Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/Fgg74T4PLiq601iL-LdI5zJdJ3k.roa
File:                     Fgg74T4PLiq601iL-LdI5zJdJ3k.roa (raw, json)
Hash identifier:          +htcnJBnDZ6rTMn3Ee0aNCOwQIowalPGXrR+wJwdOos=
Subject key identifier:   16:08:3B:E1:3E:0F:2E:2A:BA:D3:58:8B:F8:B7:48:E7:32:5D:27:79
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       A4
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Fgg74T4PLiq601iL-LdI5zJdJ3k.roa
Signing time:             Thu 28 Jan 2021 01:10:27 +0000
ROA not before:           Thu 28 Jan 2021 01:10:27 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 28 01:10:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=16083BE13E0F2E2ABAD3588BF8B748E7325D2779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:f6:40:75:9a:1c:68:b7:b7:77:0b:c0:45:
                    4f:2a:5b:ca:48:d1:5e:c6:aa:59:36:8c:6a:e5:20:
                    09:b0:6c:90:21:4a:6d:12:7f:31:14:ec:07:db:b3:
                    4f:c8:b3:cf:e9:85:92:d6:15:e5:db:df:e5:21:92:
                    81:eb:fe:be:b1:70:89:e3:e7:2b:d5:8d:98:94:40:
                    5e:83:a1:9e:01:5a:e0:f1:86:99:60:c8:4b:f4:01:
                    d9:f9:70:75:d7:4b:b6:fa:e4:4c:d3:bd:c1:c5:df:
                    04:36:0c:3f:bf:33:f8:f9:2e:cd:c1:1e:a6:01:f6:
                    a1:f2:ca:00:53:10:1b:41:2a:e6:4f:89:dc:68:c0:
                    a1:18:9b:bb:dd:b0:b4:63:e1:92:52:c5:47:25:f2:
                    a7:d4:a3:ac:90:8a:aa:da:b1:03:19:ef:41:c5:76:
                    bc:a3:d5:e0:a9:78:3c:00:a3:78:08:35:28:a9:43:
                    86:0a:5e:d9:99:00:59:e2:45:bc:e8:39:57:80:e5:
                    fb:ef:04:cf:15:8e:89:59:68:7a:de:b0:e2:7f:0a:
                    39:bd:53:43:36:12:1d:e4:b8:4b:58:b8:2a:c4:ef:
                    27:2f:3d:15:c4:5a:1d:72:05:d1:41:e7:3b:b3:60:
                    da:c6:69:66:89:0d:ca:1e:56:c8:28:ba:09:11:b0:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:3B:E1:3E:0F:2E:2A:BA:D3:58:8B:F8:B7:48:E7:32:5D:27:79
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Fgg74T4PLiq601iL-LdI5zJdJ3k.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:f8:a9:c5:cb:d0:a9:75:71:46:be:43:bb:d9:f2:7a:98:a9:
         27:e3:6a:45:d7:24:c3:23:91:37:41:b9:1d:48:27:42:98:d2:
         e2:5e:13:de:fc:c8:cd:da:8c:a9:3c:46:ae:c0:ae:56:09:25:
         6b:7b:dd:2f:16:93:b3:7f:cf:e7:c7:9b:7e:ea:dd:47:09:9f:
         54:55:a0:8c:2c:7f:bd:34:73:32:bb:40:66:ad:a1:f2:ae:5e:
         76:2c:84:28:26:d6:be:ca:86:5a:f5:b7:c1:02:05:27:45:76:
         b9:92:b7:a4:81:96:af:9f:b2:b7:b8:9e:71:8e:b1:d6:6d:d6:
         c3:06:b6:41:d5:9c:62:97:77:c7:e8:7f:5a:8b:9b:6c:b7:d7:
         7d:52:f1:d9:e6:1a:bb:14:2f:4e:13:05:46:7f:05:ac:7e:39:
         a5:a2:40:bb:ef:5c:e8:3a:e9:a9:ac:18:de:00:1d:bc:af:9d:
         4d:c5:7b:3d:2b:a1:e5:75:a9:c8:a6:9b:ba:c7:56:29:b6:5b:
         04:a9:73:9c:6f:7b:37:7a:f2:2a:bc:f7:fb:73:2c:d0:26:1d:
         a8:61:8f:32:a4:8c:69:45:de:4e:16:44:08:27:0f:96:11:09:
         66:4c:71:e6:78:9d:5d:ee:13:78:9b:91:9b:1c:be:03:88:e5:
         1b:fb:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org