Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212609.roa
File:                     AS212609.roa (raw, json)
Hash identifier:          KufsF6bCqq87TGUtaYYPexmcrkA3KEKaMEXsbtyklWw=
Subject key identifier:   12:79:79:D3:B2:FF:94:09:3E:AA:6E:6F:90:87:FC:95:5A:16:15:D7
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       539E0AF55269DB4DC6D80BE1E92B7107EF964C05
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212609.roa
Signing time:             Thu 15 Dec 2022 20:38:49 +0000
ROA not before:           Thu 15 Dec 2022 20:33:49 +0000
ROA not after:            Thu 14 Dec 2023 20:38:49 +0000
asID:                     212609
IP address blocks:        179.61.152.0/24 maxlen: 24
                          179.61.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9e:0a:f5:52:69:db:4d:c6:d8:0b:e1:e9:2b:71:07:ef:96:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 15 20:33:49 2022 GMT
            Not After : Dec 14 20:38:49 2023 GMT
        Subject: CN=127979D3B2FF94093EAA6E6F9087FC955A1615D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:d6:a3:8c:13:7c:01:4a:c3:fd:87:8e:be:
                    e9:24:ec:a1:cc:0c:ee:4b:68:29:c4:a5:85:7e:46:
                    fc:c2:64:33:7e:88:bb:95:c8:f1:6c:d4:f5:d5:6a:
                    a2:a6:8d:68:a0:80:28:66:db:bf:13:e5:5e:85:ab:
                    ff:0d:5a:cf:6e:c6:94:a2:92:49:14:31:99:02:20:
                    12:0a:bf:91:60:3e:ba:ed:70:fb:a4:81:92:7e:43:
                    f2:dc:6f:00:58:05:88:01:86:57:9a:c4:9d:a3:3b:
                    52:16:7f:d4:20:6e:fb:de:40:e1:44:a6:5d:cb:51:
                    3c:74:d6:4f:16:f5:8d:eb:4c:43:46:82:32:d0:59:
                    03:bd:76:a9:08:6d:04:20:27:31:64:ed:1d:da:6a:
                    8b:66:e6:ff:c1:45:b1:3b:32:9f:09:22:ea:7f:06:
                    3f:9f:d1:65:4e:84:99:dd:5e:2c:fa:1b:4e:b8:e2:
                    0b:67:35:58:93:19:97:ab:ba:9c:fc:2c:e7:16:81:
                    57:2c:3a:fa:ff:87:dd:96:48:e0:ba:14:1a:93:1b:
                    b0:c8:62:17:ee:6b:c0:e2:37:fa:86:0b:38:b7:06:
                    2a:28:e6:65:9a:c4:14:ef:2f:b3:72:a8:2b:a0:61:
                    72:04:fc:dd:04:91:d6:8a:b8:c5:a1:80:38:00:f1:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:79:D3:B2:FF:94:09:3E:AA:6E:6F:90:87:FC:95:5A:16:15:D7
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.152.0/24
                  179.61.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:5d:5e:4f:53:2b:8c:6e:c3:82:36:59:6d:28:80:dc:fa:
         32:ef:93:dc:47:e4:df:1b:9e:38:23:ab:7b:9d:9b:0f:f5:c3:
         24:5d:8d:18:0e:62:7f:4a:39:12:a5:50:bf:88:f9:23:95:dd:
         bc:bf:c9:38:ba:77:e8:22:68:45:90:b3:ee:2b:ae:ed:ac:64:
         a1:28:c1:89:a1:97:5d:f8:ac:8e:71:fd:43:6a:e8:19:04:19:
         89:5c:c2:01:86:8d:7e:d1:0a:1d:a3:24:d6:5e:b0:db:55:03:
         7e:42:4d:ea:22:92:e6:e0:86:80:23:ff:82:73:a8:ee:06:f4:
         ab:3a:41:2c:2c:aa:a0:10:a1:99:33:f6:1a:ef:8a:a3:7c:5c:
         7a:fb:c3:08:64:fb:a5:4a:72:61:8f:fa:8d:da:ae:0a:e2:f9:
         a6:d3:bf:9b:bc:fc:27:2c:79:24:62:52:cf:74:82:8c:2d:0a:
         58:8e:28:39:ea:51:ea:cb:c0:41:d1:5d:45:cd:f2:65:b4:6c:
         36:0f:ca:21:b0:81:d9:73:d0:f6:e1:5e:7e:ce:da:f7:96:d7:
         62:b8:81:cf:d1:af:4c:77:ff:a6:e9:2e:6c:ba:9e:ca:41:4f:
         fb:82:47:b8:a5:e5:53:23:09:34:5c:25:47:15:96:de:8f:a2:
         43:1c:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org