Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270353.roa
File:                     AS270353.roa (raw, json)
Hash identifier:          I9rfuQxoN0Yi9WOZv3vjbjVW8q9w8FL9qw7YQe4E80U=
Subject key identifier:   45:74:15:80:04:71:97:8C:BD:9D:66:D6:1C:D3:80:94:8D:4C:35:8F
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       605AA459E2E6DCDF95CFF2BEA8A60DC52E77424E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270353.roa
Signing time:             Mon 23 Jan 2023 12:34:02 +0000
ROA not before:           Mon 23 Jan 2023 12:29:02 +0000
ROA not after:            Mon 22 Jan 2024 12:34:02 +0000
asID:                     270353
IP address blocks:        191.96.78.0/23 maxlen: 23
                          191.96.78.0/24 maxlen: 24
                          191.96.79.0/24 maxlen: 24
                          191.96.224.0/23 maxlen: 24
                          191.101.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:a4:59:e2:e6:dc:df:95:cf:f2:be:a8:a6:0d:c5:2e:77:42:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 23 12:29:02 2023 GMT
            Not After : Jan 22 12:34:02 2024 GMT
        Subject: CN=457415800471978CBD9D66D61CD380948D4C358F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:42:b5:76:24:6c:8e:bc:6e:69:0b:90:b4:
                    30:f6:73:52:13:df:91:20:d4:e3:0d:bf:f3:0d:96:
                    36:15:4a:c6:b7:a3:bb:fa:de:e3:7e:33:9e:c7:c4:
                    5f:83:c2:36:ed:1d:fc:92:e2:97:e1:1c:5f:e8:69:
                    84:6f:b6:75:c0:eb:89:e2:35:fd:a5:b6:f2:78:3e:
                    6f:40:ee:79:f4:0b:63:90:9d:ab:ce:33:de:dc:6d:
                    ff:54:07:e5:21:ed:3c:61:3c:59:e4:59:af:78:ad:
                    96:f4:6f:74:ce:17:2f:94:9a:98:a9:af:4c:aa:8e:
                    fe:db:48:6e:56:6d:d9:34:fe:c1:4f:84:f2:f6:01:
                    26:0e:a5:cb:3b:4e:a6:5e:1d:74:af:a9:55:4d:5f:
                    0c:1d:5b:d8:53:68:75:d3:69:cd:d5:11:c3:58:5a:
                    4d:3d:d6:b5:1c:0a:a2:15:42:5b:94:a2:62:f4:e7:
                    37:b3:34:c2:d4:be:a3:01:54:14:65:0c:55:95:e1:
                    69:c7:fc:67:ec:c8:e0:5a:42:36:8a:3f:dd:f2:44:
                    29:f5:3a:11:45:9c:59:8c:11:a4:ff:70:4c:66:a5:
                    18:5d:9a:43:b7:a8:96:9c:fb:40:43:7a:41:2a:a5:
                    02:d1:88:d7:5c:dc:f4:58:cc:30:0f:b5:5f:68:b0:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:15:80:04:71:97:8C:BD:9D:66:D6:1C:D3:80:94:8D:4C:35:8F
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270353.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.78.0/23
                  191.96.224.0/23
                  191.101.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:ea:dd:31:11:1a:47:53:31:d0:90:2b:9d:c3:11:46:93:
         c3:9a:32:e0:30:87:17:b0:1e:7f:21:0c:30:a3:65:4d:4f:3e:
         85:46:a8:e4:6d:dd:ad:d1:5c:e7:09:f6:a4:29:39:32:14:2b:
         df:e5:c5:b5:62:d4:b0:8c:21:3b:a8:80:8e:16:7a:ac:a3:71:
         ae:cf:3d:6e:b8:a4:ba:61:34:64:46:e8:d8:79:4a:41:81:58:
         bf:ce:49:cb:af:63:4d:59:07:26:3b:bc:89:15:6b:76:76:9c:
         3c:cd:23:cd:39:c0:d2:bc:87:62:8b:62:55:4f:45:76:20:ba:
         d9:2d:eb:76:e7:2b:f8:c2:d0:c5:ab:7d:af:0d:16:53:32:d8:
         bb:4d:c4:3f:60:ce:ee:55:e0:40:7c:1c:29:5b:4c:cb:8f:95:
         ed:5a:02:4f:45:27:d9:1a:ff:3a:ae:c9:9b:9f:63:21:2d:c5:
         5f:0c:c9:58:1f:b1:d2:5d:fb:24:d1:4c:e9:e0:ed:ae:79:54:
         4f:9d:06:92:38:00:79:45:17:c4:5e:01:e9:e5:03:6a:a6:00:
         a2:6e:94:34:7b:b4:23:69:a1:6a:0c:9f:c2:8c:5c:ce:2d:87:
         49:99:17:ba:e3:44:85:27:b0:61:f9:5a:3a:6c:e7:bd:cb:55:
         de:ff:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org