Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13768.roa
File:                     AS13768.roa (raw, json)
Hash identifier:          diKgijjLOuMEsLjQ7+nAY8PZq4bKS64L2GemF6uJXq8=
Subject key identifier:   C3:04:8A:FB:10:07:5D:03:08:44:F6:B8:44:2A:7D:74:29:57:17:C9
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       75B8550D3D9DC0636EC768C6174B8BC10154287F
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13768.roa
Signing time:             Sat 27 Aug 2022 09:47:38 +0000
ROA not before:           Sat 27 Aug 2022 09:42:38 +0000
ROA not after:            Sat 26 Aug 2023 09:47:38 +0000
asID:                     13768
IP address blocks:        181.215.249.0/24 maxlen: 24
                          191.96.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b8:55:0d:3d:9d:c0:63:6e:c7:68:c6:17:4b:8b:c1:01:54:28:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:42:38 2022 GMT
            Not After : Aug 26 09:47:38 2023 GMT
        Subject: CN=C3048AFB10075D030844F6B8442A7D74295717C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:c6:6d:6a:b7:31:15:eb:0f:4c:86:61:37:
                    2b:88:e1:74:b3:85:91:a7:57:25:74:0c:98:29:4c:
                    0d:35:df:9e:38:36:8d:51:4a:5f:bd:32:2a:30:6e:
                    a3:d7:23:95:a1:07:ce:ae:92:3c:74:f1:5a:ff:cb:
                    f6:50:9d:4f:56:b0:48:d2:39:34:35:ca:6a:ac:bc:
                    36:52:a3:a0:e6:5c:e0:b0:fc:7b:bc:f3:ec:9e:2a:
                    ee:73:95:dc:3a:15:d4:0e:fc:a4:09:87:f0:d9:b3:
                    74:04:16:a6:4d:26:17:53:53:8e:af:17:c9:31:df:
                    d0:5c:56:30:b0:42:94:a1:1a:7a:02:1a:c3:a2:23:
                    dc:4e:8b:a4:56:bf:c4:f6:0b:8a:11:da:dc:c6:34:
                    b2:4c:4a:73:9d:0c:19:2a:80:ce:e4:c5:2b:0f:56:
                    de:44:5c:b1:e0:aa:f5:e0:ea:f6:e4:b2:1c:e6:8f:
                    1c:dd:4e:8e:4d:f1:26:3d:bf:c6:a9:4d:bb:c8:54:
                    95:91:92:8c:97:a8:5b:26:8c:b5:f4:10:13:b6:e8:
                    a0:bd:99:3a:b8:2c:1d:ef:bd:be:62:45:ee:ad:cc:
                    8d:47:56:ca:8d:6d:a8:4d:21:cd:cf:9a:e4:56:38:
                    a0:6f:eb:53:9c:33:88:3f:41:b1:2e:e1:72:b9:ab:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:8A:FB:10:07:5D:03:08:44:F6:B8:44:2A:7D:74:29:57:17:C9
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.249.0/24
                  191.96.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:00:11:c2:86:43:08:89:1f:67:66:7c:9b:7c:a3:e4:c3:
         c0:7e:ee:58:21:1b:a8:25:12:51:e4:81:9e:a3:1c:c0:ba:18:
         9f:70:d6:6d:1c:18:47:33:52:2c:12:b1:88:c8:01:7a:be:9c:
         66:f9:7e:06:d5:69:c3:6e:7e:5c:26:ad:63:12:64:34:a3:2d:
         a6:c4:74:a9:83:90:24:cd:52:e9:c7:bd:df:36:88:86:b9:54:
         68:62:fb:f6:fd:45:62:3a:c9:49:17:4c:41:d6:62:01:67:ba:
         e8:bf:4f:00:97:5e:58:06:5a:99:11:c0:76:3e:c8:1f:27:b9:
         b6:75:a9:c3:8c:05:bc:1d:03:ca:c0:8c:8d:4d:f2:25:7c:d7:
         a2:48:a9:91:33:4a:7d:27:97:07:f4:c0:61:e5:f0:0f:a5:0f:
         e6:62:7b:56:f8:18:c4:60:0d:51:72:0b:66:38:e7:d1:ba:26:
         a4:58:20:62:a4:1f:f3:4c:72:ed:8f:b9:27:00:ef:1a:18:ea:
         c2:69:9a:89:22:cc:6a:a2:36:ba:ab:79:16:80:0d:ec:ca:50:
         04:da:72:9f:0f:c2:97:d0:d5:d9:f1:b7:f2:82:ac:d1:1d:eb:
         84:11:d4:af:da:df:40:52:85:3d:87:6d:bd:59:f0:c3:69:43:
         0d:b9:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org