Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa
File:                     3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier:          zE1aWg6ptHN80Ar+QIpuUVjP658S+VKAUtmizbep29Y=
Subject key identifier:   D3:03:91:DB:58:A6:B4:0C:7F:45:56:66:14:E8:A2:FF:1F:E6:4B:CF
Certificate issuer:       /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial:       78E34AA8773B204D2AE52E175D6D48C5E9D13146
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access:      rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa
Signing time:             Tue 05 Dec 2023 05:35:03 +0000
ROA not before:           Tue 05 Dec 2023 05:30:03 +0000
ROA not after:            Tue 03 Dec 2024 05:35:03 +0000
asID:                     197730
IP address blocks:        146.19.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e3:4a:a8:77:3b:20:4d:2a:e5:2e:17:5d:6d:48:c5:e9:d1:31:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
        Validity
            Not Before: Dec  5 05:30:03 2023 GMT
            Not After : Dec  3 05:35:03 2024 GMT
        Subject: CN=D30391DB58A6B40C7F45566614E8A2FF1FE64BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:5b:43:2a:ad:cf:76:3c:5f:97:85:88:1a:
                    39:56:1a:11:7e:64:00:68:5d:6c:7e:c9:bd:aa:46:
                    d0:d9:2f:a9:aa:f0:24:31:cf:7a:08:0d:64:a9:b0:
                    7e:a0:8f:b2:92:fe:fe:d1:89:0b:0a:06:a6:e6:b3:
                    0a:0b:c7:d4:70:48:18:d6:fc:14:88:b3:e1:90:0b:
                    4e:ff:72:8f:a0:7f:a5:ba:a2:60:53:b0:68:8d:9a:
                    95:ba:c3:b7:24:3f:5a:5c:13:2f:a3:e1:a5:da:a0:
                    70:96:7c:9b:00:ab:71:f5:c0:46:92:c1:f9:26:14:
                    1a:fd:16:88:9e:d4:64:a6:eb:fc:22:9b:db:83:5d:
                    84:bf:2f:eb:b7:a3:a5:4c:92:06:c5:4a:78:bc:c6:
                    c2:a0:71:ec:de:32:6d:5f:bd:00:e6:61:ca:68:55:
                    99:24:42:c2:02:3e:f5:65:35:8d:a0:66:c2:80:6c:
                    54:95:31:3a:ce:82:a5:e7:42:23:d4:a3:eb:a2:a5:
                    54:d4:ff:99:33:fb:d2:3d:17:30:1d:39:a5:bf:2a:
                    2e:a3:a7:5f:40:fb:9e:10:c8:49:6c:8b:66:8e:91:
                    e0:fe:7c:81:c5:14:2c:3d:7a:71:e6:0b:85:dc:a6:
                    2d:db:19:92:c6:42:bc:7b:67:8e:35:80:ed:e8:31:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:91:DB:58:A6:B4:0C:7F:45:56:66:14:E8:A2:FF:1F:E6:4B:CF
            X509v3 Authority Key Identifier:
                keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:1e:90:dc:62:29:3a:43:50:da:fe:9e:b2:ee:39:97:b8:
         13:bf:d0:61:22:17:35:cf:93:4b:87:83:e7:18:a6:e8:e8:f1:
         bf:39:99:15:f4:b4:26:72:86:b0:00:6b:53:f3:39:59:7b:48:
         44:6a:68:51:d7:07:d0:f5:1f:7a:5d:f5:da:52:f8:de:bf:e1:
         b3:ed:4a:5c:24:57:da:73:ae:ee:df:1e:30:21:31:07:00:67:
         88:f3:40:73:91:bb:e8:b0:08:98:6d:1c:b6:bb:67:dc:ed:fc:
         78:05:24:0b:fc:b4:48:1f:ce:59:28:75:48:50:bd:62:1c:94:
         ec:00:af:2e:0e:01:2b:18:c2:3b:7b:0c:cd:78:5c:37:1f:95:
         34:d1:83:a4:7a:80:05:0b:77:e0:b2:0e:7d:8d:4f:f6:1b:05:
         fb:e9:95:10:b9:5c:f8:e0:84:72:ec:07:58:87:39:60:af:02:
         76:af:c3:6e:89:e1:55:d5:d1:1e:7b:d9:ed:e6:4e:87:07:ac:
         e7:1d:8b:d2:d9:d7:21:1a:7b:b7:e3:e0:e3:b2:f3:6c:6c:9e:
         97:f3:a9:6a:3e:97:5e:ac:54:1a:95:1b:fb:ab:a4:61:11:e5:
         25:c7:6c:04:d9:3c:af:a9:b0:34:6e:a9:1b:60:18:ee:3b:06:
         6e:89:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org