Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133219.roa
File:                     AS133219.roa (raw, json)
Hash identifier:          tHR+PTuW2Dsdqx8rHPbQ72PskkoLBgudREYuh5qsBcE=
Subject key identifier:   2C:9B:DC:9F:49:EC:46:B6:AA:8D:C7:C2:52:C8:9E:EB:81:CE:21:8F
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       1B74BF2A74CF28642ECD7C6961DDC9AB200BC208
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133219.roa
Signing time:             Sat 27 Aug 2022 09:41:47 +0000
ROA not before:           Sat 27 Aug 2022 09:36:47 +0000
ROA not after:            Sat 26 Aug 2023 09:41:47 +0000
asID:                     133219
IP address blocks:        185.174.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:74:bf:2a:74:cf:28:64:2e:cd:7c:69:61:dd:c9:ab:20:0b:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:47 2022 GMT
            Not After : Aug 26 09:41:47 2023 GMT
        Subject: CN=2C9BDC9F49EC46B6AA8DC7C252C89EEB81CE218F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:cf:3c:8c:ca:3e:7e:c5:c9:4c:ce:94:d6:
                    5d:fa:63:c3:4a:e0:99:1a:9f:66:57:6f:f8:37:22:
                    bb:e6:a0:2e:db:14:41:50:d9:fd:74:99:4f:73:36:
                    a2:f5:2f:c0:1e:ae:94:af:a9:49:18:ce:df:df:1d:
                    36:01:88:35:c0:53:42:a3:dd:c3:49:e6:f3:41:2e:
                    a1:3c:fc:09:7b:c0:f5:8e:00:3e:81:26:a2:84:ca:
                    b2:14:e4:2f:59:a2:37:17:78:6e:d0:85:dc:51:d2:
                    61:17:51:f3:cf:b8:55:43:6a:67:30:19:4d:4d:15:
                    69:b0:13:7f:cb:d6:45:13:c9:44:eb:e2:88:d6:4f:
                    0d:96:ad:ad:f5:d6:00:5a:ec:2e:14:a8:99:13:2b:
                    ad:f5:2d:89:f9:b6:74:ba:c3:4e:c3:3c:1d:08:f0:
                    e4:1c:93:ce:9d:29:58:17:75:74:b8:6f:07:9d:22:
                    06:21:d9:48:31:08:84:6b:3f:1d:e5:f8:a1:c3:22:
                    93:b8:5f:09:ff:57:c1:b3:0a:7a:73:a9:02:a6:96:
                    e2:35:a6:19:b4:5d:43:29:59:79:d1:41:7c:eb:a8:
                    68:36:71:ab:e1:94:84:00:71:d4:03:45:41:0d:54:
                    22:07:9d:06:83:d8:0e:59:74:1b:0e:e2:f8:57:08:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9B:DC:9F:49:EC:46:B6:AA:8D:C7:C2:52:C8:9E:EB:81:CE:21:8F
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS133219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:73:ac:65:46:9c:89:cc:d0:bf:34:4d:23:f5:97:ab:b8:8a:
         83:63:2a:c0:0f:cd:f2:7b:35:e3:0f:75:35:4d:4a:c9:a3:94:
         e9:2b:9b:d4:32:70:fd:40:b1:38:37:03:2a:6f:91:08:8a:7f:
         a9:57:30:eb:c4:36:94:bf:94:85:e3:9a:8c:8b:b5:8a:2f:7a:
         c1:2c:7b:b4:29:57:9b:ad:c9:e8:d5:a5:b6:72:ce:cc:6f:79:
         b1:e5:65:d4:1c:f8:3f:71:3b:c1:29:6e:8d:c3:ec:e1:72:1a:
         c6:3e:27:d0:f5:86:9c:44:49:e5:54:4c:cc:33:b1:0e:9c:2f:
         93:20:78:6c:50:93:7f:20:e6:26:7f:e0:50:8c:42:3c:19:3f:
         93:af:3f:66:17:e2:61:b0:e7:37:32:31:ab:98:3f:d9:78:61:
         5b:f3:01:3d:20:ed:1f:3b:c3:c2:fb:4a:72:63:b1:24:0e:dd:
         51:75:2e:52:2c:6e:cf:66:aa:fe:bf:27:f0:c1:84:5f:34:ec:
         e2:0a:ad:b3:f3:44:13:b1:b8:27:3c:b0:51:ac:21:e6:5c:6b:
         7d:15:bd:3b:a0:6d:f5:6c:57:9f:24:fd:95:02:ce:5a:a5:ef:
         04:20:1e:fb:a9:35:4c:90:26:d3:32:5d:a8:eb:b5:4e:a2:f9:
         11:4c:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org