Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212669.roa
File:                     AS212669.roa (raw, json)
Hash identifier:          oWPg6fhEeVMot5BsUcgM48pR7xZYXZDq5xtq8Itir70=
Subject key identifier:   C1:B6:37:C8:2D:FB:29:B2:FF:AD:4F:47:CD:81:91:E2:3C:93:CD:D4
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       036F510A61474F5AE5B613970DF1089EB1F7DA54
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212669.roa
Signing time:             Mon 31 Oct 2022 05:03:52 +0000
ROA not before:           Mon 31 Oct 2022 04:58:52 +0000
ROA not after:            Mon 30 Oct 2023 05:03:52 +0000
asID:                     212669
IP address blocks:        89.19.47.0/24 maxlen: 24
                          185.158.150.0/24 maxlen: 24
                          191.101.246.0/24 maxlen: 24
                          193.31.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6f:51:0a:61:47:4f:5a:e5:b6:13:97:0d:f1:08:9e:b1:f7:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 31 04:58:52 2022 GMT
            Not After : Oct 30 05:03:52 2023 GMT
        Subject: CN=C1B637C82DFB29B2FFAD4F47CD8191E23C93CDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:fa:c6:1c:3b:67:c7:5c:a8:91:c0:ed:c1:
                    dc:64:cd:9d:f6:f4:21:d1:d9:ef:84:19:b1:5e:b2:
                    d8:3b:e5:f6:06:f0:11:86:dd:b0:cd:cd:91:1b:a6:
                    cc:fc:03:d3:c6:48:a5:2a:82:f6:e2:c0:59:3e:6a:
                    63:74:b8:2e:63:c9:df:06:d1:17:33:f3:f6:0f:5f:
                    9a:82:8c:7e:cc:ec:6e:61:a5:db:06:50:6c:fc:6a:
                    f1:24:1b:68:44:8a:47:1a:42:e9:bb:60:9a:ac:1a:
                    65:6a:34:5f:01:31:65:ad:9e:f5:61:8d:02:ca:d5:
                    a4:bd:30:b9:72:7f:b0:50:bd:00:5a:6d:a6:5e:57:
                    a0:dc:f4:cd:18:47:17:5c:cf:12:25:8c:26:c2:2c:
                    e0:ce:82:68:56:cb:44:8d:10:1b:0d:64:09:52:d8:
                    36:77:f5:c6:c7:c0:c9:2f:72:48:fd:29:a3:32:a7:
                    0a:da:aa:fb:3e:48:36:b9:57:c1:52:12:7c:69:c4:
                    b8:70:7a:92:dd:ee:db:73:1a:b2:47:35:d2:e8:81:
                    b0:7a:c4:8d:73:4c:22:92:7b:f7:57:1e:08:ad:38:
                    c8:6b:67:e3:8c:a7:4f:6d:0e:2f:bc:72:a5:73:40:
                    23:7a:1a:47:4f:3c:ea:43:3f:2a:10:b8:e5:64:e5:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:37:C8:2D:FB:29:B2:FF:AD:4F:47:CD:81:91:E2:3C:93:CD:D4
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.19.47.0/24
                  185.158.150.0/24
                  191.101.246.0/24
                  193.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:c0:08:f5:77:d2:d8:15:17:ab:8b:ad:59:eb:29:c7:4e:81:
         0a:79:a8:b9:cd:e7:6a:93:7f:eb:57:41:e7:ba:d6:ba:06:ee:
         6f:4a:f7:96:ee:b8:02:1e:3f:8b:f2:a0:45:6d:aa:43:ed:e4:
         b7:95:65:de:3c:28:bd:5f:2b:2c:9c:ab:77:41:87:4e:16:c1:
         8b:53:28:09:66:6a:4f:4e:4e:20:c3:18:00:cd:d0:23:d1:44:
         55:36:d0:6f:dc:22:fc:f3:e5:cf:7d:49:53:13:d8:20:e6:c3:
         ec:f8:61:37:fa:c4:46:be:ba:97:fd:75:be:62:9f:01:ad:0e:
         11:19:97:ff:f9:7b:cd:63:45:14:f6:73:c6:b0:f7:94:2c:4f:
         1a:77:84:ba:e5:c9:07:45:57:12:55:e8:37:65:c5:02:f1:5e:
         f3:1b:31:c2:af:15:16:f9:8c:8e:90:2f:7f:fb:57:c6:8a:61:
         a0:b9:14:01:14:d8:4b:ff:6d:2c:62:eb:4e:24:57:bf:e6:c8:
         83:8c:45:65:92:64:91:25:0f:82:7b:72:1f:84:87:b4:9f:0d:
         db:48:34:f9:4c:c0:2f:83:cc:58:d3:dd:42:8d:c4:1a:d1:1c:
         49:91:ff:a1:54:71:2e:df:2b:2f:cf:e2:51:7d:47:14:62:4c:
         aa:41:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org