Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205544.roa
File:                     AS205544.roa (raw, json)
Hash identifier:          Z6ewVPLezL2RurVjeBb2xHoilep1TCAsGqrVNopWpJM=
Subject key identifier:   72:67:43:79:90:EC:DB:BE:E7:12:9F:30:FB:A6:93:1E:ED:F0:51:2A
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       18CC8693419BA9F6F4E5BB83829046E4348A947C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205544.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     205544
IP address blocks:        191.96.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cc:86:93:41:9b:a9:f6:f4:e5:bb:83:82:90:46:e4:34:8a:94:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=7267437990ECDBBEE7129F30FBA6931EEDF0512A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:33:82:17:9d:44:e9:69:50:eb:48:cc:33:
                    3c:a7:55:d0:ae:34:92:eb:c3:65:f4:bf:0f:ad:dc:
                    4c:3c:e8:eb:34:30:6d:3b:be:cb:f2:ce:5c:5e:89:
                    d8:a5:13:3d:d6:8b:8a:02:80:2f:10:a2:dd:a2:ba:
                    29:ee:e9:32:a9:10:d7:12:23:ae:9f:a9:ff:aa:ab:
                    31:fb:62:53:e5:fd:57:e9:8b:ca:23:ad:7d:5b:2a:
                    68:f0:99:3b:e2:6d:47:e5:c9:ef:9c:a1:2f:e0:a7:
                    f9:31:39:3f:dd:63:b1:8f:6b:d2:76:87:c1:f1:f5:
                    f3:5d:ad:a4:91:54:5c:8b:1e:50:be:bc:ad:8d:6c:
                    4a:2c:3e:88:22:82:b6:5b:fb:7b:93:71:ee:30:36:
                    98:9b:a6:96:73:8f:7c:6f:61:6f:40:20:83:4c:0e:
                    6d:ee:38:02:32:2e:a5:36:0a:1c:a0:49:24:19:3f:
                    09:20:7d:2f:b6:39:79:41:06:fb:0c:46:05:fe:4f:
                    83:e9:9c:17:fc:a5:1e:94:63:8b:c4:2c:18:f8:ee:
                    66:20:61:72:f9:02:00:e8:82:28:83:96:28:79:9b:
                    db:d5:6b:1c:1f:be:8f:3f:8a:75:cc:15:26:ef:1d:
                    5b:68:8e:a1:93:a6:07:d2:fa:4c:d6:ab:3b:55:e2:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:43:79:90:EC:DB:BE:E7:12:9F:30:FB:A6:93:1E:ED:F0:51:2A
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205544.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:99:78:a3:7b:8a:59:5c:46:8f:bd:36:42:50:c9:43:29:59:
         cf:5b:2b:3a:0b:e9:80:be:55:a3:77:bb:de:25:8d:36:a0:34:
         12:d1:fa:ae:0a:63:85:cb:af:99:37:42:bd:36:46:28:1d:c1:
         bc:7c:f9:fb:83:d4:74:34:87:2a:cc:2e:b6:f8:e2:f6:ef:94:
         8b:e9:e6:03:e8:1b:90:fe:bc:4c:6b:0c:d8:51:d3:3f:50:c6:
         58:c8:1e:e0:13:bd:89:3e:85:4a:3e:a9:e2:d7:0f:05:a4:29:
         3a:30:a4:b5:07:c8:9d:41:c1:87:d6:d5:2e:72:61:ce:98:c4:
         d0:eb:8a:2f:4f:af:1d:98:14:0b:2c:22:70:aa:8d:ba:96:0e:
         5f:db:02:5b:27:66:c3:ba:28:a4:d5:8b:f9:ba:b8:df:ef:cd:
         c5:6d:f1:60:e3:0c:56:0e:b8:7a:fc:b6:ac:66:af:86:64:38:
         dc:e1:32:28:25:26:cb:ff:88:8e:2e:60:31:79:0f:9e:57:96:
         11:a7:ba:e9:13:b2:a9:f6:bb:11:57:b5:22:1e:5c:33:59:7d:
         3f:88:15:45:d6:cc:36:1f:dc:8a:38:46:fc:22:6d:b4:c5:e9:
         dc:4e:d9:a0:40:64:af:7c:d9:6e:fe:dd:07:08:fc:88:a7:6b:
         65:41:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org