Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13876.roa
File:                     AS13876.roa (raw, json)
Hash identifier:          dut5iziZKr4h0NkXi1EYYTeVYIHQooYumr3vfXUls0A=
Subject key identifier:   61:29:81:78:42:35:68:95:AA:91:B8:5B:8C:07:77:AF:44:6D:0A:66
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6103E0A28607FE6F4703CE7C9CBCDF9C21B79277
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13876.roa
Signing time:             Sat 27 Aug 2022 09:46:41 +0000
ROA not before:           Sat 27 Aug 2022 09:41:41 +0000
ROA not after:            Sat 26 Aug 2023 09:46:41 +0000
asID:                     13876
IP address blocks:        181.214.246.0/24 maxlen: 24
                          191.101.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:e0:a2:86:07:fe:6f:47:03:ce:7c:9c:bc:df:9c:21:b7:92:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:41 2022 GMT
            Not After : Aug 26 09:46:41 2023 GMT
        Subject: CN=6129817842356895AA91B85B8C0777AF446D0A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:6f:5c:70:30:1c:68:85:f7:1f:d2:9e:37:
                    fb:da:78:f8:32:c1:17:99:22:af:83:1f:18:78:fb:
                    79:d3:1f:ad:b3:e7:a0:97:cf:71:02:59:58:36:60:
                    fc:99:37:d4:44:a1:01:df:ad:f9:04:e8:ea:47:01:
                    7d:79:d6:e2:08:d0:f9:f0:8a:d6:fb:bc:06:fc:16:
                    01:cc:e8:40:9e:ea:94:a8:17:51:55:2d:20:95:94:
                    65:74:b6:b5:fb:52:e9:3e:3b:98:44:87:74:f1:1b:
                    af:cb:81:74:a7:6a:1d:82:d7:bf:f5:b6:aa:d4:7a:
                    9f:ac:2c:c4:aa:c5:67:e5:24:d3:07:30:87:28:80:
                    9d:18:20:3c:6f:77:22:e9:3f:69:c6:6d:2c:fc:bd:
                    55:93:41:fd:e3:17:c6:ea:1f:c4:33:58:fc:4f:9e:
                    46:e5:c0:b1:34:0a:3d:38:2e:c3:73:8b:d8:7e:f2:
                    af:0d:1f:8f:74:87:67:73:40:6d:3e:63:c7:23:6b:
                    ca:fc:14:71:8d:e7:2a:20:9d:69:bf:a7:86:e3:c8:
                    ab:d6:d4:93:96:d2:8e:1b:85:1a:d1:75:cd:a7:89:
                    e7:c0:56:29:0d:7d:cc:5c:a1:1b:d6:10:c5:8c:77:
                    16:49:13:ad:ec:71:eb:25:93:57:4c:36:b8:e5:5c:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:29:81:78:42:35:68:95:AA:91:B8:5B:8C:07:77:AF:44:6D:0A:66
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.246.0/24
                  191.101.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:3a:8f:cc:d9:68:e3:17:49:7f:43:c5:6e:a9:cd:2a:ea:
         56:df:f6:b7:42:e3:a0:4d:cf:b7:5b:a1:0f:54:fc:f3:a1:9e:
         9f:3c:0c:24:28:c1:99:87:90:46:1c:d1:de:0a:29:34:1f:36:
         d2:5d:5a:69:1b:3f:48:4f:27:dd:95:b8:11:36:62:ab:d1:0a:
         30:8f:9c:c7:43:71:f7:9e:25:b3:13:f4:91:68:79:0d:e0:78:
         16:bb:fe:04:0b:e4:80:c2:eb:d5:14:31:d1:72:a9:8d:81:ec:
         3e:12:4b:b7:f3:60:ff:09:7b:28:92:8c:04:9b:4a:07:cc:4c:
         00:90:87:6a:01:e0:83:96:08:d8:60:75:88:da:7f:c2:44:3f:
         b4:08:0f:28:c0:8f:98:9a:70:9e:47:e7:30:bd:df:4f:3f:5b:
         ac:49:7d:3b:c3:93:c8:7c:64:1e:47:21:72:63:06:f6:3c:d7:
         2e:7f:9a:e6:11:5c:bb:a2:d3:d2:5c:21:06:81:e1:66:7e:82:
         a9:7d:d7:85:f8:5e:88:f8:2b:f8:a1:77:9a:f9:61:ad:d2:57:
         ee:dd:81:13:12:2e:85:7e:15:1f:8e:cd:7c:98:34:f5:cc:6f:
         cd:ee:c9:b7:6e:70:b6:02:f6:21:c3:4a:68:3d:09:67:97:d3:
         45:10:8e:c7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUYQPgooYH/m9HA858nLzfnCG3kncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQxNDFaFw0yMzA4MjYwOTQ2NDFaMDMxMTAvBgNV
BAMTKDYxMjk4MTc4NDIzNTY4OTVBQTkxQjg1QjhDMDc3N0FGNDQ2RDBBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMW9ccDAcaIX3H9KeN/vaePgy
wReZIq+DHxh4+3nTH62z56CXz3ECWVg2YPyZN9REoQHfrfkE6OpHAX151uII0Pnw
itb7vAb8FgHM6ECe6pSoF1FVLSCVlGV0trX7Uuk+O5hEh3TxG6/LgXSnah2C17/1
tqrUep+sLMSqxWflJNMHMIcogJ0YIDxvdyLpP2nGbSz8vVWTQf3jF8bqH8QzWPxP
nkblwLE0Cj04LsNzi9h+8q8NH490h2dzQG0+Y8cja8r8FHGN5yognWm/p4bjyKvW
1JOW0o4bhRrRdc2niefAVikNfcxcoRvWEMWMdxZJE63sceslk1dMNrjlXH3LAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUYSmBeEI1aJWqkbhbjAd3r0RtCmYwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMxMzg3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF
BQcBBwEB/wQWMBQwEgQCAAEwDAMEALXW9gMEAL9leDANBgkqhkiG9w0BAQsFAAOC
AQEAL4c6j8zZaOMXSX9DxW6pzSrqVt/2t0LjoE3Pt1uhD1T886GenzwMJCjBmYeQ
RhzR3gopNB820l1aaRs/SE8n3ZW4ETZiq9EKMI+cx0Nx954lsxP0kWh5DeB4Frv+
BAvkgMLr1RQx0XKpjYHsPhJLt/Ng/wl7KJKMBJtKB8xMAJCHagHgg5YI2GB1iNp/
wkQ/tAgPKMCPmJpwnkfnML3fTz9brEl9O8OTyHxkHkchcmMG9jzXLn+a5hFcu6LT
0lwhBoHhZn6CqX3XhfheiPgr+KF3mvlhrdJX7t2BExIuhX4VH47NfJg09cxvze7J
t25wtgL2IcNKaD0JZ5fTRRCOxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org