Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211301.roa
File:                     AS211301.roa (raw, json)
Hash identifier:          ly0pdD1BwtgqRHNwj6vh9VQJ00I2u6IrvUzDzG58LzM=
Subject key identifier:   D7:74:D9:B4:40:AE:D8:11:69:FD:53:8F:6E:9E:A1:44:24:35:22:88
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       36C0DF77A2F3D61CE306F2811DE2F194A4CFA857
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211301.roa
Signing time:             Wed 16 Nov 2022 19:41:34 +0000
ROA not before:           Wed 16 Nov 2022 19:36:34 +0000
ROA not after:            Wed 15 Nov 2023 19:41:34 +0000
asID:                     211301
IP address blocks:        179.61.251.0/24 maxlen: 24
                          181.214.99.0/24 maxlen: 24
                          181.214.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c0:df:77:a2:f3:d6:1c:e3:06:f2:81:1d:e2:f1:94:a4:cf:a8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 16 19:36:34 2022 GMT
            Not After : Nov 15 19:41:34 2023 GMT
        Subject: CN=D774D9B440AED81169FD538F6E9EA14424352288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:0d:62:be:0d:44:da:bc:9f:a1:ec:1a:f9:
                    5d:a0:90:58:0e:c8:f4:16:2e:bb:c5:34:e3:5c:25:
                    b0:79:b8:16:e4:48:7a:92:3d:72:86:0e:20:14:ed:
                    72:1a:f7:58:e3:33:fa:fc:b2:49:9c:1b:64:16:b2:
                    79:b0:4f:b5:25:5b:73:a0:72:98:2d:be:e9:90:ab:
                    f3:85:0c:47:6b:da:ce:13:f9:ef:1f:e0:ab:7a:7c:
                    7c:cb:bc:6f:f2:8e:bc:23:96:63:a5:d5:0f:09:6c:
                    f4:3e:e5:ca:13:1d:c3:66:c0:6b:ce:66:b7:92:c1:
                    87:8c:45:db:4d:b8:4c:cc:25:8b:35:54:bb:6a:f2:
                    a5:4e:09:17:2e:9b:14:37:2c:37:2b:0a:a5:0f:b0:
                    76:33:79:ae:5b:ed:a8:4e:1c:57:6a:96:1b:2e:60:
                    9f:03:1f:0a:d7:e9:66:d7:e4:73:f8:50:97:e3:27:
                    fd:cb:28:95:33:7b:98:41:73:a5:3d:b4:03:8d:22:
                    0d:ba:0c:f8:f5:bb:c8:99:c5:58:1d:99:fa:bf:88:
                    3d:74:8e:f4:be:77:8d:e8:0f:39:a7:53:bc:d5:ac:
                    a8:df:70:84:4e:d0:be:65:19:5e:9a:ef:42:e7:9b:
                    48:95:0d:6f:4f:bd:fb:e7:1c:88:50:50:f7:2c:a1:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:74:D9:B4:40:AE:D8:11:69:FD:53:8F:6E:9E:A1:44:24:35:22:88
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211301.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.251.0/24
                  181.214.99.0/24
                  181.214.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:83:1f:5d:34:60:ae:8c:63:05:64:2b:bd:06:b8:d9:e7:25:
         c2:a1:64:9f:95:b2:12:c1:2f:b5:d8:77:df:c7:02:7a:a0:f3:
         2e:4d:a7:9e:e1:0a:d0:2e:1c:90:c2:dc:9b:a8:4b:d8:17:c6:
         80:a5:c8:86:1c:10:ee:8e:5c:c7:67:b5:6f:77:fa:bb:74:1d:
         52:65:92:50:5d:8d:b3:6f:05:cc:85:6a:de:3f:40:fa:99:0f:
         e0:da:eb:ce:94:fe:b3:b5:c5:b5:1a:6d:9a:55:f2:1d:ee:41:
         33:0d:b3:87:6e:65:bc:ae:40:0e:9a:e2:61:fc:86:a4:c3:07:
         91:9b:05:90:55:53:a2:34:f7:4b:f5:67:f2:55:d9:f6:b6:3f:
         7c:5f:dd:f8:73:15:71:d3:47:6f:0c:82:c1:f9:26:22:d8:85:
         e6:58:96:ec:38:3f:11:5d:e3:e4:a7:06:af:d6:4f:51:36:4a:
         c9:86:63:12:7f:50:f0:91:6e:8c:b5:40:2f:84:29:a8:75:53:
         e6:84:e4:ba:de:c9:98:76:e0:7c:f3:11:5e:b9:ff:54:d6:23:
         00:8a:cb:fe:eb:93:54:c2:3c:ca:5e:83:67:6e:9f:7d:b0:91:
         62:f0:92:32:5e:4d:b6:8b:4b:fc:17:70:0f:28:a5:01:45:6a:
         fc:a3:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org