Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42675.roa
File:                     AS42675.roa (raw, json)
Hash identifier:          NS67gnIJZoxDCaxOAm6Z9KCJRNYH+NfYAAqZog9GLSY=
Subject key identifier:   9E:BD:8D:BF:01:EB:A5:EB:16:77:CC:B7:56:93:91:16:6F:4D:AA:67
Certificate issuer:       /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial:       1A78A6F121127C9661EB98D473D27BB45325FF5E
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42675.roa
Signing time:             Thu 28 Jul 2022 19:52:52 +0000
ROA not before:           Thu 28 Jul 2022 19:47:52 +0000
ROA not after:            Thu 27 Jul 2023 19:52:52 +0000
asID:                     42675
IP address blocks:        181.214.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:78:a6:f1:21:12:7c:96:61:eb:98:d4:73:d2:7b:b4:53:25:ff:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
        Validity
            Not Before: Jul 28 19:47:52 2022 GMT
            Not After : Jul 27 19:52:52 2023 GMT
        Subject: CN=9EBD8DBF01EBA5EB1677CCB7569391166F4DAA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d7:3e:90:e0:3d:04:6c:dc:7d:7c:c5:9a:be:
                    e9:bf:77:2f:c0:78:bf:18:9b:4c:a7:a9:02:2d:00:
                    d6:69:b1:9f:8c:15:00:8e:bb:be:56:90:fd:38:0e:
                    fe:63:cb:27:d8:85:d6:fb:e1:3c:8b:0b:1f:26:75:
                    84:42:af:19:2d:7e:4d:21:d8:9d:8c:88:40:05:e4:
                    93:ca:34:73:dd:4a:e5:35:90:45:65:53:e7:28:36:
                    7f:08:a5:f0:c6:0f:98:c2:53:84:b0:3c:0b:4a:1d:
                    7b:5b:30:c6:90:52:c9:3b:76:c6:ce:da:0f:12:c8:
                    2e:45:5f:8c:cc:3c:53:56:de:70:f0:93:63:c0:7d:
                    20:ab:86:45:4e:ef:ea:1d:de:47:58:c6:70:ba:9d:
                    7d:a3:59:c8:6c:9a:d8:17:91:86:17:07:73:ff:29:
                    3c:6f:ca:a2:04:1c:20:5b:60:09:08:84:df:00:e9:
                    0b:11:60:42:04:b4:4a:4b:16:3d:6a:02:1c:a2:5d:
                    75:c4:38:23:e1:e8:29:23:64:1f:80:0f:75:5b:47:
                    d7:4a:01:1f:51:b2:c8:8b:bb:4d:70:3a:95:57:39:
                    df:10:44:53:db:3e:9c:f5:a5:6c:27:d4:d5:ef:ae:
                    26:0e:8e:4a:67:f3:4d:37:46:2e:6c:9b:04:bb:4e:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:8D:BF:01:EB:A5:EB:16:77:CC:B7:56:93:91:16:6F:4D:AA:67
            X509v3 Authority Key Identifier:
                keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42675.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:27:5e:d1:d5:4f:39:24:da:b9:02:4a:ce:d5:b6:b7:78:63:
         2e:e9:93:0a:dc:b0:45:42:1a:71:6e:2b:91:c6:3c:0d:94:88:
         d6:49:ec:48:2c:c1:30:4c:5d:66:5b:c6:05:89:03:80:61:58:
         11:8c:b2:05:cd:15:87:95:7d:8a:4e:e3:7c:05:be:4a:32:95:
         67:88:3c:28:53:c5:17:2f:15:2b:f6:76:ed:ef:26:81:27:af:
         b5:f0:98:6f:9d:4a:57:a9:30:b0:72:a2:43:66:a3:fe:a3:1c:
         0b:2b:fd:53:ab:92:37:46:2d:c2:2a:b3:9f:9f:60:5a:83:bf:
         57:59:03:b5:a7:92:ce:dd:39:da:cd:2b:5f:de:bc:9e:96:cb:
         f5:c5:79:60:6a:3a:5b:7d:53:51:c5:82:02:7c:34:1a:13:47:
         bf:e3:ba:40:ad:b3:64:97:24:69:32:d3:d8:d3:96:79:ca:07:
         2c:2d:1b:36:04:66:d4:a6:98:2a:99:ba:a0:d2:55:c2:96:da:
         3a:ce:f1:25:14:29:04:46:6e:ab:a4:c7:f2:3d:91:b8:a1:da:
         08:19:73:32:a0:f6:c4:1b:34:40:fe:15:4c:23:fc:92:fc:d2:
         bd:bc:37:67:3c:45:ca:29:6c:a1:9d:2e:2f:55:80:35:95:4a:
         b1:f0:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org