Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139648.roa
File:                     AS139648.roa (raw, json)
Hash identifier:          bv45E0HQ3wwH6qWy+FLcm7Q+eJx2NF1lWc6u96L5Hko=
Subject key identifier:   39:7E:5E:F0:ED:27:5B:CE:40:EA:89:C2:89:E5:5B:FF:D2:C6:1E:97
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       42CBF209737305C8FCFE6F723D76C3D19A1B0815
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139648.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     139648
IP address blocks:        45.89.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:f2:09:73:73:05:c8:fc:fe:6f:72:3d:76:c3:d1:9a:1b:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=397E5EF0ED275BCE40EA89C289E55BFFD2C61E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:7d:8d:51:bd:b3:30:7d:08:68:ad:5e:dd:
                    80:d0:ce:e1:b7:d4:e3:d9:97:e4:60:00:78:2d:38:
                    40:ea:4b:35:bb:82:02:0d:dc:7f:ab:f7:69:50:df:
                    fa:24:1c:4f:dd:53:7f:33:32:8e:73:0a:02:89:07:
                    dd:58:7e:43:5d:19:44:42:9f:01:d6:89:36:3b:1f:
                    7f:5c:a0:57:72:e5:b7:ad:db:af:6b:9c:63:11:6a:
                    55:ee:9b:ed:f3:9d:64:23:8c:63:a6:88:2b:f2:91:
                    ce:37:6b:4f:40:34:fc:a8:0d:2a:76:22:da:09:7f:
                    13:86:9e:6b:6c:e7:5f:13:79:a0:d9:ef:f2:76:9c:
                    61:4b:e6:ed:be:78:30:f0:3c:62:86:ed:52:5b:d2:
                    b1:cc:f7:be:59:be:84:be:ef:51:1a:60:68:21:73:
                    27:fc:60:79:a1:73:74:f7:a3:a6:fd:aa:2c:53:c7:
                    3b:5c:2f:30:41:be:0c:2c:3d:ed:54:cf:2c:ef:ac:
                    16:dd:6d:5b:10:28:a6:21:c5:db:6b:f7:62:1c:9a:
                    96:f9:3d:99:bb:74:63:9e:f1:46:2d:db:a1:aa:a4:
                    49:69:85:17:30:93:a6:0c:b3:0e:42:10:99:c6:e0:
                    d5:0a:d4:2f:ab:11:c9:14:bb:fd:b3:e3:85:0c:a1:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7E:5E:F0:ED:27:5B:CE:40:EA:89:C2:89:E5:5B:FF:D2:C6:1E:97
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS139648.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:66:8b:c5:da:d7:e4:27:3f:c4:8d:7a:fc:e0:c9:ac:63:
         6c:07:39:53:97:46:f0:12:6d:e3:1e:0a:be:ef:75:a7:53:11:
         f4:4e:08:34:92:17:18:eb:22:cc:c8:6e:40:f8:d8:fc:b3:1a:
         06:8b:77:37:5e:4f:40:ec:7b:8e:c7:75:a6:b3:97:e9:b6:d0:
         04:20:72:86:43:f0:97:28:2b:6a:9f:11:85:6d:01:29:40:9f:
         c3:7b:d3:03:f8:98:22:f9:17:29:0f:b8:4d:dc:a5:a9:5c:f4:
         3d:7e:03:64:6f:dc:ea:11:c2:26:1b:16:2c:be:7d:70:e5:dd:
         79:0c:ce:a6:66:c0:81:8e:58:51:d7:26:2f:f0:51:f6:4e:78:
         59:d4:48:17:0c:98:6e:82:5c:cc:1b:9a:4c:05:75:78:02:cd:
         3c:2c:97:39:71:d6:39:5e:90:cd:1f:59:f1:78:0e:de:75:a4:
         90:01:f5:f1:25:ef:b3:65:48:71:a7:ef:c2:4e:b0:bd:0b:08:
         9a:fa:6c:60:6c:66:3b:9e:2e:80:b5:35:18:1c:b3:6d:b9:fe:
         0a:33:1c:95:e1:f7:1a:a4:c8:0e:ef:cb:99:d4:60:4d:3e:0f:
         dc:d5:47:ca:ad:d2:02:4f:48:d6:9f:90:04:41:3c:a7:dc:8a:
         9f:3a:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org