Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/kBP2MfyBY-Fga1Ncar5O-hf2O9M.roa
File:                     kBP2MfyBY-Fga1Ncar5O-hf2O9M.roa (raw, json)
Hash identifier:          LLrncMQ1L3I83ETjmwfiQJCHGQUfNMxE3/p7tyCASX0=
Subject key identifier:   90:13:F6:31:FC:81:63:E1:60:6B:53:5C:6A:BE:4E:FA:17:F6:3B:D3
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       03
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/kBP2MfyBY-Fga1Ncar5O-hf2O9M.roa
Signing time:             Sat 23 Jan 2021 13:19:01 +0000
ROA not before:           Sat 23 Jan 2021 13:19:01 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 23 13:19:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9013F631FC8163E1606B535C6ABE4EFA17F63BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:03:91:ed:0d:a8:98:f8:5e:e2:9f:8b:22:
                    44:b2:ca:aa:e8:1b:91:db:9c:b9:76:9d:c4:34:cc:
                    44:66:7b:1f:56:93:de:92:b9:3d:83:48:26:e4:4a:
                    79:30:99:0a:38:ec:c0:6f:6b:f2:b7:00:48:bf:36:
                    8c:8e:20:34:b2:40:ee:7b:ea:78:c3:6b:20:e1:94:
                    24:7a:7a:26:3f:3e:77:fa:09:18:54:ab:48:26:3a:
                    e6:db:1b:85:24:bb:fd:38:6c:1a:81:95:d8:d9:66:
                    e4:d7:cf:01:f2:a9:ac:1b:b9:c3:95:11:da:53:a8:
                    52:9e:23:34:08:7f:ae:c7:72:c4:81:02:c0:a9:18:
                    6c:96:a7:cf:d9:09:c3:88:04:5a:67:31:49:29:d9:
                    b2:fe:e4:c3:48:20:7b:18:f1:6e:8a:54:1d:98:d9:
                    76:f1:60:f7:55:dd:0c:91:31:18:ff:f5:d7:bc:56:
                    1f:af:66:c2:a5:66:12:6d:e6:5e:f4:1e:64:9f:9d:
                    56:53:ec:95:60:df:25:4d:ac:af:76:2e:83:b4:93:
                    79:ed:87:7d:8f:4c:a8:6b:b2:e1:61:91:ef:33:85:
                    f7:1b:7f:8d:2f:8c:9b:fb:91:19:cd:44:4c:13:86:
                    8f:a5:56:16:8f:5a:b9:2b:30:3c:a6:21:90:68:22:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:13:F6:31:FC:81:63:E1:60:6B:53:5C:6A:BE:4E:FA:17:F6:3B:D3
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/kBP2MfyBY-Fga1Ncar5O-hf2O9M.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:b2:ba:9b:a5:b7:55:c3:48:f1:25:91:37:d7:ff:fb:ce:71:
         e8:b9:30:5f:65:29:07:74:e2:db:11:26:de:0e:f2:0c:1e:3d:
         ff:00:1a:02:24:0c:72:a3:d1:66:58:f9:d9:51:ad:ae:4f:9b:
         d2:45:33:c8:6f:59:fa:c2:26:71:69:7a:74:ae:49:76:ba:f5:
         4d:7a:eb:1b:f4:db:cb:55:af:0c:f1:c0:18:01:42:34:f7:e8:
         f8:7a:27:f1:8e:3c:27:31:97:cc:44:f8:eb:70:82:0c:b4:12:
         74:2f:67:09:06:a1:9b:5e:d1:b0:c1:89:9c:66:b2:f2:ad:b1:
         e4:88:00:b7:0d:45:34:b1:54:07:08:43:5e:92:5e:45:cb:b9:
         fc:76:43:44:db:cb:55:bc:3b:46:4d:28:f7:d6:1c:00:80:0b:
         2d:23:dd:f7:5c:ca:65:22:51:25:ac:be:e1:20:71:b2:48:7b:
         36:31:9b:b5:97:55:01:ff:5f:f3:42:3d:19:60:dc:eb:a2:05:
         1d:f0:50:c0:c7:67:a8:3e:1b:57:ba:8a:38:a1:82:36:ea:bc:
         b4:c6:68:d7:0e:06:f6:08:83:cb:7a:fc:5e:6c:81:7d:7a:2f:
         cd:fa:44:1b:c7:e0:3a:ac:89:31:8f:c4:1f:2a:9e:23:f6:f8:
         d3:52:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org