Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa
File:                     W1v3YY8dXYlH9qOhcnNZATMZXJI.roa (raw, json)
Hash identifier:          kpflN2sy9HI3zhXeJuAv8K8fkHjDxbxJB3uOyqf2f7w=
Subject key identifier:   5B:5B:F7:61:8F:1D:5D:89:47:F6:A3:A1:72:73:59:01:33:19:5C:92
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C57
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa
Signing time:             Fri 24 Jan 2025 23:55:03 +0000
ROA not before:           Fri 24 Jan 2025 23:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 24 23:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5B5BF7618F1D5D8947F6A3A17273590133195C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:ce:3e:75:c1:1b:30:db:ff:67:18:c5:b4:
                    1f:f1:b6:ba:d9:d9:37:41:44:e6:41:50:aa:5f:54:
                    b5:8f:02:47:22:bc:03:8f:f9:a4:21:22:77:9b:6d:
                    ba:7b:23:8d:ea:3f:13:76:e4:f8:27:c1:e5:ba:2f:
                    ca:54:57:b2:60:7f:83:cd:5e:3d:0a:33:15:aa:f7:
                    19:13:2b:da:95:b5:db:4a:53:dc:ce:9d:0f:6d:aa:
                    9d:9f:7d:f6:46:a2:04:67:69:d1:22:5b:16:fb:3f:
                    c7:41:29:c0:c4:b1:9a:22:62:69:15:e9:2c:2e:11:
                    4f:35:a3:ff:c7:ac:60:71:3a:c9:23:7f:9f:91:cb:
                    f9:c0:75:ba:a2:71:60:9e:8b:bc:5b:6f:af:06:52:
                    7e:f0:22:e9:ec:0c:f3:91:e5:6e:05:f6:c2:70:16:
                    0d:e1:b1:d7:b8:93:97:84:41:c6:a8:c5:51:60:b6:
                    15:de:fb:52:bb:e4:89:1f:07:ef:57:48:35:32:71:
                    fb:15:53:d2:ec:0f:2c:0a:f0:7f:9a:3c:98:e4:14:
                    68:ce:be:4a:7e:96:3f:bc:94:53:94:cb:bf:22:31:
                    c6:db:75:0d:8d:0a:91:b6:70:65:3d:c2:22:aa:cc:
                    0a:f5:88:4e:11:e5:c4:e6:0e:62:26:b6:54:3c:b6:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5B:F7:61:8F:1D:5D:89:47:F6:A3:A1:72:73:59:01:33:19:5C:92
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/W1v3YY8dXYlH9qOhcnNZATMZXJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:63:2a:79:a7:6a:82:be:a9:5d:4e:2a:d0:0b:16:41:fb:
         14:2b:ca:d8:31:45:2b:7c:7f:d0:9c:6f:94:d9:e4:19:f3:14:
         94:01:e2:0f:6c:5a:df:43:ed:c3:f9:c1:4c:7d:c8:e6:f1:a9:
         a3:ac:8c:d2:70:02:88:68:f5:e3:b0:99:62:15:18:33:7a:bf:
         ae:6a:67:64:cf:52:16:16:b5:72:0c:35:77:5f:06:07:a4:11:
         85:9e:9e:70:37:d2:58:79:b0:08:d5:ec:a8:03:af:16:7c:69:
         06:81:73:96:12:e8:7f:4f:63:40:c3:ae:fc:f5:0b:b7:4a:9e:
         05:68:7a:21:d1:1f:71:a3:a7:0b:0a:01:6b:a0:c7:28:57:94:
         7b:ed:7b:eb:7e:c0:13:d3:c5:52:2d:5c:b0:fd:c2:75:e9:49:
         45:59:a3:cc:f4:c4:bb:21:9f:f8:5c:51:4e:73:88:d3:5e:69:
         d9:33:4f:8f:79:7e:db:1d:c5:ac:38:fe:d9:ad:42:5d:b2:13:
         c7:2f:0e:fd:74:ab:32:4c:44:a7:51:aa:e3:08:b0:c6:28:a5:
         88:8c:fc:eb:c6:8f:b8:d8:bf:50:c7:b7:a9:53:eb:da:73:14:
         a0:6f:d6:ad:80:f6:f5:6e:1e:62:e0:da:47:3b:1c:e3:3b:5f:
         3c:ee:9d:91
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjQy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVCNUJGNzYxOEYxRDVE
ODk0N0Y2QTNBMTcyNzM1OTAxMzMxOTVDOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTQM4+dcEbMNv/ZxjFtB/xtrrZ2TdBROZBUKpfVLWPAkcivAOP
+aQhInebbbp7I43qPxN25PgnweW6L8pUV7Jgf4PNXj0KMxWq9xkTK9qVtdtKU9zO
nQ9tqp2fffZGogRnadEiWxb7P8dBKcDEsZoiYmkV6SwuEU81o//HrGBxOskjf5+R
y/nAdbqicWCei7xbb68GUn7wIunsDPOR5W4F9sJwFg3hsde4k5eEQcaoxVFgthXe
+1K75IkfB+9XSDUycfsVU9LsDywK8H+aPJjkFGjOvkp+lj+8lFOUy78iMcbbdQ2N
CpG2cGU9wiKqzAr1iE4R5cTmDmImtlQ8tkbNAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUW1v3YY8dXYlH9qOhcnNZATMZXJIwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1cxdjNZWThkWFlsSDlx
T2hjbk5aQVRNWlhKSS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAGm2Yyp5p2qCvqldTirQCxZB+xQrytgxRSt8
f9Ccb5TZ5BnzFJQB4g9sWt9D7cP5wUx9yObxqaOsjNJwAoho9eOwmWIVGDN6v65q
Z2TPUhYWtXIMNXdfBgekEYWennA30lh5sAjV7KgDrxZ8aQaBc5YS6H9PY0DDrvz1
C7dKngVoeiHRH3GjpwsKAWugxyhXlHvte+t+wBPTxVItXLD9wnXpSUVZo8z0xLsh
n/hcUU5ziNNeadkzT495ftsdxaw4/tmtQl2yE8cvDv10qzJMRKdRquMIsMYopYiM
/OvGj7jYv1DHt6lT69pzFKBv1q2A9vVuHmLg2kc7HOM7XzzunZE=
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:42:58 2025 by rpki-client