Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13768.roa
File:                     AS13768.roa (raw, json)
Hash identifier:          aBUy3//D3+NdlzWhzDaJqt+228CIqUjvApNAt6LHdQg=
Subject key identifier:   05:16:7D:A3:AA:17:AC:C9:E4:FA:50:4D:8C:C0:92:55:18:4C:37:B7
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       387CA1E95973F3B0DD6D73C3E1F9544C300C3333
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13768.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     13768
IP address blocks:        181.215.249.0/24 maxlen: 24
                          191.96.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7c:a1:e9:59:73:f3:b0:dd:6d:73:c3:e1:f9:54:4c:30:0c:33:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=05167DA3AA17ACC9E4FA504D8CC09255184C37B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:1d:c1:a9:17:27:91:a3:a6:3e:38:37:d9:
                    74:20:a1:a9:d4:a0:a3:5c:be:13:63:c6:84:13:c7:
                    fe:59:78:9e:cb:8e:93:bc:ee:4a:ab:3c:68:e6:2b:
                    d6:b3:d3:70:63:00:3a:ea:66:e1:09:fe:fe:3a:56:
                    fb:64:15:ec:2f:bb:b0:bb:8c:a0:3c:94:c0:38:e6:
                    cc:a1:21:96:4c:08:ad:e2:19:e3:74:9a:7f:78:7a:
                    58:1d:49:88:7a:30:55:4f:f8:51:c5:07:6e:99:32:
                    2f:5f:17:07:92:34:7a:d8:cf:bb:13:42:8b:66:fa:
                    00:94:31:a9:10:ef:25:fb:3a:23:48:96:33:29:04:
                    6d:9a:57:65:33:01:d0:45:21:2f:7d:0c:f3:06:ca:
                    51:f0:2b:81:59:f9:3b:cb:84:83:14:18:d4:3a:5f:
                    49:cc:e5:7a:7f:eb:90:1c:99:75:f9:e3:e3:6f:cc:
                    42:79:05:e2:fe:d9:0b:4a:9f:2c:4e:95:f6:76:50:
                    2b:11:e7:36:46:15:e3:0c:95:09:97:01:ac:62:a7:
                    e6:b9:5d:1f:8c:c5:bc:47:bc:61:c0:40:20:d7:75:
                    65:72:7a:44:bd:85:2b:69:06:3e:0d:ff:1c:ca:0c:
                    60:6d:31:80:75:fb:01:40:b9:b3:95:88:18:ef:e6:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:7D:A3:AA:17:AC:C9:E4:FA:50:4D:8C:C0:92:55:18:4C:37:B7
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.249.0/24
                  191.96.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:ae:df:84:37:54:ba:25:bf:e3:16:02:46:e1:0b:f1:26:
         cb:37:16:e2:3e:4d:5a:b8:23:d6:31:61:00:be:8f:c5:88:c3:
         28:f4:a9:a3:1a:a8:8f:9e:b8:dc:d0:c3:69:4d:79:45:e9:a5:
         ac:e8:e7:f2:ca:80:0c:bb:28:b7:6e:ac:8a:2f:77:67:8a:a7:
         ce:a7:0f:bf:c4:bb:97:27:ba:cd:b4:99:63:cb:cb:4d:ca:bd:
         ce:33:c2:92:ff:95:2a:41:fb:37:75:e9:7b:13:a4:2d:04:5a:
         09:a5:0b:a2:1e:92:38:41:9d:06:0b:83:36:50:91:ac:e1:62:
         18:0d:55:57:9e:76:ae:f2:1d:f0:a4:20:34:6b:24:67:88:4b:
         7c:95:24:8f:d3:6d:c0:0f:be:7b:f7:c9:f0:cf:a7:3f:8b:19:
         73:99:99:a0:73:37:ee:ed:9a:31:a1:bc:2b:d7:e6:e4:cf:84:
         6c:0e:1b:76:f7:53:80:45:c6:b6:e1:c4:ec:52:b3:38:df:fa:
         9f:80:c4:97:26:95:ab:34:4c:0f:91:a2:63:ed:a2:e4:ef:fe:
         79:2e:5b:aa:e1:c1:08:2d:e2:5d:1f:2b:5e:51:9a:33:de:5b:
         67:07:48:00:38:1a:5a:ec:7d:fe:91:e8:a2:ad:c0:60:35:20:
         f4:47:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org