Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS202458.roa
File:                     AS202458.roa (raw, json)
Hash identifier:          m2sDs0ra/MoR0mO4yZh4MbeDAOdCsKv1PNT32OZHo6k=
Subject key identifier:   87:3A:40:FF:ED:08:81:20:F2:77:5B:D8:8A:F9:03:1A:6D:89:B7:87
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       62E2BBF5F43C65F40BD6C4F92B8A6FCFE3163CDF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS202458.roa
Signing time:             Thu 06 Oct 2022 11:28:17 +0000
ROA not before:           Thu 06 Oct 2022 11:23:17 +0000
ROA not after:            Thu 05 Oct 2023 11:28:17 +0000
asID:                     202458
IP address blocks:        179.61.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:bb:f5:f4:3c:65:f4:0b:d6:c4:f9:2b:8a:6f:cf:e3:16:3c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct  6 11:23:17 2022 GMT
            Not After : Oct  5 11:28:17 2023 GMT
        Subject: CN=873A40FFED088120F2775BD88AF9031A6D89B787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:44:16:ea:1c:f2:65:b5:f8:9e:70:2b:23:
                    92:fc:4b:a7:58:3b:b7:89:e2:6f:25:38:93:68:02:
                    74:63:91:a4:35:ad:e4:5e:5b:9c:df:0f:a1:ea:19:
                    8e:c9:03:ad:ae:ac:6c:dd:41:de:4c:c2:34:ba:02:
                    6a:6a:43:da:9c:27:9c:e1:3d:a8:f8:50:e5:a2:48:
                    a0:2d:80:f7:44:10:5b:5c:96:46:10:b7:98:03:f6:
                    30:53:7f:10:6a:ea:81:cd:05:50:ee:fa:b6:4b:9c:
                    9f:16:55:0d:ba:fc:36:a2:cc:7f:46:bc:a5:da:0f:
                    df:fb:b4:2c:a7:45:ef:36:96:19:51:7a:89:79:ec:
                    50:14:1d:5c:18:41:b3:29:38:1a:f0:8f:88:e4:cb:
                    db:d3:de:7f:2e:c3:f2:c2:41:6c:42:08:db:1c:8e:
                    7e:06:df:26:30:fd:3b:e3:92:d1:2a:72:29:5e:d2:
                    f6:30:4c:ed:99:1a:3e:23:9c:60:ff:98:2d:f5:47:
                    94:e6:05:3a:c1:8c:9d:97:0d:ad:08:3e:98:71:ee:
                    64:d4:3e:9c:c3:af:45:e4:dd:42:cd:3d:23:33:44:
                    85:cd:48:95:59:3c:55:40:dd:35:7d:4f:fc:39:dd:
                    86:e1:dd:bf:5c:5a:be:f7:04:61:2d:58:63:ce:2e:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:40:FF:ED:08:81:20:F2:77:5B:D8:8A:F9:03:1A:6D:89:B7:87
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS202458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b4:b7:87:34:56:8f:e2:46:c1:53:83:21:98:e1:bb:a3:aa:
         95:2e:98:6d:1e:50:37:54:28:45:ee:66:1b:51:b8:92:f3:ea:
         0e:ce:31:d1:9f:af:bc:6f:2e:d2:8c:48:56:0c:9b:aa:0b:99:
         95:d1:7b:02:a0:a7:ce:94:81:58:ad:ca:cc:a7:46:d9:43:1d:
         7b:75:99:52:b4:32:98:8c:21:e2:bd:71:ae:93:f0:e5:a9:4d:
         2d:9a:9e:04:a9:e4:cc:d9:27:3b:c4:85:25:a3:99:5d:67:8c:
         c2:da:57:50:74:53:6a:25:8d:0d:ed:9b:12:88:8c:98:a9:b6:
         e8:0b:c6:db:07:7b:ca:7e:68:b9:52:71:0a:f0:38:f5:7b:02:
         d9:07:4c:11:83:e6:8c:e2:48:df:0c:27:96:33:86:0a:0c:2d:
         d9:83:e0:ae:60:35:5a:7e:74:9b:09:bf:15:bc:c1:f6:89:1b:
         fc:ae:26:5b:3c:84:77:e7:af:c9:f6:d7:41:2d:32:57:63:8c:
         aa:5d:09:90:e8:19:c9:62:2a:98:f2:9b:ea:96:ba:ad:87:41:
         fd:3f:48:5a:43:2d:8e:56:af:a5:4b:a5:cc:77:29:a7:0d:8b:
         1b:43:7c:95:18:9c:2c:d4:23:43:23:a0:ad:cc:c4:00:3c:ce:
         80:93:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org