Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa
File:                     yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa (raw, json)
Hash identifier:          j66J6qUEf5NNpT9VgjDUTkMs2qEFvhs2tXfc6GZslR8=
Subject key identifier:   CA:E1:31:C1:A0:E3:43:44:01:1D:4F:62:0C:14:E8:CE:42:29:F4:44
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0BBB
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa
Signing time:             Tue 07 Jan 2025 15:55:04 +0000
ROA not before:           Tue 07 Jan 2025 15:55:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003 (0xbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan  7 15:55:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=CAE131C1A0E34344011D4F620C14E8CE4229F444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:8f:77:bb:67:e1:1c:bb:94:73:f0:92:bf:
                    d9:3e:8b:3d:cd:76:93:ac:6f:f4:ea:21:ea:89:c7:
                    b9:a4:2a:3c:df:1f:58:19:b5:f9:e0:61:6c:af:e1:
                    bf:3e:70:34:b7:b2:3a:86:13:38:18:a4:60:d0:0d:
                    a8:8e:68:f2:be:4d:8f:01:4f:5a:b2:dd:52:eb:d2:
                    60:4b:89:c1:b5:e0:5f:5f:bc:97:c9:9f:97:ea:8a:
                    0e:03:1f:66:e6:12:c6:4a:8c:1f:49:58:1d:06:f3:
                    33:c5:40:de:f4:28:99:ef:0e:d0:99:36:f3:45:d3:
                    92:ce:db:f2:39:d8:21:ee:dc:43:02:05:c3:d6:51:
                    d3:76:0c:84:64:f2:72:cc:06:a1:7a:91:95:3c:e3:
                    0f:83:12:4d:3b:1f:59:29:5b:48:50:f6:5c:80:ae:
                    14:97:91:cc:f2:7f:23:14:a1:b4:f2:0b:0e:ee:3d:
                    2c:e1:76:28:77:1d:db:30:fd:ca:0c:b2:13:99:75:
                    98:73:c6:48:6f:bb:6b:e3:28:9a:6d:f6:3a:0e:c6:
                    b9:c4:ab:6f:cc:a1:9c:ac:e3:97:c4:3d:71:f3:49:
                    8d:00:05:fb:81:6c:de:63:39:db:13:b7:8a:bf:f0:
                    8c:e2:f3:0c:51:5c:0b:b9:a3:11:2b:e3:04:ba:ee:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:31:C1:A0:E3:43:44:01:1D:4F:62:0C:14:E8:CE:42:29:F4:44
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/yuExwaDjQ0QBHU9iDBTozkIp9EQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2f:62:d2:23:c7:75:de:77:fb:9b:b5:01:24:35:f5:22:a4:
         21:d4:31:34:b6:3e:cb:1f:cd:84:72:aa:78:93:5c:54:78:e0:
         97:0e:70:1d:55:dc:4c:bf:ef:07:1b:59:ae:3c:94:8a:b7:34:
         65:8d:e6:3a:1d:45:56:e1:ad:d5:5a:2c:14:50:7a:e2:3c:19:
         66:d8:40:dd:ef:e6:8b:5d:ee:42:08:cd:ec:55:87:d6:f6:15:
         32:e0:86:b3:0b:ea:36:86:79:95:b0:a5:42:0e:36:9e:98:0c:
         f4:ab:c4:5b:80:fe:f7:3b:4c:ef:bc:35:ca:82:b6:f6:c0:0f:
         83:7e:69:cc:dc:43:2f:7f:88:04:aa:a3:cb:4d:3e:8d:57:97:
         0b:0f:ec:80:57:5d:57:1f:30:c8:c6:1c:cc:11:53:9d:05:ad:
         e5:7a:11:7b:9b:ea:39:35:fc:50:e5:a6:09:b1:1e:69:84:f4:
         26:7d:40:aa:c4:96:78:4c:df:7c:81:f0:69:dd:d6:96:37:6f:
         c4:d6:f5:1e:b6:f2:93:67:17:44:89:a8:6c:31:17:9a:e4:18:
         62:af:56:fe:cb:5c:c4:12:00:2e:fd:f0:be:b5:4a:72:d5:99:
         dc:76:05:69:7b:13:ef:92:15:b7:10:1e:5b:15:48:fd:2b:97:
         dc:5d:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:36:19 2025 by rpki-client