Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS142430.roa
File:                     AS142430.roa (raw, json)
Hash identifier:          tjzf4WbpmkxVQ6v94Y+AAA61jo3z6UnHzL9OlitTQXA=
Subject key identifier:   AB:E3:E4:22:02:47:8D:1A:14:95:48:DE:3C:E4:B4:51:A3:06:51:D1
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       45AFB574882F4FA02830C27BFB81E9FA8E63B62A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS142430.roa
Signing time:             Thu 20 Oct 2022 16:23:24 +0000
ROA not before:           Thu 20 Oct 2022 16:18:24 +0000
ROA not after:            Thu 19 Oct 2023 16:23:24 +0000
asID:                     142430
IP address blocks:        185.170.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:af:b5:74:88:2f:4f:a0:28:30:c2:7b:fb:81:e9:fa:8e:63:b6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 20 16:18:24 2022 GMT
            Not After : Oct 19 16:23:24 2023 GMT
        Subject: CN=ABE3E42202478D1A149548DE3CE4B451A30651D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:7b:58:91:87:c8:db:73:ab:90:58:a8:82:
                    92:68:36:d5:81:2b:11:b5:8b:89:3a:21:cc:83:d4:
                    00:b9:b4:70:f4:ac:2e:c0:52:8b:a9:c9:9b:bc:a8:
                    6f:a5:73:36:2d:fc:87:71:c5:15:c8:8e:b1:49:06:
                    be:b0:bd:27:d1:1f:d4:5e:e0:c9:27:94:db:07:a5:
                    2d:52:04:37:40:4b:ae:50:da:9a:62:4f:8d:2e:58:
                    0e:c2:f1:b0:f2:bd:ff:1c:91:1e:9a:cf:42:38:ff:
                    86:8d:bd:dd:9b:a7:83:c5:33:e5:2f:20:0a:d5:96:
                    e8:26:12:6c:78:42:3c:5c:a1:04:5d:26:3a:dc:40:
                    38:50:3e:92:67:3d:b4:13:d4:2f:8b:e2:bf:3f:b2:
                    33:35:e6:b0:0e:83:bc:b2:31:c1:00:d0:c6:2a:b5:
                    a6:dc:6a:d7:33:13:dd:76:6a:48:0c:08:10:9d:c9:
                    72:5f:d1:d7:be:50:0e:31:66:ed:c7:60:59:e3:9e:
                    14:89:b6:8d:ca:78:f4:33:06:ba:75:5b:03:b7:21:
                    8a:d1:d4:9f:1a:ae:ae:62:ac:2f:1d:a7:d4:e0:2d:
                    1f:b2:51:68:18:74:fb:83:c9:d3:27:a7:b3:23:c1:
                    83:56:64:8b:55:e9:8e:9a:b4:a4:85:53:dd:a3:dd:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E3:E4:22:02:47:8D:1A:14:95:48:DE:3C:E4:B4:51:A3:06:51:D1
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS142430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:56:23:4e:11:ae:c8:48:d8:51:83:97:8d:d6:e1:9e:b3:1a:
         b0:95:69:8d:d6:ef:4f:43:6b:ce:e3:c3:d7:89:3e:ed:30:9e:
         45:f4:29:cb:3d:92:c4:05:5c:fb:e2:e5:29:45:b4:6f:d2:58:
         aa:9a:02:19:59:99:96:10:d3:0d:cb:a0:99:49:be:b6:5e:51:
         2e:c0:82:95:73:48:2c:a6:26:e9:a5:d0:24:98:c1:f7:fb:e6:
         78:5e:f8:03:e7:c8:f3:33:b3:a5:ce:c9:39:48:96:6a:4d:ea:
         2b:7b:54:60:23:56:da:77:0e:f3:43:89:b4:55:36:ee:f6:47:
         0a:30:14:ba:ea:f5:fc:73:3c:65:2b:6e:e6:5b:11:a7:c6:8f:
         5f:9c:f6:91:45:90:0c:88:72:18:f2:6e:aa:13:d3:6c:4d:cc:
         6a:53:97:5d:45:3e:2d:5c:ca:25:cc:88:7d:04:ba:67:a2:1c:
         88:d6:6c:cf:ca:85:54:43:f3:f8:a2:38:0f:5c:1a:ed:42:d3:
         e3:94:c7:fe:a4:17:c4:2a:ff:fa:a6:a2:b5:69:45:0c:8a:42:
         2b:bd:e2:be:ce:b6:3a:da:ae:a3:0f:02:ac:a6:bd:bc:16:6b:
         09:dd:b9:c8:42:35:ea:e5:af:82:1a:c4:45:f5:e6:b6:ba:94:
         73:3f:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org