Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa
File:                     _VuicrAQ7cUMJA4bUyFeurcPRnM.roa (raw, json)
Hash identifier:          sZPBa9GM1JcbZmXRgVgUrkow2SnHxRjmJSiWxr/6rOU=
Subject key identifier:   FD:5B:A2:72:B0:10:ED:C5:0C:24:0E:1B:53:21:5E:BA:B7:0F:46:73
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C45
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa
Signing time:             Wed 22 Jan 2025 23:55:03 +0000
ROA not before:           Wed 22 Jan 2025 23:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3141 (0xc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 22 23:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=FD5BA272B010EDC50C240E1B53215EBAB70F4673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:1e:ce:41:35:e0:41:3f:e9:e5:0f:e7:53:
                    76:e1:f4:e9:f3:d6:6e:6e:d9:05:ce:a1:27:a1:5b:
                    ed:72:af:83:f6:b1:14:68:28:00:9a:ed:25:d2:47:
                    ef:f7:d7:f9:3d:4e:bd:21:2f:8b:8f:22:6a:2e:d7:
                    aa:88:de:dc:72:6a:cd:ea:a0:4d:6e:ce:c3:f2:43:
                    d9:32:d6:2c:f0:0c:e2:dd:8f:2f:fc:23:0f:f1:a8:
                    16:9e:02:76:ef:11:0d:d0:f2:c5:93:cb:ab:9d:4e:
                    2b:ed:5c:ef:d9:2c:62:f7:ee:6f:43:50:33:d4:24:
                    7e:7b:cb:3c:ea:cb:45:52:b1:a3:d4:37:20:62:9a:
                    52:ae:2f:84:2a:53:9c:62:20:07:e1:7a:ea:b1:d4:
                    ed:50:4f:27:cc:ef:ca:bb:d1:a4:88:73:b2:2c:72:
                    53:02:04:76:1f:81:71:6d:8a:6b:52:3f:a9:c3:7a:
                    97:72:40:dc:e0:b7:db:24:29:e3:36:a3:00:aa:1c:
                    fd:59:43:f0:f3:bd:c2:9c:29:b9:45:17:22:d1:80:
                    89:2e:b6:d0:d4:b1:89:71:4a:93:21:89:63:4e:e4:
                    f8:6a:80:ae:7d:5e:9e:64:09:c8:59:8d:c2:5d:52:
                    16:03:e5:ce:22:fd:99:94:f5:77:66:07:f8:37:f5:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:A2:72:B0:10:ED:C5:0C:24:0E:1B:53:21:5E:BA:B7:0F:46:73
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/_VuicrAQ7cUMJA4bUyFeurcPRnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:e6:5a:da:e1:28:44:84:d1:3d:39:15:a1:2d:73:27:f3:66:
         d3:c7:7c:64:99:03:93:34:f4:39:c4:8b:72:53:bc:93:43:a9:
         5e:9b:85:fc:ce:5b:ea:0e:cc:f8:83:27:80:51:f2:bc:00:c0:
         73:19:83:b6:36:f3:9f:40:82:0e:c3:92:93:fc:37:b8:c5:5d:
         2b:95:19:a8:ac:66:99:4c:61:c7:c4:3a:53:c5:2e:bd:e2:7c:
         98:0d:3f:ca:c7:3d:0c:c0:0b:7a:cf:12:78:59:2a:b3:77:14:
         c6:4e:34:11:a4:bc:10:35:7a:f2:01:99:e4:10:0b:dd:2a:dd:
         3d:89:6c:0f:27:46:38:17:92:77:0c:da:4a:7a:fa:74:75:fd:
         2a:6f:33:6b:86:ee:c3:30:31:70:97:84:3c:e4:7e:6a:de:b8:
         0a:9d:1f:50:2e:69:27:7e:d3:cf:1d:37:6b:80:52:bd:fd:2c:
         3c:b8:ee:79:78:c0:f5:be:9c:2a:b5:56:88:c7:a3:41:95:ef:
         07:48:b4:cb:73:c4:c7:4e:23:09:d0:45:3d:b0:22:e9:e9:9a:
         9c:b3:92:fb:ad:9f:de:21:65:78:72:f9:5f:73:14:a0:98:9f:
         f9:8b:d1:38:e5:a0:8f:e6:4d:23:26:95:44:e4:45:30:62:77:
         ae:79:b2:97
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjIy
MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEZENUJBMjcyQjAxMEVE
QzUwQzI0MEUxQjUzMjE1RUJBQjcwRjQ2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBTR7OQTXgQT/p5Q/nU3bh9Onz1m5u2QXOoSehW+1yr4P2sRRo
KACa7SXSR+/31/k9Tr0hL4uPImou16qI3txyas3qoE1uzsPyQ9ky1izwDOLdjy/8
Iw/xqBaeAnbvEQ3Q8sWTy6udTivtXO/ZLGL37m9DUDPUJH57yzzqy0VSsaPUNyBi
mlKuL4QqU5xiIAfheuqx1O1QTyfM78q70aSIc7IsclMCBHYfgXFtimtSP6nDepdy
QNzgt9skKeM2owCqHP1ZQ/DzvcKcKblFFyLRgIkuttDUsYlxSpMhiWNO5PhqgK59
Xp5kCchZjcJdUhYD5c4i/ZmU9XdmB/g39fKvAgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQU/VuicrAQ7cUMJA4bUyFeurcPRnMwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL19WdWljckFRN2NVTUpB
NGJVeUZldXJjUFJuTS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAMDmWtrhKESE0T05FaEtcyfzZtPHfGSZA5M0
9DnEi3JTvJNDqV6bhfzOW+oOzPiDJ4BR8rwAwHMZg7Y2859Agg7DkpP8N7jFXSuV
GaisZplMYcfEOlPFLr3ifJgNP8rHPQzAC3rPEnhZKrN3FMZONBGkvBA1evIBmeQQ
C90q3T2JbA8nRjgXkncM2kp6+nR1/SpvM2uG7sMwMXCXhDzkfmreuAqdH1AuaSd+
088dN2uAUr39LDy47nl4wPW+nCq1VojHo0GV7wdItMtzxMdOIwnQRT2wIunpmpyz
kvutn94hZXhy+V9zFKCYn/mL0TjloI/mTSMmlUTkRTBid655spc=
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:40:11 2025 by rpki-client