Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135375.roa
File:                     AS135375.roa (raw, json)
Hash identifier:          untB0jz469X/5/3bgW55SYpiQYo28VxkucqYhNhpDuE=
Subject key identifier:   E2:E6:FF:3B:DC:B4:46:45:03:4B:42:0D:41:8F:F2:5D:0B:1C:73:39
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       128214B268B938BE9BF4D5902DE4B8AB996DE210
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135375.roa
Signing time:             Thu 27 Oct 2022 15:15:56 +0000
ROA not before:           Thu 27 Oct 2022 15:10:56 +0000
ROA not after:            Thu 26 Oct 2023 15:15:56 +0000
asID:                     135375
IP address blocks:        45.133.168.0/24 maxlen: 24
                          181.214.168.0/24 maxlen: 24
                          181.214.169.0/24 maxlen: 24
                          181.214.180.0/24 maxlen: 24
                          181.215.147.0/24 maxlen: 24
                          191.96.158.0/24 maxlen: 24
                          193.58.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:14:b2:68:b9:38:be:9b:f4:d5:90:2d:e4:b8:ab:99:6d:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 27 15:10:56 2022 GMT
            Not After : Oct 26 15:15:56 2023 GMT
        Subject: CN=E2E6FF3BDCB44645034B420D418FF25D0B1C7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:82:15:f8:a3:89:48:7e:6e:58:a5:d9:4e:
                    56:b2:26:dd:c3:bb:fa:f4:e5:c4:de:69:d4:f4:17:
                    4a:24:2e:0d:8f:fd:c6:7c:4c:74:4b:df:52:11:cc:
                    f6:05:d1:96:ed:d1:73:68:32:c6:a6:ce:b9:6a:53:
                    e3:71:12:62:c7:8c:a9:09:59:df:81:aa:27:47:11:
                    30:d0:b6:b4:9d:c9:3e:e8:7d:48:75:71:a0:ff:cd:
                    5c:09:61:cb:3b:0c:c1:60:ff:98:be:57:7e:ad:a0:
                    be:42:f7:5f:0c:68:05:e6:94:26:a4:7f:d7:40:ad:
                    3b:17:91:fe:ee:d5:df:ee:ec:39:30:4d:b9:c3:0a:
                    f2:6c:0a:20:8e:bd:cb:88:95:c4:a2:59:77:e5:fd:
                    95:a7:24:b5:4d:59:e2:f6:77:5d:3c:35:e4:4c:1f:
                    41:60:3a:25:47:8f:fc:d7:fa:2e:48:a7:6a:bb:6e:
                    c0:37:c4:93:15:6e:b7:8d:7e:83:fb:b7:c7:52:e1:
                    1f:0b:6b:72:b8:82:34:1d:ba:b9:da:2f:1d:d7:76:
                    fe:dc:72:3c:f6:60:e4:4a:a2:6f:b6:f7:1f:89:7f:
                    06:a1:08:48:a0:67:09:84:76:15:5f:61:4b:cb:3f:
                    8b:35:3a:b2:bb:1d:a3:a4:0d:8f:a2:88:db:83:d5:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:FF:3B:DC:B4:46:45:03:4B:42:0D:41:8F:F2:5D:0B:1C:73:39
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.168.0/24
                  181.214.168.0/23
                  181.214.180.0/24
                  181.215.147.0/24
                  191.96.158.0/24
                  193.58.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:45:16:9f:9c:96:b5:4d:a4:66:d5:de:a9:81:6b:e9:2b:20:
         7d:5c:f3:d8:66:9f:8b:75:23:ad:dd:77:23:db:6a:7e:c1:03:
         9e:b9:de:8a:54:7a:82:9e:5b:5c:02:64:ff:fe:51:88:7f:0d:
         c2:bc:33:aa:ca:f1:cf:2a:15:34:4a:f8:cf:00:06:c4:91:0c:
         cb:84:28:5f:9d:e0:05:7c:12:cf:65:00:73:6d:51:21:a1:0d:
         73:ad:f4:62:0b:da:ce:f5:db:dd:d1:65:37:ef:35:12:0e:03:
         32:a4:f8:e2:69:34:d5:57:99:7e:ad:8e:d1:25:0f:75:1f:31:
         9a:22:40:51:05:71:5d:2d:56:83:dd:04:e5:b8:a1:2c:b1:50:
         69:0d:2d:74:a9:96:be:6b:2a:c8:11:4b:3f:5d:a6:9a:63:89:
         b6:c1:45:e9:fa:07:1a:47:c4:0d:f6:b3:2f:f8:aa:7e:ee:83:
         5e:49:3a:1e:21:97:79:88:a5:99:43:7a:67:57:8c:e0:06:d0:
         2e:f0:8a:d7:34:80:f4:73:89:35:41:36:76:ed:cf:7a:27:61:
         16:9f:56:25:89:d5:5f:a1:74:6e:52:86:2b:46:d6:54:15:ad:
         39:1d:dd:80:84:f4:d4:f5:ca:35:12:33:2c:09:64:d6:45:50:
         b7:90:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org