Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS21859.roa
File:                     AS21859.roa (raw, json)
Hash identifier:          h+RHvfQJcBXMGnYFIoq6YiV+KF0MUVpJ879TB1g2/V4=
Subject key identifier:   89:29:45:A4:36:1B:D9:BC:61:97:EA:84:C6:A2:92:9A:28:9D:23:88
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0A845CC1183603BBFC6AB5CAE0C831C6844B6E25
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS21859.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     21859
IP address blocks:        181.215.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:84:5c:c1:18:36:03:bb:fc:6a:b5:ca:e0:c8:31:c6:84:4b:6e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=892945A4361BD9BC6197EA84C6A2929A289D2388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:c5:f1:80:57:8a:05:f5:39:ed:be:eb:21:
                    9f:71:40:d4:98:69:7b:5a:2f:9b:17:ce:a6:ac:49:
                    4e:2f:9f:45:33:32:b2:33:92:42:ef:f6:4e:64:49:
                    a4:23:3d:6b:40:cd:8c:f1:0a:99:df:c4:ed:fc:14:
                    18:82:b7:f9:17:3c:8b:f4:8a:f2:98:d9:d5:09:09:
                    a9:02:af:5e:be:03:cf:9c:4b:9b:a7:f6:1d:87:2f:
                    42:50:e1:20:69:3c:42:6b:76:9e:ed:9a:84:c5:dd:
                    ea:9e:b6:69:69:1e:15:3d:20:42:a7:d0:ae:0f:7e:
                    ea:f0:ed:63:1f:d7:e1:a8:94:73:ea:92:22:87:43:
                    a0:45:cb:4f:62:60:47:dc:2e:7d:4d:37:af:e0:61:
                    32:fb:11:ed:9d:85:9f:a9:0d:5b:c9:98:01:c4:e1:
                    ee:a1:07:5a:7d:15:51:fb:d8:02:6f:e7:f2:42:44:
                    42:67:5b:8c:be:02:8e:45:e6:2a:df:47:b2:1c:fb:
                    9d:b1:c9:0e:a2:03:88:0d:80:50:16:e7:ae:e8:b7:
                    c2:bb:07:40:09:ec:2d:2d:5b:63:71:39:b8:ed:0d:
                    c9:9d:2f:9d:75:d4:9b:a1:00:ee:3e:98:92:ee:f8:
                    e2:84:57:c2:1d:22:3e:d0:e2:6a:43:8f:0c:f6:36:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:45:A4:36:1B:D9:BC:61:97:EA:84:C6:A2:92:9A:28:9D:23:88
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS21859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:42:4e:f4:93:2e:77:7a:92:57:46:57:5c:e1:8c:d2:e7:
         1a:79:45:85:0b:60:f5:73:3e:1a:53:2f:be:ed:61:d3:0c:5f:
         06:fc:57:ec:4a:7e:7e:a1:64:40:74:88:73:55:53:27:f4:2a:
         34:75:68:ce:c8:30:35:2b:82:b6:91:3a:e7:1b:ff:a5:b7:bc:
         19:8b:5e:72:6b:5c:35:ec:29:53:15:62:97:2c:0d:f2:11:ca:
         b3:af:5c:9d:5c:93:4b:34:b5:42:26:16:e1:2c:f1:02:8f:11:
         50:cd:3a:2c:75:61:49:91:89:1d:5b:79:21:c0:ae:56:88:0b:
         58:83:d1:c0:86:d7:7b:f3:c4:1b:8c:28:ab:4a:5b:26:9e:b8:
         e0:82:ff:76:88:cd:0f:5e:6c:0d:5c:02:a5:fa:af:86:73:2b:
         be:ad:77:bd:29:e0:40:10:b9:57:87:8f:21:15:47:dd:58:8b:
         51:09:db:57:ff:08:45:65:e7:72:4a:cd:8b:7a:8c:87:20:d5:
         cf:c1:2b:4a:11:ff:38:49:7d:29:22:69:40:db:02:c9:fa:1f:
         54:37:a6:7f:45:5c:ce:d4:26:de:ec:db:7c:fc:da:ea:88:2b:
         19:18:b7:9a:42:0b:8a:7e:4e:42:50:7b:e5:eb:0c:d1:74:4f:
         9e:41:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org