Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213074.roa
File:                     AS213074.roa (raw, json)
Hash identifier:          tTxiUUfnCsnQjrh2u7oYycDOhEEYO4vbFJBz0X+cSHo=
Subject key identifier:   C1:7A:73:87:71:17:3C:96:D3:05:51:12:9E:7C:42:57:DA:8C:20:41
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3F33E3D87FF4B2B66440C5F6146F3D2D3C63DCB0
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213074.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     213074
IP address blocks:        181.215.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:e3:d8:7f:f4:b2:b6:64:40:c5:f6:14:6f:3d:2d:3c:63:dc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=C17A738771173C96D30551129E7C4257DA8C2041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:99:1c:d9:92:9a:fa:dd:7b:e1:84:2f:93:
                    be:b4:cd:ad:1b:f0:7d:90:ba:1e:9b:d9:6e:f8:3a:
                    c0:cc:ec:38:3c:5a:22:83:49:25:1a:4a:96:61:d9:
                    ee:40:3e:d9:35:ff:89:bf:96:a3:46:e9:8e:eb:dd:
                    1f:19:42:e9:be:72:e9:17:84:09:3a:ae:2c:37:44:
                    32:07:04:c6:97:23:9c:a5:96:77:ce:dc:9c:b9:7a:
                    96:56:28:2c:bf:52:e8:fd:a8:60:46:b7:98:8a:32:
                    f5:ff:f7:76:24:cc:28:90:69:6b:bf:68:49:01:7d:
                    41:95:1a:eb:8a:a0:53:33:0b:37:93:c6:8f:3f:10:
                    d9:c3:bf:c1:a2:14:52:4f:e0:8c:2a:28:04:ea:49:
                    3a:13:02:0e:fd:ff:56:bf:54:66:49:03:1b:2b:99:
                    75:95:82:03:4f:c8:95:3a:17:a7:cb:0b:7d:3a:b9:
                    6b:2c:ae:5c:da:ce:12:66:74:7d:eb:59:a1:17:a0:
                    52:04:8a:13:97:8f:f3:7e:fa:50:b1:cd:f0:d6:dc:
                    cf:32:05:56:95:00:9b:31:3e:87:80:55:35:e3:f2:
                    40:d3:60:61:bc:61:61:7d:b4:17:86:ce:ec:bb:99:
                    9e:74:13:fa:c8:2d:0a:9b:02:99:a8:e2:71:78:3d:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7A:73:87:71:17:3C:96:D3:05:51:12:9E:7C:42:57:DA:8C:20:41
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS213074.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:93:94:7f:50:c1:bf:1f:9d:03:81:73:9f:26:4f:98:d0:
         aa:7c:07:01:4f:14:e6:75:35:c3:5c:f9:1f:ab:ca:13:d1:41:
         a7:9f:aa:28:01:71:e1:bc:cf:d8:67:4c:e1:ac:5a:63:2e:d9:
         48:a8:68:3c:b7:6e:79:d0:4f:bd:61:7b:c8:8e:cf:3b:e9:4e:
         04:43:64:50:b5:30:4c:f4:4e:44:b7:57:67:40:f1:7d:e2:08:
         b0:d8:6f:6d:eb:0f:1e:a2:d8:2b:16:3f:c1:a5:0c:9b:66:a3:
         4a:15:f0:37:20:fd:5a:02:33:f8:5b:74:e3:51:90:6e:50:b0:
         f6:11:a0:3d:1a:10:1e:b7:77:ae:91:d3:66:8a:91:10:c1:73:
         b4:77:e2:d8:54:eb:4c:58:50:ec:7d:35:a0:8a:cb:40:c6:6f:
         39:f1:b1:ef:d6:bc:b5:8f:0e:f8:c5:5a:cc:ec:c5:49:a1:42:
         d0:bd:c6:05:12:a5:aa:74:3c:d6:8e:ad:32:e3:10:15:bf:ac:
         85:a6:ed:ce:88:ff:5a:8b:10:6b:ae:3c:14:a9:27:af:42:39:
         2b:4f:51:f5:cc:48:34:98:1a:29:ae:a7:96:c7:0f:2b:14:a5:
         3d:2a:dc:e7:24:cc:1d:8b:37:47:90:1b:39:81:6e:6b:e9:5e:
         e9:d8:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org