Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207458.roa
File:                     AS207458.roa (raw, json)
Hash identifier:          wyYtHoKpngj51z6dRMMAD/L9xuV9KhGJqbRUbTC8RaI=
Subject key identifier:   96:9C:C2:18:C4:15:A1:3E:11:F1:7A:98:E8:B7:25:28:2E:C0:BB:9C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       636A13144661CFAF4194B6A3AF3DFE2BB2300F0D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207458.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     207458
IP address blocks:        181.215.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6a:13:14:46:61:cf:af:41:94:b6:a3:af:3d:fe:2b:b2:30:0f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=969CC218C415A13E11F17A98E8B725282EC0BB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:7f:e3:dd:78:ed:fe:62:58:b3:4d:f6:f2:
                    1c:5c:26:54:c7:44:1c:5a:cc:ad:21:d8:15:f6:d1:
                    e1:68:ae:b7:ec:77:7e:8c:29:dc:a4:52:5a:71:49:
                    39:1a:b1:e8:2a:62:af:a5:00:79:b4:2f:aa:a1:39:
                    74:f9:d6:ea:18:82:76:30:8c:4b:6f:c3:05:66:06:
                    ab:23:06:10:2a:d4:77:8a:ae:57:5a:f0:ca:92:b4:
                    06:6b:15:0d:7e:7e:a5:86:30:22:dc:00:3d:69:79:
                    62:8c:7d:95:c9:ae:84:93:0e:7a:92:77:ec:ad:44:
                    44:69:98:e2:24:33:23:d9:37:c9:03:98:1a:3f:56:
                    0d:9f:3e:b0:c3:5c:27:a6:03:3d:43:46:9d:17:da:
                    12:3b:c0:10:ae:20:f4:e8:90:44:c4:8d:9e:c8:d3:
                    cd:de:92:52:32:6f:67:26:fe:5b:e2:f5:26:6e:46:
                    47:5e:c4:62:15:cc:0c:4f:28:88:5d:fa:e3:33:8c:
                    f0:41:12:7f:41:c8:45:a3:35:90:99:fa:a8:5d:68:
                    e4:09:b6:bd:e7:0d:2f:48:f0:4d:c6:df:36:2c:1d:
                    c7:a8:77:c9:b1:c2:5c:02:69:d6:c4:89:01:5e:cf:
                    ac:2c:1a:e4:aa:69:72:a5:81:ee:73:76:c2:cf:b8:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:C2:18:C4:15:A1:3E:11:F1:7A:98:E8:B7:25:28:2E:C0:BB:9C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:25:50:03:08:71:ed:33:dd:9d:95:6a:b3:60:52:83:57:
         e2:05:c1:a6:3b:05:57:d1:60:77:df:cb:81:d9:26:66:dc:0a:
         ff:1e:44:13:c1:a3:d6:44:af:4f:62:8f:e4:cc:f3:f8:a5:9b:
         44:21:bb:e8:7a:f8:77:43:d3:bc:04:62:cf:70:ab:f0:21:e3:
         98:ff:cd:5b:49:44:e7:27:24:9f:e1:21:2e:a5:ca:2a:98:a2:
         5f:57:92:aa:a1:51:7e:d4:c3:45:31:15:28:d7:cf:a9:cd:11:
         a0:95:43:54:c8:e6:9e:5d:c4:68:4f:14:15:71:e0:6a:5a:93:
         dc:0b:4a:f0:df:e5:fe:d1:f3:2d:54:eb:76:25:2b:f9:1c:63:
         20:95:89:91:50:e9:e4:70:85:b7:16:a4:c2:b8:49:41:21:ee:
         23:58:59:50:92:74:53:45:8a:49:2c:20:97:a1:04:35:f5:b2:
         66:6f:17:7d:46:b1:f2:d8:b8:50:c2:22:b0:ab:ce:aa:6b:ea:
         40:14:04:5b:c4:61:cf:b5:88:00:70:52:79:12:5e:da:de:da:
         d1:f0:ef:73:53:20:f6:ea:c3:7e:74:cf:a5:82:97:53:a3:4b:
         ef:50:8a:37:0a:c5:ae:d8:04:19:4d:54:48:e5:97:ee:1d:bb:
         fa:73:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org