Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS398464.roa
File:                     AS398464.roa (raw, json)
Hash identifier:          ZAXlBZn+JATixhXFFcWhsqIbFC6UdYXA7AtiRxEEX/E=
Subject key identifier:   C1:0D:A6:26:7A:81:8C:1B:E1:7F:F5:E6:E9:B3:EC:96:3D:6C:06:F3
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       494B67A7AACCF817CB64C0DB1B347A13FB4FBC60
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS398464.roa
Signing time:             Sat 26 Nov 2022 00:00:52 +0000
ROA not before:           Fri 25 Nov 2022 23:55:52 +0000
ROA not after:            Sat 25 Nov 2023 00:00:52 +0000
asID:                     398464
IP address blocks:        181.214.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:67:a7:aa:cc:f8:17:cb:64:c0:db:1b:34:7a:13:fb:4f:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 23:55:52 2022 GMT
            Not After : Nov 25 00:00:52 2023 GMT
        Subject: CN=C10DA6267A818C1BE17FF5E6E9B3EC963D6C06F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:f3:44:f9:c5:d3:d4:33:6b:e0:3f:01:6c:
                    8a:c3:b7:f3:03:97:a8:9f:0b:24:7c:cb:34:a4:dc:
                    18:ab:0f:8a:16:db:9a:d7:78:61:ba:24:dc:0f:87:
                    0d:e8:d3:ea:d3:fb:51:76:be:43:44:e0:4f:75:93:
                    b4:3c:a9:02:64:ae:1c:fd:b8:18:3c:a3:e8:9b:ec:
                    e9:9c:ca:6f:bf:77:40:a1:fb:f0:cd:c0:1f:98:1f:
                    d9:d3:e8:a5:03:da:65:b4:c4:48:cf:bb:e7:33:f9:
                    06:3c:6e:b1:21:bc:87:13:5d:46:ba:e7:36:0d:a7:
                    98:18:ad:85:bc:1b:55:17:9e:2b:c5:99:fc:18:d5:
                    2b:3e:b6:a6:57:0e:80:b9:7c:e3:3c:f0:f5:0f:cc:
                    02:8f:ad:be:a5:4b:e4:ba:04:10:9f:43:eb:98:96:
                    c9:4e:d4:11:19:91:23:70:a5:85:c7:01:26:60:7c:
                    f5:22:e3:57:d1:ca:73:40:d8:2f:b7:cc:97:00:85:
                    94:f2:10:a8:e7:98:41:59:61:23:73:62:66:ef:cf:
                    12:b0:28:2b:c1:99:3e:f9:30:0f:4d:a0:86:63:f8:
                    d4:f6:ed:06:df:2a:08:a8:c1:1c:dd:0c:9c:64:ff:
                    c2:c9:e5:bd:69:1d:db:c7:a3:be:2b:61:2d:00:7d:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:A6:26:7A:81:8C:1B:E1:7F:F5:E6:E9:B3:EC:96:3D:6C:06:F3
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS398464.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:72:69:ec:64:04:02:b1:8e:2a:d9:f9:98:4a:d3:7c:e1:7e:
         a1:7f:26:f1:b4:f7:e1:26:eb:fa:47:2f:aa:2e:d3:c2:ec:e9:
         fc:1e:28:4c:40:89:fb:a1:4f:9d:21:51:d4:bd:27:ea:2a:45:
         ad:dc:84:df:e9:01:da:75:3c:72:66:60:6b:c2:7d:3c:b8:46:
         81:27:ab:92:76:18:8f:bd:e8:68:7a:7b:e1:50:de:cb:87:e3:
         ea:55:aa:b7:61:98:6b:38:9d:df:82:29:3c:2f:2c:85:90:ca:
         59:0e:f2:1b:4f:7d:5f:17:3f:76:3a:c4:42:67:3b:8c:5d:66:
         e3:5e:5b:a9:ca:00:73:d2:98:b1:5b:cd:e1:50:23:5d:ad:9e:
         17:28:c9:4a:62:6c:d6:4e:73:38:b8:f0:24:4e:31:b7:4b:7e:
         4c:18:80:2d:42:90:b6:64:db:73:f1:69:ce:44:0a:35:86:a9:
         32:4c:b6:c5:94:ec:9b:4b:ea:32:9f:16:99:8f:5c:ab:7c:29:
         ab:b8:fd:df:17:4e:93:52:8d:32:d4:ec:e2:da:65:62:0e:30:
         a0:b5:65:a5:08:dd:23:c9:4f:55:b6:72:99:67:ba:a7:bd:2f:
         9a:ee:5d:12:1a:b4:e2:0a:79:62:9e:01:a2:8c:b1:f8:22:aa:
         a8:5b:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org