Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26388.roa
File:                     AS26388.roa (raw, json)
Hash identifier:          Mw3z5wIqZHuXrD+zTBR/nrmes/9yMJOsmijkQHpE+Xw=
Subject key identifier:   A6:45:88:18:CF:58:BF:E0:A7:07:E2:03:26:0E:9F:69:D8:E9:99:E7
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7F2DA467057CB7F7E843D11CC7FBE773D060BBCE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26388.roa
Signing time:             Wed 04 Jan 2023 10:17:17 +0000
ROA not before:           Wed 04 Jan 2023 10:12:17 +0000
ROA not after:            Wed 03 Jan 2024 10:17:17 +0000
asID:                     26388
IP address blocks:        45.133.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2d:a4:67:05:7c:b7:f7:e8:43:d1:1c:c7:fb:e7:73:d0:60:bb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  4 10:12:17 2023 GMT
            Not After : Jan  3 10:17:17 2024 GMT
        Subject: CN=A6458818CF58BFE0A707E203260E9F69D8E999E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:76:2e:c0:22:96:d0:6e:8b:50:53:0a:42:
                    c7:f7:21:52:02:0f:e7:8d:f3:f9:49:34:58:68:81:
                    ae:27:2d:7c:81:7a:39:4f:61:35:1d:2b:c2:0c:c5:
                    39:0b:62:3c:59:b2:91:04:37:c9:15:91:32:8e:f4:
                    12:56:f4:8b:be:23:e3:ff:fe:eb:a6:12:70:5d:87:
                    ea:9d:89:2c:33:26:73:dc:b3:e2:00:90:02:10:fb:
                    bd:5e:01:a7:aa:76:e4:3d:e8:49:36:c4:78:1d:4c:
                    84:2b:fb:61:86:5a:40:87:44:3f:77:d4:ec:dd:11:
                    05:7c:76:d1:88:41:44:17:36:09:44:ad:48:a1:c8:
                    b7:b6:7a:d8:27:d8:54:38:36:3c:a5:11:e4:9c:35:
                    8f:94:a0:1f:6a:d7:a5:ff:0b:73:0f:ec:8f:00:d8:
                    45:1b:67:f7:55:4d:2a:f8:13:e7:52:c2:96:b6:00:
                    ef:fc:5f:2c:4e:23:2d:a4:c4:a4:e0:a0:61:d8:67:
                    4c:7c:dd:0f:62:5a:d2:c6:53:78:47:06:a9:4e:9d:
                    0c:1a:e0:54:f0:98:3d:aa:de:2a:5e:64:7a:10:00:
                    5a:5a:8b:d5:8b:49:f1:d0:4a:18:0f:49:76:8c:d2:
                    90:01:dc:bd:db:e0:90:8d:99:12:fb:37:81:93:0f:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:88:18:CF:58:BF:E0:A7:07:E2:03:26:0E:9F:69:D8:E9:99:E7
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS26388.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:78:f9:83:ce:e7:01:e2:dc:3f:b1:d3:6c:be:f8:75:35:
         78:4a:da:53:58:28:a1:04:d3:ea:b2:20:3a:0c:c2:79:3e:56:
         94:e7:0f:bf:d6:25:c8:e5:07:04:7f:a5:b9:b3:7e:d0:7c:65:
         db:09:aa:2a:56:d2:51:b3:97:d6:50:5d:03:2d:51:75:d9:da:
         79:c0:7f:d2:e2:cf:64:cd:fb:10:ae:23:e9:38:ad:b0:ee:77:
         2e:c8:db:93:60:88:ac:4c:75:c4:b1:84:4c:33:e3:ff:82:f1:
         b6:ca:ef:5b:bb:8e:e9:15:3d:11:88:91:aa:5e:1a:8e:27:b7:
         dd:e5:50:ec:13:27:e9:4e:16:8c:f5:85:ad:f4:6d:a3:6d:2c:
         29:29:3a:fe:76:25:63:ff:04:48:d8:51:74:6b:eb:43:f1:7e:
         8d:3e:7f:12:eb:cc:98:e9:b5:ff:25:13:65:4e:30:53:d6:46:
         5c:c0:92:c3:65:cb:91:10:fd:66:89:3a:db:fe:5e:59:00:33:
         c3:2d:bb:0d:b5:ac:98:60:ce:34:03:a0:56:26:ee:c0:4d:73:
         d3:46:c4:8b:4b:79:45:8d:db:1c:2f:a6:0f:b5:ba:88:db:bf:
         80:f0:83:ae:f5:31:a8:97:e0:74:2e:b3:75:e6:74:0c:91:a4:
         18:98:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org