Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS23422.roa
File:                     AS23422.roa (raw, json)
Hash identifier:          Tp4n4JbgnP8dzjfcmrK9uB9mkPNxrg49fWkU0Tp80AQ=
Subject key identifier:   EF:68:00:8D:4C:BA:21:DC:CA:22:34:66:28:B3:F3:2A:BF:D1:B8:22
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4FE7FF52ADA0991ABB651CE864E1AFE6AC83F446
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS23422.roa
Signing time:             Sat 27 Aug 2022 09:42:26 +0000
ROA not before:           Sat 27 Aug 2022 09:37:26 +0000
ROA not after:            Sat 26 Aug 2023 09:42:26 +0000
asID:                     23422
IP address blocks:        191.96.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:ff:52:ad:a0:99:1a:bb:65:1c:e8:64:e1:af:e6:ac:83:f4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:26 2022 GMT
            Not After : Aug 26 09:42:26 2023 GMT
        Subject: CN=EF68008D4CBA21DCCA22346628B3F32ABFD1B822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:90:97:17:95:75:bb:4e:63:b2:08:97:ca:3d:
                    e6:cb:b1:64:ac:9a:bb:44:0a:54:a1:04:46:b4:3e:
                    4f:2c:c4:bd:e2:c1:84:70:e9:c1:f1:77:6b:32:e2:
                    cb:97:8a:12:2f:54:ad:35:6c:0a:c7:81:50:99:43:
                    b6:d5:84:f4:92:07:34:a2:a1:cb:da:79:d8:e7:4d:
                    a8:a7:53:59:8e:f8:b7:5a:28:27:76:3c:b8:9c:f0:
                    05:7f:10:cc:d5:7a:ad:6b:7c:3d:e1:be:60:92:f7:
                    82:21:c1:fa:1b:35:0a:32:58:5f:6c:3f:e6:7f:66:
                    0a:b1:04:18:2b:58:d3:31:d0:65:e4:a2:ba:34:ac:
                    bd:24:51:4c:07:d8:64:07:40:0f:00:b1:e6:1e:fe:
                    27:4a:27:94:25:42:df:d5:3b:39:05:ba:32:b5:02:
                    f7:44:a3:f7:8d:9c:0e:73:c0:dc:a2:c4:94:98:4c:
                    70:24:5f:f3:ee:48:14:bb:b9:17:73:6c:0c:e2:ae:
                    67:ca:58:3f:65:45:39:22:db:38:5c:cf:0c:0e:b4:
                    03:d3:39:33:68:ea:ce:39:e0:6e:94:7f:16:43:14:
                    39:c6:50:bb:d7:17:12:ae:7f:1b:4e:d1:0c:d1:3f:
                    52:73:22:7c:8d:77:47:74:b1:41:85:b4:17:14:36:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:00:8D:4C:BA:21:DC:CA:22:34:66:28:B3:F3:2A:BF:D1:B8:22
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS23422.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:be:21:3a:e7:cf:50:21:4c:99:fa:66:0d:a1:3c:57:0b:f6:
         04:11:68:4b:06:8c:04:7f:2c:74:85:f2:dc:b6:82:f6:36:7b:
         7f:aa:14:22:82:66:cb:57:c5:ab:9a:d1:a0:69:73:d2:9b:cd:
         a6:3d:b6:46:86:f7:cf:a8:76:df:c4:9b:9f:81:33:96:3d:b2:
         37:0e:80:25:7f:03:75:5d:af:c7:e4:78:2d:f0:d4:db:93:30:
         ba:5b:94:eb:a7:73:77:3b:5a:20:0f:9d:8d:56:0e:42:86:f5:
         13:b0:1d:7d:82:43:02:7c:46:5b:ef:b0:f2:dd:7b:40:d0:bd:
         04:e9:38:87:a3:da:87:23:a4:2b:cf:26:dd:c4:71:05:7e:81:
         f9:19:80:cc:69:af:45:c3:0f:11:e1:f7:e6:6e:d3:3a:50:5d:
         67:db:6b:74:4f:42:f5:15:1b:5c:fc:8d:d4:7a:1b:13:42:aa:
         c2:02:e1:6b:e8:6a:f8:b7:02:5c:3e:89:50:13:d7:3b:bc:5b:
         c2:5b:0c:a2:0a:b5:53:af:8c:a0:ed:b2:fb:85:b9:57:2b:b3:
         ee:60:0d:46:0b:dc:f6:01:ec:e2:e0:61:5b:1d:15:51:af:ed:
         5d:6e:15:e4:eb:69:5b:03:a1:12:71:a3:aa:84:4f:5e:cc:c4:
         e9:c6:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org