Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271956.roa
File:                     AS271956.roa (raw, json)
Hash identifier:          4zGMUhcqcLI+Gdczn3sclEDzFnYAGuSiQroIhAoh3x0=
Subject key identifier:   0A:FA:E0:A5:2C:34:D2:31:55:CD:C0:63:FD:F3:50:A8:9C:ED:A9:B0
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4E2F3781F6F327385A79B0C4D0CB7B4C15591DE4
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271956.roa
Signing time:             Mon 28 Nov 2022 12:18:15 +0000
ROA not before:           Mon 28 Nov 2022 12:13:15 +0000
ROA not after:            Mon 27 Nov 2023 12:18:15 +0000
asID:                     271956
IP address blocks:        181.214.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:37:81:f6:f3:27:38:5a:79:b0:c4:d0:cb:7b:4c:15:59:1d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:15 2022 GMT
            Not After : Nov 27 12:18:15 2023 GMT
        Subject: CN=0AFAE0A52C34D23155CDC063FDF350A89CEDA9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:c5:c4:d4:39:db:da:1c:fc:9c:78:b0:12:
                    10:7b:0b:fa:ae:da:12:49:48:98:b1:94:33:ff:d0:
                    3c:f5:ac:42:db:c1:69:f6:20:d0:54:46:73:96:ca:
                    40:28:d5:5d:21:65:09:49:8c:64:8b:2f:ec:93:54:
                    c8:7b:74:24:6c:1e:0e:16:a3:23:8e:49:64:af:b1:
                    86:73:80:fa:70:37:fd:f5:71:4f:2d:7e:26:db:af:
                    d0:2f:74:96:88:9e:7d:85:e6:e4:a7:4b:82:44:34:
                    a8:d0:d0:f2:af:96:51:4c:62:06:27:5b:73:7c:8a:
                    64:a8:0a:90:9d:87:f5:6c:70:1d:df:21:95:91:5c:
                    c6:9f:d5:9b:a3:a9:63:99:b9:b1:43:27:40:75:88:
                    88:97:d8:9b:27:a4:8e:e7:ee:e2:81:c2:cb:e2:b1:
                    2c:fb:eb:28:c3:a9:dd:ac:79:12:8e:8d:c5:0f:7d:
                    4b:e8:40:78:81:ad:6e:2a:17:de:21:c4:95:c8:eb:
                    2d:f4:9d:e4:cf:ce:a4:b4:55:7a:05:92:0e:24:1d:
                    14:db:56:b8:82:3c:59:6e:8f:61:28:eb:e4:87:3a:
                    6a:98:8a:f2:d5:1a:2a:44:23:ee:87:72:11:5b:06:
                    78:97:b8:3c:1f:0a:be:18:8f:9e:62:ee:d8:aa:86:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:E0:A5:2C:34:D2:31:55:CD:C0:63:FD:F3:50:A8:9C:ED:A9:B0
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:51:24:05:7c:53:29:2e:9f:9d:34:35:ec:ae:61:57:48:7e:
         50:77:03:49:bb:12:07:75:19:0d:c4:a0:e9:d2:a9:34:3b:3d:
         b9:01:2e:32:d0:20:ad:71:c8:cd:26:c1:a6:99:a8:b7:66:e2:
         dc:1c:c3:0e:d5:b6:39:1d:92:d1:c2:24:de:f6:eb:47:8f:6b:
         c7:62:f5:0e:d8:e3:ee:60:ea:02:bf:20:1b:d5:8b:1b:aa:ee:
         8a:b7:74:a1:61:1e:7f:4f:63:2f:70:a2:d7:c7:55:f8:ee:fa:
         f6:67:bb:ad:df:98:f4:bb:3e:b9:3e:84:64:8c:96:b9:ce:c6:
         dd:6e:80:13:b9:9a:ed:76:35:fa:3a:0d:1f:7d:d8:30:2f:b6:
         be:72:ae:f9:46:3a:34:7a:84:95:dd:73:5e:91:32:65:f3:b2:
         37:29:24:67:fb:58:ff:5d:9e:c8:0b:8e:16:39:a5:71:7e:20:
         9a:4f:3d:1d:16:22:f2:8f:fa:38:58:aa:df:df:04:80:ba:5d:
         fd:19:1d:90:2d:b7:2b:7a:b5:5b:a4:34:cd:4e:73:69:67:7f:
         8d:c9:76:a3:4e:dc:a9:ec:4b:b5:d9:27:e2:43:b4:b5:8f:d1:
         13:29:5d:bc:f3:93:88:f4:67:a2:69:80:6c:18:3f:fe:31:92:
         9a:52:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org