Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205220.roa
File:                     AS205220.roa (raw, json)
Hash identifier:          pW+QMCfok2yqZ7+Bz09tH9+YQx1NrbalN7V6yn5/1GY=
Subject key identifier:   66:EB:3F:D6:2F:17:51:34:75:09:20:47:2D:82:11:39:88:E2:DD:49
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3EC668E803A74425200A46864F7CB5F4A9E40FBC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205220.roa
Signing time:             Wed 07 Dec 2022 16:24:30 +0000
ROA not before:           Wed 07 Dec 2022 16:19:30 +0000
ROA not after:            Wed 06 Dec 2023 16:24:30 +0000
asID:                     205220
IP address blocks:        181.215.74.0/23 maxlen: 24
                          181.215.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:68:e8:03:a7:44:25:20:0a:46:86:4f:7c:b5:f4:a9:e4:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec  7 16:19:30 2022 GMT
            Not After : Dec  6 16:24:30 2023 GMT
        Subject: CN=66EB3FD62F175134750920472D82113988E2DD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:dc:6a:79:14:c3:7e:0a:65:d3:c1:fc:c9:
                    a8:b7:a7:71:91:1b:ef:fb:93:58:cd:5e:c7:52:81:
                    d9:02:73:f5:42:c7:fe:30:6f:1d:38:e5:06:3b:b2:
                    01:f8:b7:ba:01:a2:92:02:83:a3:a0:cd:a1:90:59:
                    c3:9c:83:a5:e7:b4:2b:06:ac:e9:f2:b9:a7:48:01:
                    95:ca:57:1d:3c:02:32:32:20:c3:3b:ca:20:29:21:
                    13:85:78:54:1b:ee:53:8b:7d:52:bc:00:b6:72:9f:
                    3e:15:a0:79:44:ea:75:54:20:55:fc:c6:90:99:9d:
                    7f:1d:40:03:6a:89:8b:20:c5:a2:a1:2b:26:30:f2:
                    1d:0b:83:ed:d2:72:84:13:8e:e3:6d:57:b6:e9:3b:
                    83:94:64:1b:b4:97:52:04:85:2d:60:4f:a6:37:94:
                    92:31:83:22:88:0e:56:97:2b:7c:90:be:9c:9f:7f:
                    b5:5f:b8:f3:3c:9d:55:c5:86:f2:e1:84:0b:d2:9e:
                    63:23:f2:32:eb:54:18:04:c3:40:f3:b6:7f:72:08:
                    e9:1a:07:fc:95:be:d9:22:5b:e4:8c:36:3d:0f:79:
                    20:d8:11:39:0b:7e:64:54:8b:01:87:6d:d6:eb:24:
                    5e:5d:86:25:9b:45:c0:65:1e:60:ca:96:c2:f2:64:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:3F:D6:2F:17:51:34:75:09:20:47:2D:82:11:39:88:E2:DD:49
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205220.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.74.0-181.215.77.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:ac:1d:62:fb:c6:3c:54:75:d5:b1:9f:3d:ac:d1:a4:8c:
         85:cf:7c:c1:21:23:9c:75:57:cc:a8:b7:cd:5d:11:fa:5e:e6:
         82:f8:2b:17:5e:20:5a:78:e7:33:3d:bc:ee:8a:b1:b2:74:ff:
         ba:11:55:45:78:56:dc:ab:6b:ac:13:76:8e:d3:61:5b:3e:a7:
         8e:0c:7e:7e:5b:57:34:8f:f0:0f:d9:3e:c4:81:d4:11:d8:57:
         30:cb:b3:72:11:60:dd:38:ce:23:cf:9b:84:fe:36:a2:dc:95:
         8b:7e:2d:3e:00:a8:e6:6c:e7:e3:a2:37:c2:d7:3e:2a:0d:34:
         8f:8a:ff:45:4d:08:67:3a:85:15:15:9c:a3:ef:90:ed:07:c5:
         8f:36:50:a8:bc:f7:55:4a:c3:c9:0b:d6:6f:2e:44:46:7c:e6:
         50:3c:79:bb:54:6b:c9:c3:2c:6b:3e:68:4d:5d:3a:c1:c8:8b:
         8a:17:15:49:24:5e:74:03:83:37:66:33:7c:92:92:14:66:9b:
         45:c8:70:8c:db:34:11:80:be:84:c3:f8:04:b5:4d:60:be:e6:
         34:55:4c:63:7b:ff:95:e4:08:84:56:5c:b6:b6:b4:be:73:5d:
         e7:73:fc:35:cb:04:ee:50:dc:a7:99:75:7e:c5:9c:ee:f0:2c:
         5e:ff:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org