Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS138195.roa
File:                     AS138195.roa (raw, json)
Hash identifier:          pj7JEmuG5DeZrI2C+aaPrOqTvzNrVd5uapy0x5dIoeI=
Subject key identifier:   29:47:9F:9B:0A:37:A5:C7:99:10:53:E1:90:13:DC:64:30:75:CB:DD
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       263136C6E06F251802E052F6A5B6F4C31A34663C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS138195.roa
Signing time:             Sat 27 Aug 2022 09:41:16 +0000
ROA not before:           Sat 27 Aug 2022 09:36:16 +0000
ROA not after:            Sat 26 Aug 2023 09:41:16 +0000
asID:                     138195
IP address blocks:        193.58.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:31:36:c6:e0:6f:25:18:02:e0:52:f6:a5:b6:f4:c3:1a:34:66:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:16 2022 GMT
            Not After : Aug 26 09:41:16 2023 GMT
        Subject: CN=29479F9B0A37A5C7991053E19013DC643075CBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:99:1f:dd:aa:92:b2:9a:ad:fc:9c:68:a6:f7:
                    ee:e6:e4:fa:0e:dd:7a:55:c0:87:0b:76:3f:fe:7f:
                    45:bf:05:d1:16:7c:4a:15:50:b1:16:f6:3a:f7:4d:
                    49:17:b5:45:99:97:97:d4:85:46:37:3f:a5:02:06:
                    61:df:65:7f:2d:ea:7d:46:d6:2d:dc:a5:f0:01:1a:
                    c7:a7:4c:53:18:ab:93:5a:3e:a7:47:d6:52:56:ee:
                    e9:11:46:32:c7:d7:78:d6:c8:ab:1b:60:32:5c:31:
                    ef:57:dc:7d:89:3d:8c:c9:49:a6:6f:f8:50:cf:bb:
                    e7:60:cf:54:db:db:26:45:24:2e:dd:1c:3d:32:1c:
                    98:d2:eb:50:a0:52:6e:03:d0:0d:ff:d1:14:37:7b:
                    a8:cd:b3:30:e9:a9:49:95:34:b1:08:df:36:0c:b2:
                    bb:93:33:89:2e:c6:40:bb:a9:4e:c3:c4:41:f1:e5:
                    01:a1:af:75:82:74:3e:01:3e:0a:95:11:ab:a0:96:
                    73:1f:d0:fe:c1:c7:7d:f4:c2:49:d8:8d:78:38:53:
                    ff:40:f3:96:b6:fa:47:f7:a0:04:56:78:59:7f:ae:
                    e6:b3:f5:02:61:d2:43:6f:5c:03:2d:e6:92:12:e5:
                    4e:0f:bc:31:0a:be:78:69:7a:ed:9b:25:ae:41:31:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:9F:9B:0A:37:A5:C7:99:10:53:E1:90:13:DC:64:30:75:CB:DD
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS138195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:98:ff:aa:90:e6:ef:76:29:7b:5c:53:b6:82:3e:0f:7f:
         36:de:05:91:52:e2:4e:a6:d3:36:88:44:ac:17:48:94:59:36:
         e1:56:68:0d:22:fc:e8:c3:f6:8e:77:04:3d:89:9c:5b:14:5d:
         a9:39:0e:82:c4:54:af:6b:aa:07:57:ae:d0:71:e8:0d:28:1b:
         85:9c:21:1c:3a:60:fe:21:fc:e3:a5:39:88:80:59:6b:8c:f6:
         6e:14:c8:d3:e1:f1:c6:bc:26:c9:28:c1:2f:93:b4:46:9a:e7:
         63:6b:aa:d9:f1:96:be:92:bd:a0:7b:9c:4d:8a:ff:e7:03:e8:
         65:ca:0d:e0:75:15:5f:08:05:97:54:89:10:67:42:b1:5c:65:
         f6:65:8f:54:b0:d9:1e:06:f2:5c:9c:0d:a5:56:51:bf:65:d5:
         ef:b2:9c:55:a9:30:02:57:af:d6:d1:ab:85:8c:11:43:65:2e:
         ea:09:79:86:aa:3f:cf:46:aa:57:96:21:35:cf:f3:44:18:60:
         21:e2:34:36:9b:e8:ac:6d:d2:54:86:7d:fb:ea:3e:55:77:e7:
         3f:ef:9f:72:3f:54:03:c3:aa:ec:71:31:ac:25:9b:27:f9:e3:
         2b:74:41:df:7e:89:ea:14:63:66:40:1f:45:a6:c4:0a:dd:dd:
         b2:f2:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org