Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/l5NO6vhjSz9WadKLWowPDD89rLk.roa
File:                     l5NO6vhjSz9WadKLWowPDD89rLk.roa (raw, json)
Hash identifier:          5KT8SkiEFEvDsYne3OJ2/sPzMrtRTQnqhYIxUec/JGU=
Subject key identifier:   97:93:4E:EA:F8:63:4B:3F:56:69:D2:8B:5A:8C:0F:0C:3F:3D:AC:B9
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       0268
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/l5NO6vhjSz9WadKLWowPDD89rLk.roa
Signing time:             Mon 01 Feb 2021 18:10:43 +0000
ROA not before:           Mon 01 Feb 2021 18:10:43 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Feb  1 18:10:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=97934EEAF8634B3F5669D28B5A8C0F0C3F3DACB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:2a:1d:86:da:f9:c5:41:8b:81:77:29:44:
                    bb:45:c2:ef:4d:d9:d5:c6:c1:ff:97:86:bf:24:1f:
                    8b:ff:73:86:6b:36:87:eb:0b:57:1f:7b:a9:b7:d7:
                    35:cc:3a:e1:be:65:88:95:e4:7e:65:8b:17:d8:bc:
                    82:99:53:37:04:c0:86:bf:35:a4:98:7c:61:d8:f7:
                    45:0a:bd:0a:06:2e:c5:96:04:3b:02:80:37:88:59:
                    6b:20:e3:0e:f9:2a:35:6a:2a:f0:9b:38:f6:ea:5b:
                    d3:6a:6a:c4:62:c5:f9:18:3a:a5:82:92:af:93:be:
                    21:45:c0:58:cc:7d:85:c2:8d:6d:20:33:7a:77:d3:
                    7d:21:8b:54:8e:36:37:e7:f0:fd:e8:67:29:51:bc:
                    07:d4:72:23:9e:8b:f0:bc:c0:46:90:b4:43:cd:0e:
                    ab:94:d3:22:bd:90:15:52:76:ae:20:6b:be:12:63:
                    39:f4:7b:e5:c4:19:7d:30:16:37:c1:0a:49:95:ad:
                    4a:f8:d1:53:59:ae:93:99:48:0e:8e:e7:ee:93:61:
                    5b:8d:97:e0:c4:27:b4:b8:71:02:35:af:e2:fb:69:
                    db:67:3e:c9:c6:ab:37:a2:5f:24:5f:1a:90:14:bc:
                    c6:ad:2e:e5:ae:8d:37:4d:68:f3:2d:2e:cf:e8:d9:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:93:4E:EA:F8:63:4B:3F:56:69:D2:8B:5A:8C:0F:0C:3F:3D:AC:B9
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/l5NO6vhjSz9WadKLWowPDD89rLk.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:d5:fc:d8:e5:2a:52:8a:11:65:1a:57:1c:7c:ec:e9:0c:
         27:93:a4:b1:d4:0a:a3:23:f4:09:d7:34:38:49:98:b8:8d:26:
         f2:24:5b:e6:8c:e1:3d:a2:8b:05:5a:14:39:9b:1c:6a:a5:bd:
         6c:54:7a:58:70:93:48:9d:86:38:dd:1f:2f:ff:df:48:09:fe:
         1f:98:f6:23:64:02:9c:03:bb:d7:24:c4:de:bc:03:88:f2:e8:
         4e:16:ac:fc:1c:56:1b:1a:a0:df:76:88:07:aa:62:b5:1e:1b:
         41:55:c2:0e:93:1a:db:06:dc:47:00:42:b3:9a:a4:b1:c7:ad:
         ca:a3:b5:12:7b:f8:ca:38:2b:36:58:1e:61:46:07:23:a3:6c:
         c3:ba:cd:f0:68:8a:a7:d7:68:cc:b9:56:7e:d3:15:9f:bb:c9:
         80:b2:ae:c2:53:32:00:67:04:87:42:03:87:70:21:39:4f:db:
         9c:4e:fe:85:97:48:8f:e8:c6:55:57:db:fa:3c:53:9a:d3:4e:
         01:75:ba:a3:13:a4:72:54:b1:3f:d4:00:36:4d:5b:09:cf:ec:
         1a:17:c9:1c:3b:4f:0e:60:46:93:1b:ed:d1:92:34:c4:cc:df:
         c2:7f:c9:a3:88:ae:b1:5b:5f:3e:33:69:ce:70:d4:76:a0:01:
         44:ef:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org