Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/kUJsA5so0Bf63-LbeDpJa9TJl_Y.roa
File:                     kUJsA5so0Bf63-LbeDpJa9TJl_Y.roa (raw, json)
Hash identifier:          ji76FwFgnId0ZuKd0SEK9wedgVerO8IJ2HlDfyH56P0=
Subject key identifier:   91:42:6C:03:9B:28:D0:17:FA:DF:E2:DB:78:3A:49:6B:D4:C9:97:F6
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0A85
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kUJsA5so0Bf63-LbeDpJa9TJl_Y.roa
Signing time:             Wed 04 Dec 2024 07:55:03 +0000
ROA not before:           Wed 04 Dec 2024 07:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec  4 07:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=91426C039B28D017FADFE2DB783A496BD4C997F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f5:ea:45:83:0f:ce:b3:5b:92:98:4e:4a:1c:
                    82:f4:31:05:02:55:c3:51:9c:5c:0c:04:0b:e0:ce:
                    5c:da:91:ae:cb:4b:c5:b0:90:f4:4f:d6:5b:44:39:
                    b3:5c:9f:fd:bf:71:f5:8a:0d:d7:2d:f4:18:86:64:
                    b2:6b:e8:d0:8a:bd:19:95:e8:2e:49:06:56:3f:04:
                    56:8d:6a:83:01:0c:6a:f4:f1:a2:bf:4a:4f:b3:07:
                    19:ba:45:25:51:1b:da:64:f0:95:01:84:de:a6:3c:
                    f5:d1:37:59:48:26:df:a6:50:b4:9d:6e:6f:00:78:
                    46:76:29:02:82:d7:16:d9:ed:af:39:44:08:26:ea:
                    21:af:02:d5:35:23:60:22:3b:b1:39:d4:e8:78:d8:
                    c3:b0:cd:72:35:c4:d6:2f:ad:78:ea:e5:8c:5d:27:
                    b9:92:98:fb:cd:53:da:30:58:1d:34:6e:de:4e:93:
                    ff:d7:83:84:2d:d1:f7:f8:cd:47:ef:3f:97:ce:b5:
                    ee:24:6e:a7:97:62:16:8b:1d:57:20:19:29:47:41:
                    fb:6a:af:9a:5e:4b:de:5d:e7:eb:dc:05:d2:16:f2:
                    e3:ed:45:71:c0:05:bd:80:0a:93:2d:43:f2:b2:52:
                    05:21:51:3b:b3:70:5a:86:58:c5:d1:5d:1a:d9:5a:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:6C:03:9B:28:D0:17:FA:DF:E2:DB:78:3A:49:6B:D4:C9:97:F6
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/kUJsA5so0Bf63-LbeDpJa9TJl_Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:f9:4b:15:f6:7a:2f:55:ff:bb:a0:7e:c5:ac:5d:54:0d:9d:
         43:d0:09:b9:da:2d:fe:97:eb:b6:df:67:3f:09:63:5f:d7:1f:
         19:8f:94:11:40:5f:79:60:9a:1b:8b:cc:89:85:c4:5d:c2:a8:
         9d:03:07:0e:1c:d7:69:22:59:7e:60:0d:16:93:eb:64:c6:7a:
         2e:d9:cb:df:c3:9b:4c:ef:b7:c1:b5:5c:28:50:b6:84:9e:7a:
         91:6c:9d:d5:17:d4:97:20:a7:53:b8:d0:5c:23:d1:fb:7d:8b:
         cb:e5:2d:d1:ad:b3:88:01:e0:13:57:a2:61:20:07:6f:15:35:
         d5:c2:85:41:c5:0a:d3:fc:e6:c3:8b:93:27:67:de:5e:a1:ce:
         0d:17:76:a2:f5:b2:b4:1f:dd:6f:14:45:0f:6f:d1:9e:90:5e:
         fd:79:2f:d5:4d:e9:55:b6:ea:a1:5e:04:f7:4b:39:e6:06:5d:
         1d:30:f5:34:e6:dc:8e:ad:4f:53:35:c9:1d:65:d0:c6:ff:6a:
         7b:9e:b6:f8:0c:c8:2e:c0:ed:68:85:be:9c:5a:a6:6c:14:d3:
         01:15:f0:55:85:06:c3:84:a2:b0:9c:64:22:26:35:59:df:ab:
         91:87:ad:20:26:a1:90:6e:fa:8d:74:f5:00:26:87:4f:99:14:
         12:6a:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:51:56 2025 by rpki-client