Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209260.roa
File:                     AS209260.roa (raw, json)
Hash identifier:          Ov9M3ILtTm/gbmvpyZxzCJkR0KRlhJ9dRXgudnnIRqk=
Subject key identifier:   73:50:DF:98:9F:C8:DF:4E:FB:1E:29:C8:6A:E1:6A:3E:34:CF:87:FF
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       79C8621A45359A8CCC6646D1BADB87D5B698CED7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209260.roa
Signing time:             Sun 20 Nov 2022 07:29:16 +0000
ROA not before:           Sun 20 Nov 2022 07:24:16 +0000
ROA not after:            Sun 19 Nov 2023 07:29:16 +0000
asID:                     209260
IP address blocks:        181.214.11.0/24 maxlen: 24
                          181.215.38.0/24 maxlen: 24
                          181.215.42.0/24 maxlen: 24
                          185.135.8.0/24 maxlen: 24
                          185.137.15.0/24 maxlen: 24
                          191.96.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c8:62:1a:45:35:9a:8c:cc:66:46:d1:ba:db:87:d5:b6:98:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 20 07:24:16 2022 GMT
            Not After : Nov 19 07:29:16 2023 GMT
        Subject: CN=7350DF989FC8DF4EFB1E29C86AE16A3E34CF87FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:81:16:de:dc:26:a5:0c:f6:20:d4:7d:4a:
                    dd:7c:18:54:3f:38:ff:84:55:76:62:de:a7:b2:5b:
                    06:ec:3d:c3:66:c9:dd:36:6f:a0:cc:19:58:1c:81:
                    42:47:fd:32:a8:89:17:fc:b0:71:21:7c:62:b7:77:
                    3f:7b:25:73:d0:fb:49:45:95:13:a7:69:02:01:43:
                    77:1a:d5:6a:42:8b:e5:45:4e:09:4c:c4:aa:74:3c:
                    4d:78:25:44:b0:7e:5e:22:3f:1b:ab:d0:5b:c8:dd:
                    4d:ca:32:7c:12:ef:d6:88:66:1f:3c:1f:1d:1e:53:
                    f1:8d:ee:d5:44:06:90:74:63:0e:c5:cc:9d:11:47:
                    a6:42:9b:49:1a:df:7e:31:bc:6e:0f:cd:bb:46:9a:
                    59:49:d2:35:a0:f0:55:24:87:bc:0c:56:b9:fb:93:
                    cf:a7:88:6b:fd:10:2b:3b:22:56:59:6b:39:5f:5b:
                    6b:16:c8:e5:4b:02:36:6b:6a:49:32:b9:27:15:a1:
                    3d:11:91:75:99:d5:1d:ba:03:40:e3:8b:9b:2b:b1:
                    e4:15:55:0a:c1:78:16:d8:9f:b4:cb:e9:2e:f4:a8:
                    69:25:0b:6b:93:49:24:55:97:4a:ba:21:bb:a0:58:
                    ca:28:a4:ca:d7:de:84:31:3c:4f:7c:ef:43:f8:23:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:50:DF:98:9F:C8:DF:4E:FB:1E:29:C8:6A:E1:6A:3E:34:CF:87:FF
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.11.0/24
                  181.215.38.0/24
                  181.215.42.0/24
                  185.135.8.0/24
                  185.137.15.0/24
                  191.96.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5e:05:c3:59:78:48:11:f9:98:0b:c2:fd:5e:f6:25:89:51:
         82:f2:0b:15:73:ec:49:ab:13:86:28:de:0e:64:29:00:fb:f4:
         b0:3d:3c:95:1d:3e:e6:42:ba:53:3f:48:14:c5:cb:39:08:be:
         4d:3a:e7:4b:3b:30:9e:69:ec:d5:21:6d:7d:54:9d:53:ee:97:
         da:4a:2e:37:4f:d6:cf:b6:4a:60:35:56:aa:f8:c4:97:13:ca:
         7e:8d:df:03:97:5f:82:a3:74:28:3c:47:79:dd:63:78:1a:78:
         7f:15:ac:e0:88:ed:7c:1c:4c:30:c7:d9:f8:09:89:68:01:38:
         f2:ac:18:2f:80:af:72:2c:dc:8f:a5:98:db:55:d4:a0:ce:e1:
         3c:99:85:45:a2:63:f1:83:72:68:51:04:4f:39:93:65:76:cc:
         6a:9b:55:50:4e:12:2b:df:40:90:95:d5:a2:1b:f3:89:62:66:
         e9:2c:46:39:9c:a9:a9:04:49:26:fb:6a:aa:bf:1c:75:62:a7:
         a0:23:e4:74:6b:93:0d:5d:c7:69:ce:00:c7:38:2b:1c:01:08:
         51:59:bb:62:03:40:cb:98:71:5b:71:00:a1:24:82:28:62:cd:
         70:15:7a:3f:69:94:94:9f:13:b7:03:3d:40:a3:84:17:b3:78:
         51:f3:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org