:21:5c:b7:a9:61:3f:
                    b3:bc:87:95:eb:3f:1f:80:5d:5f:1a:0c:22:81:41:
                    5d:55:b7:4e:c0:65:71:8f:4c:83:fe:ed:5a:4d:a8:
                    71:75:b9:0d:45:95:9b:78:a0:02:95:c9:95:d9:c3:
                    88:3e:b5:e8:4f:ad:a4:34:10:b4:7a:db:0f:42:63:
                    4b:2c:13:29:a2:33:74:3b:76:40:ce:d6:03:78:ad:
                    9c:00:e1:97:34:d0:8e:4b:9d:fb:ba:48:28:ec:f7:
                    c1:65:38:aa:18:11:30:db:6b:4a:01:6a:ca:7e:c2:
                    e7:35:9d:fa:9d:4f:f9:0a:46:d3:23:0c:57:3f:3f:
                    bf:f5:59:c1:db:87:d4:5a:0e:a9:90:28:3d:8f:7f:
                    7e:40:be:ee:01:9c:ce:88:a8:74:34:77:44:c4:df:
                    15:3b:18:74:9c:5e:a1:bd:86:b3:a1:e5:95:73:27:
                    37:4d:60:24:05:ab:94:2b:7a:d6:ab:bc:3c:91:af:
                    9a:07:ec:d0:ea:2c:97:90:bf:a1:e1:5a:35:db:58:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:76:BE:45:FC:E2:DA:D7:83:5B:FC:40:BD:30:7D:6F:B4:0C:C9:F6
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/SXa-Rfzi2teDW_xAvTB9b7QMyfY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:c3:39:0f:7e:1b:e6:11:24:ab:5e:97:3d:41:f7:61:86:
         c2:2d:29:a5:52:16:5e:42:a3:79:92:65:bf:0c:17:fb:e2:6b:
         3a:14:9b:12:2b:ab:d7:f3:bc:b5:43:6c:a8:8d:3a:7c:8e:aa:
         a1:01:64:c0:1c:d7:db:0a:63:a2:94:65:77:d6:41:aa:07:3c:
         b4:78:fb:e5:9a:1f:70:3b:83:94:c9:f0:60:98:cf:73:87:e3:
         a3:e3:36:74:81:37:1e:a1:b7:14:03:80:f3:e4:bd:14:0e:7f:
         bf:e3:59:c5:b3:9e:91:25:c8:58:7e:67:f2:d7:a5:42:88:f4:
         6d:cf:11:c1:d7:4d:4a:63:ae:97:9c:41:f0:a2:98:8e:e6:60:
         f1:35:71:23:38:57:da:1d:99:36:8b:1a:31:14:fd:a5:7b:69:
         58:59:2c:ac:e2:10:df:74:0f:a2:40:29:75:19:be:c2:5e:3c:
         98:37:ef:90:3d:76:86:33:a2:c5:1d:ac:12:ed:da:fa:3b:d6:
         8c:c5:75:c8:d6:cd:04:fa:ef:c2:00:2e:02:cb:1c:25:0a:45:
         30:31:2c:8f:8e:c1:57:48:81:f0:03:be:53:7a:71:90:c9:49:
         06:3d:06:ec:68:40:e4:23:13:6e:a8:af:ac:dd:81:79:e3:df:
         bf:0e:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:01:17 2025 by rpki-client