Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS197071.roa
File:                     AS197071.roa (raw, json)
Hash identifier:          +ohGS704ZNm3l1zAPpEyFBTR6aFbtWZHvO2e49utPx0=
Subject key identifier:   DB:E4:0E:AF:89:71:3A:E4:18:3D:9F:DE:29:D9:35:10:77:97:36:21
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7AE530D12A575D28548569B10CF4314F1DFE9030
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS197071.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     197071
IP address blocks:        191.101.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e5:30:d1:2a:57:5d:28:54:85:69:b1:0c:f4:31:4f:1d:fe:90:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=DBE40EAF89713AE4183D9FDE29D9351077973621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:4e:3f:93:0d:2c:c2:5c:89:48:b0:3d:7a:
                    39:9f:82:6d:52:59:95:d9:1b:83:91:80:41:db:1d:
                    c8:0d:f3:7e:8b:66:b8:9b:cd:88:a8:68:5f:03:b0:
                    c6:fd:6e:0b:d1:fe:5a:a5:bb:bc:41:c9:88:ed:43:
                    9b:f0:8b:2a:17:9f:39:03:35:b8:8f:ff:64:f6:6b:
                    34:ed:bc:03:bf:3c:3b:db:e0:a2:fb:8e:2c:0a:de:
                    c0:fd:b5:bb:55:10:90:9f:d3:30:7b:06:10:5e:c5:
                    b3:ed:8d:da:c2:77:0f:a8:02:9f:e6:84:af:5d:8c:
                    0a:3c:31:40:94:f9:ab:a0:f9:26:89:64:64:82:dc:
                    06:3d:8e:56:23:b0:4f:ae:4f:9e:98:26:c9:30:68:
                    2b:33:65:d3:50:a4:c3:bc:21:50:79:20:39:de:38:
                    fe:53:da:14:f2:1c:95:78:de:c7:9b:8a:13:6f:37:
                    90:04:b4:6e:58:42:5d:9b:c6:9e:96:85:06:4e:48:
                    d6:a5:cd:0c:23:14:77:f1:bd:ef:dd:2a:96:2c:82:
                    a6:3f:20:fb:5e:6d:66:5d:a6:4c:f5:2f:92:b2:f7:
                    d0:5e:4f:e8:98:2c:6c:d6:60:94:2c:fa:8b:a1:58:
                    eb:8b:99:ab:fe:e8:8a:72:8a:ba:b4:6e:90:51:c1:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:0E:AF:89:71:3A:E4:18:3D:9F:DE:29:D9:35:10:77:97:36:21
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS197071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:81:c5:25:26:50:a7:d4:37:00:bf:9b:6a:d8:e3:00:03:55:
         cf:7d:36:f7:22:46:e8:74:aa:29:ef:a5:d0:72:3f:00:34:5e:
         8e:81:cd:a8:d1:9c:38:b6:6b:38:36:11:ea:9e:3f:cc:cc:fb:
         19:06:97:a9:0f:e2:9d:63:b6:f6:1b:ac:1f:f3:4b:54:0a:6e:
         35:06:8f:29:5b:5c:51:dd:90:d0:eb:09:50:23:c5:58:a2:f3:
         78:12:41:fa:5f:5c:fe:31:b2:30:7d:f9:54:32:b7:fa:59:2d:
         8a:0b:61:82:87:23:f4:50:a0:df:31:c7:99:f7:d4:27:c6:26:
         a6:cd:e4:d4:ba:a2:11:f4:0f:1c:d1:48:bc:23:7c:5b:fd:2f:
         72:98:c3:9b:b7:2c:99:a4:f0:fa:9b:40:2b:7a:9a:dc:d4:9d:
         d3:60:b4:00:22:d0:2c:32:10:15:79:68:01:cb:6d:66:d8:1b:
         49:58:22:b8:d5:6d:f9:35:37:56:65:b4:6e:55:b8:a6:02:7c:
         a5:ee:c8:6e:02:14:a7:fe:a1:ec:ca:b6:70:32:14:39:f0:29:
         39:4f:74:67:cd:68:c8:cd:fb:d7:63:c2:8c:a1:3b:96:3e:0f:
         d7:18:3d:15:dc:21:b2:b7:16:94:27:ea:04:31:a8:d3:52:1d:
         37:56:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org