Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/SboTC6053q_rjR5E2aUDfheXNQY.roa
File:                     SboTC6053q_rjR5E2aUDfheXNQY.roa (raw, json)
Hash identifier:          vNkb/8tKafp4OK971bVQ7X12mwU8ruhCPz459nf8I84=
Subject key identifier:   49:BA:13:0B:AD:39:DE:AF:EB:8D:1E:44:D9:A5:03:7E:17:97:35:06
Certificate issuer:       /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial:       018FC919E184D5409B5E3A3F014E8BA59D6B
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/SboTC6053q_rjR5E2aUDfheXNQY.roa
Signing time:             Thu 30 May 2024 10:44:27 +0000
ROA not before:           Thu 30 May 2024 10:44:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16190
IP address blocks:        195.28.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:19:e1:84:d5:40:9b:5e:3a:3f:01:4e:8b:a5:9d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
        Validity
            Not Before: May 30 10:44:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=49ba130bad39deafeb8d1e44d9a5037e17973506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:c5:4c:c1:d5:77:4b:6b:1d:bf:f2:f7:71:
                    e6:d5:a6:e6:fa:9d:82:6d:f0:be:fb:07:d0:ca:21:
                    f7:85:ca:db:fb:df:ee:2a:83:3a:de:0d:b5:93:c4:
                    e0:71:ad:19:6b:30:40:58:36:d7:bf:33:4c:42:4a:
                    71:3f:dc:d1:73:47:bb:c6:1d:8f:7a:f3:3f:22:14:
                    d9:61:8e:1d:e6:ca:bf:26:d6:a7:a7:27:05:da:fb:
                    92:c0:da:65:34:68:b2:4c:89:f4:65:fb:d1:b7:92:
                    17:09:fe:6f:14:11:90:ea:dd:73:cd:9f:8b:b6:07:
                    b6:75:22:d7:67:f0:a0:91:81:e7:dd:43:17:f2:5c:
                    94:68:65:df:d3:1c:ad:c8:85:66:b7:f5:6b:e4:1f:
                    00:38:8f:9a:67:34:ed:b0:96:66:b0:0d:1d:a2:71:
                    1f:e9:11:7b:fb:1c:c7:37:e1:5e:fd:92:2a:1f:e0:
                    68:35:d8:26:bb:c7:b2:e7:08:59:73:52:9d:85:f5:
                    40:a4:7e:57:82:da:92:51:ae:20:0c:28:66:2e:10:
                    6b:54:a5:fb:76:29:ee:0e:84:2a:fb:1c:47:29:65:
                    8e:d3:ca:ce:5d:8a:a3:57:bd:22:9a:15:90:b3:87:
                    ff:71:9b:45:26:ce:2a:ee:8a:89:69:0f:8b:63:0f:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BA:13:0B:AD:39:DE:AF:EB:8D:1E:44:D9:A5:03:7E:17:97:35:06
            X509v3 Authority Key Identifier:
                keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/SboTC6053q_rjR5E2aUDfheXNQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.28.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:13:3e:ba:28:f7:fa:c1:7c:c2:c1:3a:85:97:58:58:81:fa:
         3d:ab:bb:36:d7:3a:b0:69:b3:51:8e:98:33:81:50:2a:42:90:
         13:67:eb:7f:f3:a8:4d:81:3f:f5:56:4c:9c:4c:53:b6:91:28:
         a8:fb:86:ef:7f:75:f4:46:19:23:83:63:b2:d2:40:5d:53:03:
         e9:f6:2d:2e:63:d4:25:c0:a5:f5:58:f9:62:c9:8c:71:f3:2f:
         d3:67:99:7e:60:ea:c8:f7:84:a0:cf:94:54:0c:1e:46:dc:c5:
         6d:da:ec:a0:9c:19:1d:d2:22:20:9c:af:00:7b:3e:a3:87:46:
         3b:e5:f4:11:20:1e:eb:ef:11:dc:94:77:a5:83:5c:9f:e3:c0:
         1f:79:23:c8:60:dc:25:b7:ae:0f:7f:36:1f:ec:aa:69:f8:d7:
         d8:74:db:93:f3:5c:dd:fd:78:72:a1:b4:a7:5a:ce:7a:ac:65:
         d7:5d:8c:69:04:92:6c:4a:0f:dc:3d:a8:78:91:e1:9d:d6:b9:
         41:eb:51:81:d3:9c:5f:05:a8:f7:a2:eb:e9:10:3b:f3:d7:ad:
         66:a7:2d:be:ec:d2:86:37:71:3d:f5:61:4b:e2:ed:da:ad:60:
         46:8b:2b:ca:e4:e9:5c:da:e6:5a:28:21:69:a5:56:98:da:df:
         72:00:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:47:32 2024 by rpki-client on console.sobornost.net