Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203647.roa
File:                     AS203647.roa (raw, json)
Hash identifier:          xN8f2FO6zVt3D4UfqGoptoZ9D1AfZ4Y1OLRpabXSYv8=
Subject key identifier:   C0:2B:DC:D4:C9:BE:F4:21:5C:00:EC:46:5E:D4:C7:43:8F:36:50:57
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1938F4F3DC69E1D69D411B1F396E4F4355751094
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203647.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     203647
IP address blocks:        181.215.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:38:f4:f3:dc:69:e1:d6:9d:41:1b:1f:39:6e:4f:43:55:75:10:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=C02BDCD4C9BEF4215C00EC465ED4C7438F365057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:3e:ae:ff:56:f5:ae:0e:cc:56:77:b7:25:
                    14:9b:02:ee:e1:c0:f7:3b:67:22:c6:d2:b9:16:b6:
                    95:6b:b4:53:0b:61:21:f4:70:78:34:89:c6:81:c4:
                    12:96:12:81:5f:c6:ab:6a:d2:db:1f:b8:5b:c4:5d:
                    20:a1:40:be:d6:a8:ab:b6:89:df:33:05:9c:43:19:
                    bb:da:e3:f8:cc:84:f5:b7:46:89:44:3c:7d:73:80:
                    3e:90:58:0e:25:b2:3e:cb:9c:0e:7d:2d:af:43:86:
                    27:fd:e5:4a:43:9a:2d:ee:0c:e3:35:46:4c:85:13:
                    a3:d9:56:b2:fc:4f:48:3d:f3:13:48:e9:c9:87:58:
                    c5:89:72:d3:a2:cb:c5:9f:9c:13:b8:43:4f:3c:36:
                    d6:37:c3:4c:5a:2a:aa:87:e0:cb:e6:72:7d:0f:e0:
                    20:ea:9b:38:3d:48:99:5f:ea:1e:7d:86:4f:e0:a3:
                    d1:7b:a4:cb:fe:8f:79:22:40:c9:61:03:b2:26:9b:
                    32:df:cc:05:d8:5e:91:bb:e1:05:8b:bf:66:2d:df:
                    0c:35:d3:b8:b2:43:d4:64:a9:4c:b7:0c:d8:23:3c:
                    f7:37:03:e1:2a:07:d5:05:16:0d:2b:83:3d:62:2e:
                    d6:9b:b6:95:6a:d7:bc:82:1a:98:11:b6:6f:da:49:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2B:DC:D4:C9:BE:F4:21:5C:00:EC:46:5E:D4:C7:43:8F:36:50:57
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:60:8e:38:64:34:39:9f:94:5c:7b:e5:d9:82:42:f3:3c:
         df:71:a9:5b:33:25:85:05:db:84:5c:71:63:22:ee:6b:50:2f:
         d3:18:3a:0c:58:b8:12:ba:98:fc:15:3d:c2:b8:a5:f8:9c:f3:
         ce:e4:8c:56:57:0f:ea:d9:9d:21:14:85:62:dc:ed:2e:34:9e:
         7b:00:fc:cc:35:59:c7:06:eb:38:8e:81:45:19:e8:83:06:5f:
         1f:8d:12:95:c1:f4:e4:17:ff:4b:67:c8:d5:9b:89:ce:85:3f:
         08:c1:f0:74:b6:14:9f:b3:5c:33:b7:cb:97:8a:50:0e:fc:6e:
         5a:c9:67:89:1b:d5:f3:b2:b7:d6:35:03:10:24:93:a6:5a:fe:
         70:4d:63:03:a9:93:00:2d:76:c4:fe:f0:34:4f:e5:22:5a:60:
         92:51:16:35:be:16:4e:48:26:6c:ec:57:c3:52:84:4a:5d:06:
         a2:97:36:56:ed:d7:f8:db:d4:fe:fb:3f:6a:68:0b:b8:8a:b4:
         82:0e:30:77:54:23:82:c8:26:cb:30:92:69:ad:de:bb:77:d8:
         5e:4b:b5:1d:c5:09:40:bc:2a:a9:41:06:96:d9:8c:0e:58:0d:
         92:c0:b0:64:92:12:34:3d:a1:be:51:8b:f5:05:0b:82:dc:b8:
         b7:61:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org