Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323038303638.roa
File:                     3138352e3134372e35352e302f32342d3234203d3e20323038303638.roa (raw, json)
Hash identifier:          dJmXy760d3OppbajRdAHK8yEtHJsNXdCqxzBByLBPoA=
Subject key identifier:   1E:2C:81:2A:54:F9:C8:1B:24:28:B2:51:9A:D2:1E:42:7E:A4:08:92
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       53EA0BFE859C4E59394A43EF947CCBA2C52B5DC3
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323038303638.roa
Signing time:             Fri 04 Mar 2022 10:00:13 +0000
ROA not before:           Fri 04 Mar 2022 09:55:13 +0000
ROA not after:            Fri 03 Mar 2023 10:00:13 +0000
asID:                     208068
IP address blocks:        185.147.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:0b:fe:85:9c:4e:59:39:4a:43:ef:94:7c:cb:a2:c5:2b:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Mar  4 09:55:13 2022 GMT
            Not After : Mar  3 10:00:13 2023 GMT
        Subject: CN=1E2C812A54F9C81B2428B2519AD21E427EA40892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:2a:0f:d9:79:2f:22:6e:2c:3c:6c:62:db:
                    9b:ca:a2:bf:6a:70:f9:66:44:a0:95:37:bd:4d:2d:
                    d2:8f:29:82:4f:3a:7f:74:ba:a7:87:5f:20:15:78:
                    bb:e4:ad:ad:8c:41:40:35:86:66:f1:88:62:80:40:
                    d7:57:30:9a:3c:2d:71:6a:40:24:36:f3:17:57:5e:
                    76:fd:4b:bf:0b:68:6d:bb:b2:7b:ed:aa:a2:13:e5:
                    e8:f5:b2:93:c6:14:a2:18:df:f6:31:0d:83:67:c1:
                    7c:f6:ab:8f:24:82:82:ff:4e:e6:d6:08:02:b4:bf:
                    9c:e9:b0:56:83:fa:58:be:51:2d:b8:ca:ee:4c:10:
                    a2:7d:90:c0:4b:c4:36:7a:6f:e1:f2:c7:de:cc:e0:
                    60:44:35:63:56:8d:35:fb:c0:85:3f:65:91:5d:24:
                    a1:72:02:5c:93:bb:e9:bf:6c:60:87:19:e5:45:56:
                    c0:34:1a:19:20:3a:c9:da:60:e2:8d:ad:01:81:37:
                    28:52:cc:b5:68:45:bf:5f:b9:9b:74:65:ef:04:a6:
                    31:53:68:e7:84:0f:59:7e:4f:15:22:6e:4f:15:af:
                    ad:d8:46:96:30:b5:a0:55:a7:18:c3:ad:32:bc:5a:
                    e8:00:99:d7:6d:b2:c9:18:db:38:76:10:2b:86:69:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:81:2A:54:F9:C8:1B:24:28:B2:51:9A:D2:1E:42:7E:A4:08:92
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323038303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:53:df:d5:0e:8a:0f:e7:8c:a2:29:fe:bf:b0:cc:a7:ff:
         51:c1:41:8a:92:2f:1d:c9:7c:40:da:f8:e7:6a:77:91:99:72:
         5f:67:71:d6:1a:60:db:70:dd:f5:03:40:67:d2:b1:0e:4d:68:
         36:a3:cb:9d:d6:24:e6:a1:28:dd:72:24:ce:66:8d:a8:a0:02:
         7a:af:a1:65:80:31:ee:2c:3b:59:4a:a9:5f:54:07:2c:d0:c7:
         8b:c0:3e:fe:b7:20:5a:5b:7d:f0:d7:92:f4:8b:c7:3d:88:53:
         c2:2b:3a:a9:02:88:55:a9:d2:d4:77:ad:5f:0e:51:1c:21:50:
         19:31:f4:4f:47:21:38:8a:10:9d:34:e3:3b:3a:f6:1c:3c:69:
         9f:bc:b6:4e:61:92:25:09:60:c1:0f:04:92:29:94:00:e1:2e:
         9a:a6:28:b0:60:1e:b0:80:7d:f6:ae:18:da:e5:2d:4d:3e:28:
         b0:b6:ec:71:65:52:9d:19:41:ac:fc:34:cc:70:8f:9f:94:1c:
         7e:24:3d:23:e2:9d:e2:ca:0f:9b:23:5f:71:ed:f3:2d:c8:63:
         f5:b5:17:26:fa:a5:ad:92:a8:69:c4:28:e1:c0:21:0d:ef:12:
         6c:4d:2e:1f:84:71:aa:54:16:9c:25:8f:de:00:9c:11:be:ae:
         fd:0e:92:8e
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUU+oL/oWcTlk5SkPvlHzLosUrXcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQxMWJiZWZhOTFkOWMwMTJjYTZhODc1MzM5ZGIzMDA0
ODFhNmRlYjAeFw0yMjAzMDQwOTU1MTNaFw0yMzAzMDMxMDAwMTNaMDMxMTAvBgNV
BAMTKDFFMkM4MTJBNTRGOUM4MUIyNDI4QjI1MTlBRDIxRTQyN0VBNDA4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczSoP2XkvIm4sPGxi25vKor9q
cPlmRKCVN71NLdKPKYJPOn90uqeHXyAVeLvkra2MQUA1hmbxiGKAQNdXMJo8LXFq
QCQ28xdXXnb9S78LaG27snvtqqIT5ej1spPGFKIY3/YxDYNnwXz2q48kgoL/TubW
CAK0v5zpsFaD+li+US24yu5MEKJ9kMBLxDZ6b+Hyx97M4GBENWNWjTX7wIU/ZZFd
JKFyAlyTu+m/bGCHGeVFVsA0GhkgOsnaYOKNrQGBNyhSzLVoRb9fuZt0Ze8EpjFT
aOeED1l+TxUibk8Vr63YRpYwtaBVpxjDrTK8WugAmddtsskY2zh2ECuGaUbrAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUHiyBKlT5yBskKLJRmtIeQn6kCJIwHwYDVR0j
BBgwFoAUZBG776kdnAEspqh1M52zAEgabeswDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzYvNjQxMUJCRUZBOTFE
OUMwMTJDQTZBODc1MzM5REIzMDA0ODFBNkRFQi5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL1pCRzc3NmtkbkFFc3BxaDFNNTJ6QUVnYWJlcy5jZXIwbwYIKwYBBQUH
AQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovLzAuc2IvcmVwby9zYi82LzMxMzgz
NTJlMzEzNDM3MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4MzAz
NjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAuZM3MA0GCSqGSIb3DQEBCwUAA4IBAQBZx1Pf1Q6KD+eM
oin+v7DMp/9RwUGKki8dyXxA2vjnaneRmXJfZ3HWGmDbcN31A0Bn0rEOTWg2o8ud
1iTmoSjdciTOZo2ooAJ6r6FlgDHuLDtZSqlfVAcs0MeLwD7+tyBaW33w15L0i8c9
iFPCKzqpAohVqdLUd61fDlEcIVAZMfRPRyE4ihCdNOM7OvYcPGmfvLZOYZIlCWDB
DwSSKZQA4S6apiiwYB6wgH32rhja5S1NPiiwtuxxZVKdGUGs/DTMcI+flBx+JD0j
4p3iyg+bI19x7fMtyGP1tRcm+qWtkqhpxCjhwCEN7xJsTS4fhHGqVBacJY/eAJwR
vq79DpKO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org