Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa
File:                     eBrVmT0kQMFwSDJES03N7rm7tHA.roa (raw, json)
Hash identifier:          SpX81bgb08Vw3ips/eDd540yRxK5o3H0gSt02WtkKu0=
Subject key identifier:   78:1A:D5:99:3D:24:40:C1:70:48:32:44:4B:4D:CD:EE:B9:BB:B4:70
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C48
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa
Signing time:             Thu 23 Jan 2025 07:55:02 +0000
ROA not before:           Thu 23 Jan 2025 07:55:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3144 (0xc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 23 07:55:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=781AD5993D2440C1704832444B4DCDEEB9BBB470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:04:17:a9:73:5b:00:3c:12:2f:d3:6c:e5:
                    11:95:db:0a:f0:f9:ac:02:21:7b:36:4b:2a:20:fc:
                    98:df:d3:e1:56:fd:83:47:39:20:82:f0:b5:6a:7f:
                    fd:1e:86:ac:e1:b0:f7:3d:42:48:70:4c:bd:d5:2f:
                    9c:58:7e:4e:af:4c:7b:c9:5a:18:4d:be:c0:db:aa:
                    ca:4c:fa:4f:89:bd:24:44:d4:72:fb:1a:84:21:3c:
                    b6:e7:47:3b:af:49:01:f8:44:e9:22:ac:5d:de:c3:
                    f7:fc:95:a8:08:78:1e:9a:96:f9:4e:43:14:82:27:
                    97:0a:19:93:d8:b9:00:da:5f:cb:47:6d:12:57:eb:
                    22:3b:bd:a5:5e:4d:06:af:a4:ff:aa:5f:76:e0:d8:
                    fa:7a:5d:52:29:e8:b6:ee:e0:84:0f:a2:cb:29:99:
                    14:c4:f5:82:dc:06:c1:46:0c:01:a8:f8:c8:91:81:
                    6e:69:c7:ee:0d:f3:57:29:a2:38:de:c4:e9:b9:de:
                    46:ed:e5:b9:68:70:f4:f0:11:18:ee:b1:a4:87:a5:
                    5f:34:67:f5:cd:39:a0:ac:d8:e2:5d:55:2d:52:1b:
                    a3:1a:e4:cb:9f:e8:f9:8e:a9:78:18:5f:e3:b4:16:
                    56:ee:e7:6f:94:cf:7b:19:2f:cc:e5:01:d6:93:51:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:D5:99:3D:24:40:C1:70:48:32:44:4B:4D:CD:EE:B9:BB:B4:70
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/eBrVmT0kQMFwSDJES03N7rm7tHA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:07:9f:3b:8e:fb:80:6a:9c:d1:f6:4f:c4:9a:bd:c7:7e:
         df:92:30:35:86:dd:e1:f1:0b:fd:2a:23:ff:d5:3b:19:d2:20:
         35:17:02:0a:80:6d:f9:74:d3:88:7d:2f:6d:61:3c:d8:1a:ed:
         41:9f:a6:62:97:2e:d0:47:1c:7c:6f:7f:64:39:c0:ff:a6:d1:
         72:33:0d:f6:71:c8:2c:7d:48:9c:cf:e0:88:a3:ef:32:9f:63:
         32:fe:23:9d:26:d8:e0:ae:63:20:f7:ca:a5:89:60:e3:c6:09:
         47:66:86:30:5b:0a:20:b8:98:5c:7d:08:db:d1:ca:f2:95:25:
         fc:35:c3:25:67:bc:a6:82:1b:7b:74:73:12:cb:0e:56:f5:e9:
         36:8a:40:9a:be:8b:6e:14:c6:29:d9:dd:09:fa:3d:97:b2:37:
         e1:52:8f:a4:d6:56:ad:0e:0d:40:c5:11:5d:45:44:ae:59:df:
         96:15:3c:1a:24:3c:24:a3:eb:71:06:7c:97:57:00:ce:1c:30:
         42:fe:ac:aa:89:c0:dc:ed:1b:1b:08:3a:be:1a:00:58:0a:35:
         35:fc:27:72:c6:8a:f8:26:12:91:6e:e2:87:cb:82:3d:80:96:
         0e:11:60:b2:dd:47:87:1d:a6:ce:e2:23:40:a4:fe:d4:1e:13:
         a3:ad:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:17:19 2025 by rpki-client