Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272148.roa
File:                     AS272148.roa (raw, json)
Hash identifier:          aiBM+xoJAmfnjs8P9nL7JtpxyKRDI/M1ipzQUbtlnDg=
Subject key identifier:   CB:63:A3:C7:19:AF:5A:F9:2E:A2:96:CC:2A:76:19:0A:25:F6:44:2A
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0E127E9F96C711DC3234EDFD249EA44C243FAC1D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272148.roa
Signing time:             Tue 06 Sep 2022 07:39:01 +0000
ROA not before:           Tue 06 Sep 2022 07:34:01 +0000
ROA not after:            Tue 05 Sep 2023 07:39:01 +0000
asID:                     272148
IP address blocks:        181.214.29.0/24 maxlen: 24
                          191.101.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:12:7e:9f:96:c7:11:dc:32:34:ed:fd:24:9e:a4:4c:24:3f:ac:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Sep  6 07:34:01 2022 GMT
            Not After : Sep  5 07:39:01 2023 GMT
        Subject: CN=CB63A3C719AF5AF92EA296CC2A76190A25F6442A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:7b:d0:22:57:f4:cf:6e:8d:2b:1d:47:47:
                    7d:91:31:19:d2:d3:e2:f6:fc:bf:3d:1f:f1:2f:09:
                    55:6d:3b:97:81:9e:1f:b8:31:e4:12:70:9b:79:f1:
                    aa:6f:c8:37:5c:d3:31:d9:66:69:7b:2f:2a:95:3a:
                    98:25:a2:b7:5f:93:cf:83:c6:c3:bc:41:7c:66:1f:
                    90:05:6d:68:e9:94:fc:fe:24:4e:39:38:20:51:0c:
                    1c:5f:be:1c:ea:6a:7c:0c:e8:3d:f7:43:31:40:3f:
                    4a:99:bb:fb:a9:65:c2:8f:a5:8a:dc:7f:87:25:f1:
                    22:2c:28:c0:2c:aa:66:dd:41:10:a0:17:d0:76:e2:
                    ae:c7:67:05:0f:5e:68:87:19:e1:c5:56:61:6c:2c:
                    75:fe:3e:4e:16:4e:f1:6b:b3:3a:a7:37:07:c9:79:
                    16:cf:ba:de:2e:88:22:f4:a5:61:71:be:b4:f0:2c:
                    b3:61:fd:ab:99:ab:4b:a8:0e:3e:0f:bd:51:45:ac:
                    26:3c:69:df:d8:cf:93:5d:c8:c0:47:a0:76:02:fe:
                    5f:17:28:52:80:c8:16:9c:b2:c4:c8:35:d5:cf:09:
                    87:b0:aa:a3:f0:f9:8b:c2:7c:99:63:e8:0f:3e:3f:
                    87:ec:75:17:30:d2:cb:14:62:34:b0:3f:20:35:ac:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:A3:C7:19:AF:5A:F9:2E:A2:96:CC:2A:76:19:0A:25:F6:44:2A
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272148.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.29.0/24
                  191.101.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:4c:23:60:f6:ae:a9:75:98:ef:fd:8a:f7:44:81:42:a8:
         3f:cf:23:67:5c:de:19:dc:ba:11:15:f6:6f:c8:5e:50:23:5c:
         7f:d6:f9:09:90:cb:1c:20:91:80:f5:fd:15:be:86:8c:88:e1:
         cb:5a:11:49:d0:1d:b9:85:c2:d2:05:80:52:b0:67:1e:42:50:
         9e:bf:13:ba:32:a3:f9:68:c8:42:27:44:aa:7e:bf:80:70:94:
         43:a5:26:2d:76:3c:11:57:7d:6d:31:51:71:5d:c2:48:35:ea:
         6e:9e:9d:9d:4f:5d:e1:e5:60:bd:ed:b8:4d:b3:8a:99:c7:21:
         47:44:2c:15:49:74:0d:54:71:73:e7:39:16:2d:83:6d:07:51:
         35:67:ff:2a:17:83:1f:32:17:cf:eb:44:7b:aa:77:75:fe:8c:
         cd:1f:6c:1b:96:10:98:97:fe:c4:8b:b2:07:59:2e:34:02:9c:
         f7:86:e4:09:1e:04:d5:1f:db:51:72:ce:24:d1:04:d4:87:46:
         7f:b9:b9:1e:5a:b9:e8:b5:74:6f:c4:2b:5c:97:1a:cb:d1:a6:
         e8:ba:71:f4:78:ca:38:ee:b8:d7:08:90:43:c8:90:3f:4e:ae:
         66:91:bb:96:da:d7:3f:f4:82:99:04:e8:2f:85:31:62:6e:96:
         d0:01:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org