Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa
File:                     aZNUkIZzKJFgzD_qOd16XeXhoNY.roa (raw, json)
Hash identifier:          It7zxCk0rUrjNlOD5A0NVkftrKj5wHs8gKUP90kRrSo=
Subject key identifier:   69:93:54:90:86:73:28:91:60:CC:3F:EA:39:DD:7A:5D:E5:E1:A0:D6
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C51
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa
Signing time:             Fri 24 Jan 2025 07:55:03 +0000
ROA not before:           Fri 24 Jan 2025 07:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3153 (0xc51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 24 07:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=699354908673289160CC3FEA39DD7A5DE5E1A0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:cd:17:03:85:85:48:9e:be:92:85:d5:d9:
                    ab:fc:e2:eb:1a:37:77:e7:40:bb:12:90:e6:b6:1c:
                    a1:02:5e:65:7c:28:0b:5c:ad:c8:38:cb:fa:e5:3b:
                    ae:92:3a:b1:03:a8:d0:40:c0:c9:0a:51:7f:d5:42:
                    e4:ec:71:9e:69:81:45:39:f1:9f:79:0b:a2:3e:6b:
                    3b:f5:21:47:57:80:a5:6a:c7:9d:08:51:51:b0:75:
                    3f:42:55:a6:53:a9:c7:dd:b2:c8:ad:07:be:b1:92:
                    c7:46:f0:7c:33:65:18:93:51:5f:95:5b:43:e5:e7:
                    d6:4a:77:53:ec:c7:1c:32:4c:91:61:7b:fc:9e:f7:
                    f0:71:91:67:5c:2f:94:0a:87:69:be:9a:bd:32:44:
                    b7:42:5f:cb:f7:6e:43:11:ff:c9:34:f3:3b:9d:55:
                    6b:ca:9a:5f:ce:7d:57:12:fd:b9:de:d1:fc:3b:76:
                    e9:8f:2d:88:11:56:c3:82:9d:43:7f:85:a3:9c:84:
                    24:0d:78:61:f2:fd:5d:fc:3d:32:20:85:25:84:07:
                    7e:cd:c9:4b:d1:0e:c9:f1:80:bd:99:32:af:d5:e7:
                    3c:04:f4:62:d5:ab:ad:db:69:3b:2a:a0:87:87:81:
                    76:66:ab:2d:5c:88:85:cf:b3:8c:1c:3f:84:f0:2f:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:54:90:86:73:28:91:60:CC:3F:EA:39:DD:7A:5D:E5:E1:A0:D6
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aZNUkIZzKJFgzD_qOd16XeXhoNY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:e9:56:9d:75:a5:9c:31:83:55:fb:f8:ab:b6:99:5f:c8:c2:
         65:6f:bf:0e:40:bb:d3:99:89:09:f8:87:31:71:c9:1f:25:16:
         fb:09:ff:6a:25:65:e0:1e:dc:85:52:1d:0e:49:32:87:6b:67:
         f3:41:56:92:85:9f:3a:b3:17:f3:c4:40:b5:a3:6d:8e:f9:55:
         d4:c9:c8:02:f2:13:13:50:e7:44:c5:72:eb:0a:84:01:0f:1a:
         50:fa:94:4c:4f:d3:b7:2e:e5:bc:90:a1:ed:18:37:e1:70:ff:
         7b:92:32:fb:e0:2b:83:ac:8a:ff:7a:5e:36:30:eb:59:1c:b2:
         67:b4:02:98:8f:c8:13:53:3b:2b:f9:d6:96:1c:a7:71:fa:38:
         60:6a:e8:7a:4a:2a:37:17:d9:5a:e6:2d:f4:7d:38:1a:b7:a4:
         dd:ca:8a:f0:a6:54:92:da:12:86:5d:58:30:86:8c:d9:b9:07:
         f7:ba:b3:05:cc:a3:67:c5:f9:09:01:6a:41:03:a9:fd:b4:e7:
         2f:b4:6f:45:2b:4d:c3:15:fe:92:1c:09:63:98:2e:c7:64:84:
         c8:69:11:d9:a8:3d:ac:82:d1:af:4e:05:49:16:f0:2f:ac:12:
         18:46:c8:68:a1:66:0a:90:44:94:98:9d:1a:f7:22:a5:70:19:
         8b:2e:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:42:16 2025 by rpki-client