Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038383838.roa
File:                     3130392e3130372e3134302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          LS1c+NyIy5bzqGtwQH5STjDRYycsUJ/5wLiRQdbrRWg=
Subject key identifier:   B8:2B:72:E7:05:B5:4A:80:E9:AA:73:30:90:29:48:9D:3D:3D:75:31
Certificate issuer:       /CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
Certificate serial:       1104924098BD75BD8CCC0632D65794E093BBCCA0
Authority key identifier: 79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer
Subject info access:      rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:43 +0000
ROA not before:           Fri 22 Sep 2023 10:14:43 +0000
ROA not after:            Fri 20 Sep 2024 10:19:43 +0000
asID:                     8888
IP address blocks:        109.107.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:92:40:98:bd:75:bd:8c:cc:06:32:d6:57:94:e0:93:bb:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
        Validity
            Not Before: Sep 22 10:14:43 2023 GMT
            Not After : Sep 20 10:19:43 2024 GMT
        Subject: CN=B82B72E705B54A80E9AA73309029489D3D3D7531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:9b:1b:e8:0a:f4:fc:42:a9:1a:e0:7d:07:
                    4a:0c:49:ab:10:d8:4a:b3:ff:78:40:09:51:9d:a7:
                    a2:26:86:1f:68:c9:f6:e6:db:60:fb:bd:09:a1:a0:
                    3f:69:c3:9b:61:f4:50:ae:cf:44:ac:c7:30:58:0d:
                    b9:a2:84:6f:c1:c9:16:57:b6:ad:37:ac:02:02:71:
                    b8:a5:5d:3a:14:db:4f:65:a6:91:0d:e3:ff:f4:aa:
                    64:34:e2:18:ee:3f:ab:bd:a9:44:bc:8e:95:78:db:
                    0a:ae:fd:cc:a2:46:19:c6:af:f8:da:55:db:0b:85:
                    3a:52:e3:53:bc:c0:22:9a:42:8b:9f:fd:ae:d3:03:
                    5c:ce:c0:54:51:0f:e3:9d:07:93:50:0a:85:1f:a7:
                    ba:4e:92:6e:68:32:b1:54:a1:ca:44:1f:4d:a1:97:
                    c1:9e:24:24:4a:0a:ad:04:cb:67:62:ce:ec:3a:da:
                    a6:96:55:36:e7:7f:69:e2:97:66:16:44:41:cb:1f:
                    30:27:b4:41:fe:4e:15:bd:a3:cc:59:4f:d1:40:30:
                    49:af:d4:d6:a6:d8:33:c0:90:5c:ee:43:32:ae:ed:
                    70:45:b3:f6:36:d4:ea:05:1d:8e:65:01:2e:c2:c2:
                    bd:86:a9:91:8d:17:a9:26:88:3f:fc:bb:39:99:9c:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2B:72:E7:05:B5:4A:80:E9:AA:73:30:90:29:48:9D:3D:3D:75:31
            X509v3 Authority Key Identifier:
                keyid:79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/16/796CC107EE82F70AA90DE4466CD1CFCC166E90CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:64:19:3f:c9:00:cb:03:41:29:f4:c1:f6:e7:a2:0d:27:a8:
         2c:f4:62:00:ee:87:9d:ea:cb:b8:0b:3d:46:f7:0e:e2:4b:24:
         00:b2:e9:35:ec:0e:e1:f2:3c:ce:65:0d:81:00:7b:e7:8d:7e:
         ed:bf:54:bb:78:41:29:68:5c:bd:41:76:38:f3:a9:30:aa:3c:
         60:d9:c8:90:3d:15:a5:4b:e6:ed:17:03:d2:36:62:92:c7:2d:
         c5:b9:c6:7f:76:5e:19:f1:82:a6:04:42:17:9b:cf:c0:bd:52:
         ef:97:f6:f8:b4:e5:c1:b9:e8:85:88:39:13:c4:43:65:94:75:
         90:c8:95:d3:72:33:44:d6:04:5b:a9:95:1c:42:4d:b9:62:d0:
         f9:9e:d6:59:5c:6c:af:ef:1e:f7:bc:54:7b:6b:f0:e8:0a:8a:
         10:a1:58:87:bb:ba:ea:56:f1:bd:14:e6:b7:f8:58:56:10:e3:
         a2:41:60:df:1e:a9:21:84:bd:8f:ca:ff:e3:f8:6b:fc:8a:8d:
         24:c3:a8:e8:d0:11:c3:5f:d0:eb:85:c3:f2:e7:49:4a:c5:9e:
         18:be:d4:21:8c:94:86:1b:37:4e:ce:e0:a7:ed:88:86:64:b9:
         b6:7a:f8:db:90:d2:2c:d1:a6:7f:65:86:40:94:bf:3e:18:16:
         03:6e:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org