Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS200181.roa
File:                     AS200181.roa (raw, json)
Hash identifier:          c+TFc5fEdQ7Oj9QRHK7+vCzLzLTlYE1gfSH020yB5wc=
Subject key identifier:   D3:64:01:C4:12:09:EF:8D:FA:E6:A5:84:DA:C6:6C:E2:58:AA:4F:86
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       32253CEA1A927E05DE1D65E9F1E491A14A491CCE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS200181.roa
Signing time:             Mon 30 Jan 2023 10:11:36 +0000
ROA not before:           Mon 30 Jan 2023 10:06:36 +0000
ROA not after:            Mon 29 Jan 2024 10:11:36 +0000
asID:                     200181
IP address blocks:        181.214.50.0/24 maxlen: 24
                          185.135.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:3c:ea:1a:92:7e:05:de:1d:65:e9:f1:e4:91:a1:4a:49:1c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 30 10:06:36 2023 GMT
            Not After : Jan 29 10:11:36 2024 GMT
        Subject: CN=D36401C41209EF8DFAE6A584DAC66CE258AA4F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:2d:6c:06:9d:bc:eb:87:d5:97:4b:7a:9d:
                    2c:8f:a6:56:6f:f2:b7:9e:87:fc:11:98:18:0d:23:
                    ee:cf:fd:5f:a2:61:77:1d:1c:b0:0c:51:89:0c:79:
                    82:a8:85:87:c4:dc:aa:c2:e4:ae:a4:2e:3c:28:42:
                    dd:07:61:c3:a4:45:fd:f4:04:13:52:f0:f9:6a:1d:
                    5d:9f:87:e5:24:34:58:db:0b:cf:d8:d9:c8:15:e6:
                    f1:e6:fd:2c:96:30:53:d0:39:de:42:18:ad:d9:7d:
                    b9:b7:53:09:68:6c:d5:1c:b4:de:10:aa:08:bb:c7:
                    71:e1:30:52:9b:67:9b:d4:cd:cc:e1:77:dd:42:37:
                    70:2a:e1:0e:af:af:c9:64:bd:e7:a8:1c:d8:58:0b:
                    fd:5c:8b:9a:4b:8c:c1:5d:f2:1b:f7:84:94:a1:0d:
                    b9:cf:5f:11:84:68:d3:3a:b2:28:3a:42:76:68:2a:
                    f8:4b:dd:c9:f3:89:f5:cb:b6:54:a9:fc:c4:fb:8d:
                    7c:7e:68:ff:03:79:fe:a4:e2:00:79:71:61:04:bb:
                    f0:f1:22:22:d0:fb:22:81:84:77:fe:28:5c:02:1d:
                    ef:02:f8:2f:c7:23:97:3d:18:1b:41:1f:12:1c:a0:
                    50:be:5f:be:89:1d:70:f3:23:ec:62:2a:58:bf:c1:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:01:C4:12:09:EF:8D:FA:E6:A5:84:DA:C6:6C:E2:58:AA:4F:86
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS200181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.50.0/24
                  185.135.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:8b:53:cc:85:de:33:97:20:98:86:99:97:de:1c:61:f4:
         17:f0:80:3f:4c:fa:ea:4c:2b:fc:d0:6d:0d:22:ec:9c:ac:67:
         a3:75:83:c2:da:af:16:8b:56:61:52:87:6a:07:15:c9:40:92:
         7a:70:1f:e7:e0:54:07:73:2f:e7:7e:9e:d5:96:18:e4:1c:1c:
         5b:8e:ee:b6:61:50:92:9d:d3:1c:ff:b1:69:d4:d0:d2:ad:e1:
         b2:8d:22:27:45:0d:e1:ed:26:74:8e:43:50:2f:d5:f5:4c:eb:
         29:59:6b:3c:78:3e:79:e1:ab:a1:6f:cf:c7:11:4c:d4:15:43:
         f4:66:e4:27:ec:04:b6:e4:4d:2e:bd:cc:bf:f1:e0:77:c7:2f:
         7f:1b:2f:0b:48:91:81:c2:e4:86:67:da:3b:45:d7:8b:61:5f:
         4d:bb:61:37:af:f8:9c:99:4a:48:8d:01:09:56:4b:85:cc:f2:
         9f:b4:de:e8:3e:94:b6:c9:8b:6f:a8:a6:62:d3:cd:0e:15:08:
         10:30:4c:c4:33:dd:f1:b0:5c:c7:5a:a8:3d:85:60:03:ab:2d:
         0f:8f:c6:5a:6c:c1:b4:6e:cd:18:7f:22:d0:f7:d8:0c:32:b3:
         73:8d:fe:6f:9e:7a:f3:f6:ba:97:01:10:72:ad:9a:f5:2d:17:
         2d:04:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org