Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS25098.roa
File:                     AS25098.roa (raw, json)
Hash identifier:          O/qLXC2Lv51Auy5Jt/1jnBqBKPjv6zToVOnxYfzMg/c=
Subject key identifier:   66:5B:57:D2:C1:C9:E3:37:7E:6B:4E:C8:4E:90:72:73:D3:5B:C3:EA
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       2D4B6995A139161EA90875D64727FE94C80E811D
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS25098.roa
Signing time:             Tue 14 Jun 2022 06:43:42 +0000
ROA not before:           Tue 14 Jun 2022 06:38:42 +0000
ROA not after:            Tue 13 Jun 2023 06:43:42 +0000
asID:                     25098
IP address blocks:        191.96.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4b:69:95:a1:39:16:1e:a9:08:75:d6:47:27:fe:94:c8:0e:81:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jun 14 06:38:42 2022 GMT
            Not After : Jun 13 06:43:42 2023 GMT
        Subject: CN=665B57D2C1C9E3377E6B4EC84E907273D35BC3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:8c:18:59:d7:8c:b4:94:36:39:b3:fb:4a:
                    5b:23:59:18:2e:db:44:aa:94:87:20:d4:8c:94:37:
                    72:85:9c:55:cd:42:b1:b5:14:0d:72:52:a4:aa:13:
                    d1:d7:39:5c:b5:f5:99:16:75:8c:88:a5:4e:f9:e3:
                    59:b5:11:7d:ce:03:1b:74:72:26:80:bf:0c:d8:3a:
                    71:c4:fd:14:1a:76:0f:9e:0f:08:99:8d:62:7b:04:
                    66:28:bd:08:2d:eb:8d:20:43:81:24:32:6d:d9:4a:
                    c2:b7:7d:f0:fb:0c:7b:00:fe:f5:e6:bd:d7:72:ec:
                    96:7f:74:57:e6:95:ca:8e:32:9b:a8:41:bb:21:d6:
                    97:f6:81:df:0a:ff:42:f7:99:3f:87:71:ad:c6:8e:
                    d1:50:1a:56:dc:15:9f:97:65:25:54:cd:51:51:ce:
                    e0:e0:04:cf:91:e6:eb:50:9a:44:01:df:31:50:38:
                    cf:59:03:16:83:40:12:67:82:2d:68:60:69:a4:78:
                    7e:46:fb:03:6d:7e:a4:c6:32:13:b4:c9:c3:78:2d:
                    85:ab:f8:c6:38:8f:be:1c:b4:b2:f2:0a:bf:6e:48:
                    d7:7d:55:71:ba:8e:3e:0a:d9:d2:bb:26:a5:96:72:
                    85:26:95:40:35:c2:8f:79:f4:16:7c:20:b0:c9:f9:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:57:D2:C1:C9:E3:37:7E:6B:4E:C8:4E:90:72:73:D3:5B:C3:EA
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS25098.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:84:2c:79:da:fc:4c:68:80:af:e1:d7:45:20:7a:bf:26:
         c0:e3:84:6d:da:1c:53:ce:38:c8:80:d1:ab:22:55:93:cc:2d:
         5e:70:c2:63:57:6a:23:a8:4c:55:22:16:e9:d7:9b:9b:a9:c9:
         53:21:61:d4:c1:9b:86:9a:d9:ba:5b:02:a1:9b:29:b7:85:19:
         12:32:e2:33:2a:6b:5e:67:77:49:46:f1:d4:a1:36:cf:20:f5:
         72:c5:ec:ac:d9:50:3c:11:e2:b2:00:7f:b5:2e:44:62:b4:64:
         81:9b:71:36:e6:7f:e9:bb:ac:02:a4:62:d2:c8:a6:c9:7a:18:
         b0:21:b5:d7:fc:69:7b:f4:f5:fd:fb:40:c7:9b:5b:47:11:ed:
         1e:c8:6d:5b:b1:ac:0a:b2:a3:6f:2e:c9:7b:f4:04:02:76:ec:
         0d:6f:d1:22:12:77:38:75:34:ab:59:39:06:8c:c9:ae:6a:12:
         83:eb:2e:e6:e7:4f:3c:42:36:2c:76:74:66:be:58:9a:0e:44:
         9d:42:bb:22:a8:e0:c4:54:7d:c3:1d:90:d3:de:01:f4:05:b3:
         0c:cc:0f:b7:55:ca:a2:fd:e0:40:37:94:13:9b:24:34:08:10:
         e6:13:fa:c9:7e:ae:27:08:af:69:df:3b:6a:8a:25:1b:31:ef:
         fc:59:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org