Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140972.roa
File:                     AS140972.roa (raw, json)
Hash identifier:          VQRvpxA1MxzxhQlPbMVvcrfxf1la9rhtETPcuFsAWX0=
Subject key identifier:   27:18:A4:E8:A4:D6:54:7C:A0:35:A8:ED:F0:FE:A5:E4:F5:96:13:14
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       347AB12E415C9836A9E647AE2FFD2C2E845711EC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140972.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     140972
IP address blocks:        181.41.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7a:b1:2e:41:5c:98:36:a9:e6:47:ae:2f:fd:2c:2e:84:57:11:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=2718A4E8A4D6547CA035A8EDF0FEA5E4F5961314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:b6:a3:a1:09:f2:ff:98:3d:e1:0b:29:b9:
                    d2:28:a5:54:b0:2b:06:6c:f4:27:ea:52:05:c7:f6:
                    83:64:70:1e:d8:c5:65:37:f5:9f:0a:cc:8a:b0:51:
                    44:1f:54:55:06:97:ce:c9:e9:bd:96:91:ae:89:6a:
                    4e:bd:1e:aa:c1:62:82:bc:ab:17:9e:c9:1b:e4:6b:
                    9a:d4:57:04:81:8b:ba:00:2c:e9:fb:d3:2d:d6:fa:
                    10:91:2a:ca:95:89:74:0a:c8:71:17:fc:4f:82:b5:
                    f9:c0:f1:77:48:62:fd:24:81:f6:24:c0:5b:1a:9e:
                    e4:65:be:f8:1b:b7:a6:bd:4d:c2:d6:45:fa:71:30:
                    50:26:6b:2d:b6:16:22:74:e1:4c:38:3c:34:23:f1:
                    21:03:1a:66:ed:8b:75:ee:bd:61:2e:39:59:96:f3:
                    fd:81:5c:e9:cf:10:d5:03:f1:f7:1a:63:88:6d:c9:
                    00:ce:56:59:82:49:01:68:bf:6f:5f:60:34:98:17:
                    43:f7:19:f5:4d:79:15:fe:5c:bc:53:1a:3b:1c:42:
                    80:79:66:6f:c5:f2:fb:17:df:e7:4f:dc:85:50:32:
                    3a:bf:8c:b3:b9:75:c8:9a:fd:6c:17:ed:09:32:79:
                    44:94:11:16:e3:d0:b0:90:26:97:a3:34:74:72:d5:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:A4:E8:A4:D6:54:7C:A0:35:A8:ED:F0:FE:A5:E4:F5:96:13:14
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140972.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:8e:63:77:29:00:d9:67:10:26:a0:76:df:ea:64:c3:f4:
         8c:a0:8c:05:ad:26:3c:73:33:42:15:37:0d:75:92:61:43:b2:
         4c:32:0b:7f:1a:bb:59:e4:e4:ac:1f:21:a3:33:bf:fc:6a:23:
         0e:48:6d:72:86:f2:de:8a:59:77:40:0f:ca:1c:11:64:66:1c:
         1c:e7:4e:ad:48:fe:f7:f5:eb:f5:21:65:a3:33:f5:43:e7:e4:
         3a:2a:78:f9:ee:dd:0e:8f:a4:a0:0c:34:19:a4:55:f5:2e:38:
         83:1d:2c:f7:e6:3b:02:8d:54:f0:83:bf:3e:d2:a0:ec:6a:c6:
         c8:aa:8e:2e:42:1a:dc:ca:32:79:ea:e1:90:6b:90:e4:91:5a:
         56:fa:ef:82:20:4b:53:71:62:3b:32:c1:45:01:56:26:4c:fa:
         13:cb:88:2b:a3:28:a3:e8:c7:7f:3a:75:96:f2:b2:7f:37:6d:
         65:fb:fb:69:db:7b:8d:93:5c:b6:a3:e5:2b:1c:0b:17:d8:57:
         05:5a:5a:b4:ed:96:47:54:f8:d1:ad:66:3b:78:7f:01:10:44:
         be:ad:92:75:fe:14:7a:6b:3c:a2:92:8a:fa:ae:d7:6b:48:a4:
         f7:6b:39:87:0c:28:08:62:55:77:37:eb:c7:b9:ef:ec:ed:23:
         85:73:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org