Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211588.roa
File:                     AS211588.roa (raw, json)
Hash identifier:          rMYiiIGT/T2WJOc5KIoUTNOj5EUOAtLfyH4bjxyLdcM=
Subject key identifier:   B1:0F:1D:2A:33:88:8E:E2:AA:BB:70:2A:1E:C0:7A:72:CC:8C:9A:39
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0C2382AD5033B57440AA65B2F12AB1EC00499882
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211588.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     211588
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:23:82:ad:50:33:b5:74:40:aa:65:b2:f1:2a:b1:ec:00:49:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=B10F1D2A33888EE2AABB702A1EC07A72CC8C9A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:9a:5f:8f:20:b1:6d:3f:b2:82:85:14:38:
                    03:67:44:fd:16:43:48:2b:37:c7:b5:e6:cb:f9:cb:
                    0c:b7:a0:c4:e8:f0:cb:e2:97:ca:ad:35:a6:45:85:
                    6d:15:fd:78:59:0f:03:d5:20:91:ea:4c:ba:96:d7:
                    a7:b3:29:c9:42:c9:41:90:02:b2:12:6e:d5:1e:d2:
                    67:88:b2:f1:58:cf:30:bc:f2:11:52:fb:72:75:f9:
                    b9:65:f0:76:63:85:52:f1:fb:a5:39:27:2e:f2:63:
                    78:34:b1:3e:f2:47:3b:17:2b:8b:e4:2c:5f:58:3c:
                    13:71:83:37:c3:2d:c0:7d:0e:90:b9:5d:1d:ca:31:
                    77:34:dc:15:36:fe:77:98:48:9c:69:05:62:9b:31:
                    4e:d7:05:b7:c1:9a:75:d1:f5:ed:d6:53:3c:00:c5:
                    ae:e9:8e:aa:fe:86:76:50:db:b1:83:a4:df:10:a7:
                    c3:6b:af:e3:70:27:5d:27:02:97:a1:40:64:10:39:
                    13:9e:76:12:50:20:b4:4b:61:d1:5d:ac:26:fa:64:
                    d8:ff:22:18:9d:22:36:23:9c:11:e3:84:66:eb:73:
                    91:34:18:64:7e:d7:72:34:32:3a:f7:6b:32:1d:2b:
                    1d:f3:1c:88:44:29:4c:5d:79:eb:2b:45:48:10:a2:
                    3b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0F:1D:2A:33:88:8E:E2:AA:BB:70:2A:1E:C0:7A:72:CC:8C:9A:39
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:8e:5f:3c:4e:c7:f6:ef:11:8c:5b:a9:92:62:9c:84:23:
         53:3a:3a:06:47:a6:ef:b6:ac:d9:d1:92:fa:60:8b:b4:16:85:
         92:18:bd:fc:4f:4b:e3:7b:cf:4e:be:0a:f6:9a:40:2e:5d:f7:
         78:7c:e0:54:2b:9f:f5:52:0c:a1:96:26:60:c4:71:b8:26:53:
         9c:c6:0b:d8:82:1c:e9:62:45:91:0c:96:9e:ff:18:0e:54:89:
         a1:ab:7b:12:04:ab:e3:f4:2c:5c:d1:49:4e:e8:af:31:2d:54:
         a7:be:aa:5d:49:35:dc:42:15:88:19:81:93:86:b7:98:46:31:
         7e:ed:8f:21:d3:29:21:25:77:6e:22:1d:d2:cc:95:e6:4b:b2:
         ea:e6:69:1c:3c:fd:99:e1:a2:2a:ed:23:7d:6d:42:09:4e:07:
         7f:44:cf:c5:c7:ce:e9:42:98:e8:d0:a6:1d:51:4a:ae:b1:a3:
         44:78:32:db:49:c6:79:6a:87:61:cc:dc:56:23:3d:7c:45:e1:
         02:b4:b4:e3:97:93:c6:73:6b:c9:67:c5:9e:74:45:67:0c:0a:
         88:a2:3c:43:de:65:4d:cc:c8:f9:22:1f:0d:de:e1:05:40:88:
         de:f0:4c:09:91:19:41:e9:d1:b1:ed:62:f8:ae:d0:d2:75:43:
         76:fd:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org