Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e20323036353035.roa
File:                     37392e3131302e3233322e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          XrEx8mqLeNW+/GN05t4kX9/co31jWZ+YCDQF86hE9u8=
Subject key identifier:   59:F7:BF:5D:40:E7:53:AD:50:AD:DB:17:BF:98:24:57:58:32:3A:05
Certificate issuer:       /CN=fdfeb4a7242117655b6c9af8f2001e6a8ca2e99d
Certificate serial:       2C2EB1F19FFC09595CE2FF4B9CD78748A682CAA3
Authority key identifier: FD:FE:B4:A7:24:21:17:65:5B:6C:9A:F8:F2:00:1E:6A:8C:A2:E9:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_f60pyQhF2VbbJr48gAeaoyi6Z0.cer
Subject info access:      rsync://0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e20323036353035.roa
Signing time:             Wed 29 Mar 2023 14:59:53 +0000
ROA not before:           Wed 29 Mar 2023 14:54:53 +0000
ROA not after:            Wed 27 Mar 2024 14:59:53 +0000
asID:                     206505
IP address blocks:        79.110.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2e:b1:f1:9f:fc:09:59:5c:e2:ff:4b:9c:d7:87:48:a6:82:ca:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfeb4a7242117655b6c9af8f2001e6a8ca2e99d
        Validity
            Not Before: Mar 29 14:54:53 2023 GMT
            Not After : Mar 27 14:59:53 2024 GMT
        Subject: CN=59F7BF5D40E753AD50ADDB17BF98245758323A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:80:81:d9:d6:a9:6e:bb:f3:11:c4:f9:44:
                    3e:6c:f6:dc:db:9a:cb:e1:fe:49:10:73:ef:d1:76:
                    81:84:06:2c:24:7f:85:13:c0:60:5c:a3:af:b8:86:
                    a3:f0:62:8f:41:cb:c9:c5:0a:5f:f2:57:be:75:e7:
                    2d:36:bd:6a:10:fe:42:f9:88:84:1c:82:bf:c2:83:
                    95:ca:36:91:2d:93:eb:b2:7e:01:c6:ac:58:47:56:
                    0c:3e:e0:c5:87:11:5f:15:d5:c3:f1:4a:f0:bf:dd:
                    d5:a9:d2:5d:56:0c:30:54:b3:67:72:a7:1f:f6:10:
                    aa:f7:47:95:67:d6:6c:8c:17:01:76:3a:1c:55:d1:
                    9c:5f:84:ac:ed:8e:e1:86:2a:62:60:67:23:8e:c1:
                    19:c3:16:87:23:cc:38:3f:1a:4f:60:68:a1:5c:28:
                    15:45:5a:36:d2:be:65:74:d0:a3:58:b1:e6:25:0c:
                    a5:fc:92:10:b7:8a:8d:b0:3d:21:ad:11:fe:75:72:
                    d2:e2:da:d5:79:eb:1d:2d:5e:eb:bb:af:cc:14:11:
                    ae:32:9d:5e:78:b2:12:b7:20:be:74:19:c8:5c:d8:
                    2a:2c:93:9f:7a:2e:d4:72:07:2f:01:bc:47:9e:f3:
                    da:bf:fd:17:d1:be:ae:ac:3e:fc:e0:26:60:68:89:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:BF:5D:40:E7:53:AD:50:AD:DB:17:BF:98:24:57:58:32:3A:05
            X509v3 Authority Key Identifier:
                keyid:FD:FE:B4:A7:24:21:17:65:5B:6C:9A:F8:F2:00:1E:6A:8C:A2:E9:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/41/FDFEB4A7242117655B6C9AF8F2001E6A8CA2E99D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_f60pyQhF2VbbJr48gAeaoyi6Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/41/37392e3131302e3233322e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:56:a9:05:c0:97:54:e6:a6:0c:02:b2:32:f3:e0:4e:45:
         55:30:ea:10:62:98:a6:74:60:8e:fb:96:86:0a:c4:44:30:f2:
         20:fe:e2:65:16:0d:12:c3:c9:c0:58:dc:54:a4:61:23:b0:c5:
         4a:49:53:fb:fc:ee:66:e5:02:62:d5:8a:bc:b3:0f:05:04:91:
         a1:9a:aa:98:2c:31:b2:60:d1:6d:b0:6a:16:24:18:20:87:9d:
         88:06:40:ab:4a:7e:f6:be:55:de:a6:47:18:39:bc:70:e4:2a:
         e0:1f:46:03:66:9f:a5:3b:35:75:7a:aa:c0:49:65:60:49:2f:
         81:34:41:c1:da:4a:e6:1f:d8:99:a1:68:81:e2:12:13:4f:16:
         57:54:2a:ff:e3:2f:45:40:24:0e:21:22:42:f5:12:45:2b:fd:
         07:25:65:01:ad:4a:53:c5:e2:b4:9c:8f:b4:42:8c:f9:33:5d:
         58:8f:9f:bb:17:7c:a1:08:b7:19:eb:dc:cb:05:f1:7d:4a:24:
         62:5e:30:3d:78:f2:c2:b0:b3:bf:d1:42:6f:e6:e1:9b:b3:48:
         bd:b0:6e:42:43:42:19:e5:12:7f:85:6c:07:33:f6:7b:cd:d0:
         32:6f:57:ed:81:5b:f1:45:30:55:42:e9:5e:1c:f2:59:f2:dd:
         12:2a:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:47 2023 by rpki-client on console-ams.rpki-client.org