Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS11426.roa
File:                     AS11426.roa (raw, json)
Hash identifier:          yTpNbyBXdtC6cZWVOtLkteLEIbrugiuUkRgOoJX+Xso=
Subject key identifier:   F0:6F:E6:76:34:A8:7A:23:5A:06:D4:BB:8B:47:94:18:E7:24:9B:69
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4250F56AC7E6830F13F0F69E8A9DB5B0D554D66F
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS11426.roa
Signing time:             Sat 27 Aug 2022 09:50:30 +0000
ROA not before:           Sat 27 Aug 2022 09:45:30 +0000
ROA not after:            Sat 26 Aug 2023 09:50:30 +0000
asID:                     11426
IP address blocks:        181.214.13.0/24 maxlen: 24
                          191.101.190.0/24 maxlen: 24
                          191.101.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:f5:6a:c7:e6:83:0f:13:f0:f6:9e:8a:9d:b5:b0:d5:54:d6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:30 2022 GMT
            Not After : Aug 26 09:50:30 2023 GMT
        Subject: CN=F06FE67634A87A235A06D4BB8B479418E7249B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:5e:46:03:2a:37:85:3b:33:26:e3:f3:ab:
                    e6:30:17:a4:70:af:83:c6:c4:fd:ad:04:47:e2:c5:
                    95:22:c6:df:7b:1f:a2:5d:fe:fa:4c:db:4d:e6:8f:
                    a9:79:c5:75:70:94:1a:fb:a4:cd:7c:5a:0e:41:0f:
                    64:2f:41:67:94:b4:95:5e:c3:e1:c4:dc:e4:88:68:
                    28:1f:e9:7d:64:43:b8:11:40:0f:4b:81:50:bd:2a:
                    00:dc:21:2c:53:64:62:a9:37:d8:d6:48:08:0f:65:
                    8a:9c:7c:4b:7f:fa:35:ba:1b:fb:00:76:58:8d:fd:
                    fe:37:23:f4:3c:75:a2:67:51:44:1e:b2:68:78:51:
                    ab:ee:65:a6:22:d7:52:39:04:84:32:3d:39:2e:55:
                    ba:f9:c6:b2:36:7c:4c:ae:d6:df:e5:a6:2f:2e:71:
                    43:a4:be:e0:0c:65:18:4a:12:3c:bb:fe:5b:94:66:
                    b2:4e:ea:c6:da:d9:da:6c:c7:ef:e8:03:0e:89:4e:
                    a8:76:b6:94:70:c1:47:c5:63:0b:bb:b9:71:4b:bd:
                    2e:5b:36:1c:12:db:cb:c2:26:9a:ce:4c:54:7d:80:
                    26:5a:c1:6a:50:f3:6c:95:4d:be:7c:0b:07:f1:c4:
                    87:9e:42:d4:6b:8d:1d:e2:f7:7f:7a:2d:65:6f:40:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:E6:76:34:A8:7A:23:5A:06:D4:BB:8B:47:94:18:E7:24:9B:69
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS11426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.13.0/24
                  191.101.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:78:57:c4:eb:0b:60:34:e6:58:b3:d8:84:c2:fb:6f:b4:98:
         48:52:6a:63:a8:44:88:fe:a0:a8:af:87:c2:44:96:fd:6b:22:
         ac:c7:b7:70:c1:b4:45:3f:cf:d0:d1:27:dc:18:dc:24:87:0b:
         22:b9:fa:10:c5:fc:34:08:ee:a9:56:79:e0:0d:a3:05:4b:65:
         38:ac:32:7d:e7:07:d5:87:2e:a8:71:94:ee:dd:0a:de:45:36:
         73:de:2c:34:01:76:9b:1d:59:ff:12:c5:ff:3c:9a:44:75:45:
         e5:55:1c:ac:9b:2e:e8:ed:ac:c6:37:37:ad:de:c8:53:06:f7:
         97:b5:ad:ea:93:39:d6:75:aa:2d:ec:62:92:9e:41:c7:a8:bd:
         8e:b1:f7:7b:e5:9d:fe:7a:6d:85:d4:58:e6:a1:b0:62:fc:c1:
         ac:d1:e4:6f:e6:47:69:b3:21:3f:cd:b3:4d:dc:e5:5b:4b:1d:
         13:f3:72:1c:24:c5:87:80:6b:b8:ca:b2:42:fc:e3:02:48:d9:
         ac:47:90:07:5c:d2:05:90:14:46:d9:68:03:cb:e5:0d:c7:d4:
         fe:73:dc:25:3e:6b:c8:f0:27:e7:7f:ee:82:f0:7c:85:80:f5:
         74:e9:a1:08:0d:2d:ba:f1:2a:f0:ba:c9:f2:d3:15:98:1f:f2:
         44:3b:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org