Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29066.roa
File:                     AS29066.roa (raw, json)
Hash identifier:          qxU57QTOri63PXYEXMAnND+WViHUIzM1HNEUWmWrXbM=
Subject key identifier:   66:77:45:52:60:71:88:C3:F3:77:AC:6B:C7:90:61:03:57:76:1F:87
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3265952A01077C3A0425AA51B40AFF7F06EE4E89
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29066.roa
Signing time:             Sat 27 Aug 2022 09:50:18 +0000
ROA not before:           Sat 27 Aug 2022 09:45:18 +0000
ROA not after:            Sat 26 Aug 2023 09:50:18 +0000
asID:                     29066
IP address blocks:        179.61.210.0/24 maxlen: 24
                          181.41.205.0/24 maxlen: 24
                          191.96.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:95:2a:01:07:7c:3a:04:25:aa:51:b4:0a:ff:7f:06:ee:4e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:18 2022 GMT
            Not After : Aug 26 09:50:18 2023 GMT
        Subject: CN=66774552607188C3F377AC6BC790610357761F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:7c:e5:fe:8a:b2:1b:7e:b7:a8:ef:e4:44:
                    26:7b:c0:ae:47:a5:b3:06:5e:94:eb:6f:6e:14:31:
                    10:e8:bd:8b:f2:7a:0b:9a:f2:cb:bc:23:fd:70:c3:
                    8b:2f:c4:fb:76:dc:d0:ab:4f:03:13:8a:55:d3:b1:
                    aa:49:76:50:27:0f:15:af:12:7f:c1:5b:7a:56:b9:
                    be:23:03:dd:e7:0a:99:ca:2a:00:87:20:e1:2b:9e:
                    73:6a:27:e7:98:a0:19:7a:58:4e:28:c8:36:45:ad:
                    96:09:2c:57:82:ca:d2:be:b4:d2:00:bf:38:1f:a5:
                    77:c6:ba:e2:95:94:b2:20:81:9d:4c:16:fc:c6:24:
                    2b:5e:78:b3:9f:c6:40:02:e8:3f:6f:8d:2c:a7:f9:
                    e1:b2:55:96:86:30:cc:8f:f4:7f:13:9e:40:f1:8e:
                    c6:ab:d8:b9:a1:a0:66:5d:54:1d:a1:61:bb:a6:29:
                    5f:04:69:45:a1:87:64:22:d0:e8:2b:d0:68:b3:27:
                    5d:03:9a:85:3e:8a:dd:40:ab:06:4b:7c:13:a5:d7:
                    12:50:e2:8e:4e:10:63:ba:6c:5d:16:39:35:94:fa:
                    77:ec:b8:77:fd:5c:24:9d:af:25:6c:8d:a2:61:e5:
                    16:8f:1f:97:3b:a9:f6:22:09:38:63:06:5a:55:a7:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:45:52:60:71:88:C3:F3:77:AC:6B:C7:90:61:03:57:76:1F:87
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29066.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.210.0/24
                  181.41.205.0/24
                  191.96.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:28:ae:ae:c6:ab:4e:20:22:b0:99:cf:4f:59:a9:e6:7f:
         28:5a:ca:7b:75:6a:72:31:ef:66:9f:1a:a4:76:c7:92:df:a4:
         6c:bd:e8:c8:7a:e5:2e:c6:93:20:6f:a5:ab:ae:6b:de:74:4d:
         49:cc:8a:a6:a3:3e:3d:55:64:f8:21:51:1b:6f:54:58:e6:b8:
         e4:53:e1:0f:15:46:cf:93:68:5c:c9:ea:46:f4:b0:a8:c2:01:
         c7:b0:dc:b3:1a:ac:12:69:65:17:07:f9:fc:35:d2:65:6f:5a:
         5e:37:97:e8:75:cc:e2:ce:8b:63:34:bf:24:00:d3:0b:a2:7c:
         af:eb:3e:25:da:d3:74:f3:16:c2:15:b7:b0:f9:62:96:15:e9:
         08:39:ad:83:81:6e:9e:8a:1e:c4:9a:98:29:11:64:08:b4:3b:
         c7:f8:60:ac:91:2a:c4:6c:49:56:f8:eb:2a:04:4b:c8:95:8c:
         5e:ed:23:7a:37:6e:47:4e:aa:58:98:51:21:2b:cd:6a:5d:83:
         92:c3:45:ac:3e:13:87:61:bd:2a:fc:16:78:28:49:07:a7:de:
         60:0c:55:3e:30:8c:93:05:07:92:aa:09:c7:49:1e:0d:72:c7:
         21:8e:6f:d2:0a:e3:b4:e8:78:0c:02:53:75:f3:40:27:08:b9:
         79:22:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org