Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211112.roa
File:                     AS211112.roa (raw, json)
Hash identifier:          mIrjPZDeeg1hu0XZXD+ZULlxqzNr8X80SyUaJqWwXl8=
Subject key identifier:   8F:85:D6:51:6E:C5:A4:31:74:94:91:ED:79:A7:EA:2E:F5:59:57:99
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       21D18F8A9196A296ABC36A5F29B8D72C6391A396
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211112.roa
Signing time:             Tue 14 Jun 2022 06:40:10 +0000
ROA not before:           Tue 14 Jun 2022 06:35:10 +0000
ROA not after:            Tue 13 Jun 2023 06:40:10 +0000
asID:                     211112
IP address blocks:        193.58.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d1:8f:8a:91:96:a2:96:ab:c3:6a:5f:29:b8:d7:2c:63:91:a3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 14 06:35:10 2022 GMT
            Not After : Jun 13 06:40:10 2023 GMT
        Subject: CN=8F85D6516EC5A431749491ED79A7EA2EF5595799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:f4:0b:1d:84:51:73:39:3d:df:e1:5d:7f:
                    bc:67:c6:af:f0:ff:13:4b:25:2d:6a:b1:03:43:2a:
                    b6:d7:d6:7a:ce:ab:f0:90:8c:da:9b:a3:08:08:45:
                    6a:02:05:6e:92:2b:8c:75:66:71:fc:63:46:12:07:
                    52:05:9c:ec:b6:62:d5:2d:26:49:9f:a0:c4:25:f7:
                    71:bf:0d:7e:c8:22:d6:64:0c:0e:47:c9:0c:55:ce:
                    fe:88:89:e0:26:4e:7a:db:9d:f3:ea:ff:c8:58:ef:
                    c3:ec:4d:08:89:7c:38:aa:3f:cb:a4:9b:c4:33:50:
                    85:46:32:a2:ab:c4:25:a5:ac:63:37:3d:b3:ba:96:
                    e8:54:6e:2e:63:40:5d:5a:f5:12:20:63:c7:20:9a:
                    92:23:b8:98:48:f5:9c:06:32:d5:f9:eb:f0:74:41:
                    f3:13:1c:c8:31:c2:e3:06:52:74:74:cc:8b:22:f7:
                    56:04:11:19:ee:19:0c:05:df:97:d3:a2:ac:53:e7:
                    da:60:46:21:80:19:1d:a0:dd:92:3c:7a:98:df:cc:
                    c9:0f:fb:34:a0:bf:94:88:b5:b7:fa:92:c5:7b:23:
                    d8:0f:28:69:42:c7:13:62:52:50:07:e9:11:81:67:
                    75:b4:ae:42:22:c4:31:63:75:be:63:1e:8a:dc:16:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:85:D6:51:6E:C5:A4:31:74:94:91:ED:79:A7:EA:2E:F5:59:57:99
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:40:17:63:99:e6:36:41:fd:b8:2b:3e:79:2a:fa:45:0d:
         7b:cd:16:35:5b:2f:e1:d3:25:a1:ae:d8:f4:f2:09:28:dd:49:
         f4:38:64:f6:f3:c2:c2:66:bb:fc:41:07:51:a2:b2:26:2a:ed:
         b5:a5:92:e1:2b:63:68:22:ac:15:87:25:fd:74:d3:97:38:d9:
         b4:82:ba:44:32:d0:18:37:f7:1d:e4:be:3c:8b:9f:2e:78:59:
         5e:88:a0:4a:a5:93:f2:82:bc:eb:36:32:e2:44:88:bb:3a:89:
         1f:5a:67:cd:47:bb:17:3e:8a:4a:5a:06:ca:dd:8e:d6:df:75:
         5d:de:54:d5:d9:23:02:35:2e:9d:83:ab:96:c0:75:cd:3e:1e:
         e0:80:a7:c1:12:53:a5:49:1d:d3:bb:87:a4:f7:b5:11:f9:7f:
         11:5c:a0:a3:8d:90:09:13:b4:bd:e7:12:54:dd:ce:7a:93:08:
         4a:83:ae:d6:8d:e9:ec:98:d6:88:c8:28:a5:52:40:49:16:cd:
         cb:de:bb:31:d8:46:f5:79:ca:e6:3b:79:8a:d4:96:53:32:6b:
         77:0e:55:3b:41:ae:af:98:ff:d5:d8:ec:7d:b1:a5:b0:2a:55:
         ac:ce:fb:01:d6:1d:d6:72:42:03:ee:86:08:5f:c5:74:bc:1a:
         40:3b:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org