Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272110.roa
File:                     AS272110.roa (raw, json)
Hash identifier:          ZWk0mjbPQEJffI37gMXyY6v8Gm0NwwZYada1q2zldFA=
Subject key identifier:   08:3E:69:62:6E:73:CF:E0:9A:9F:E2:5F:7D:64:C9:5D:F4:A4:3C:43
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7A4319CD2C22D28428C837ED06352D939A5A1490
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272110.roa
Signing time:             Mon 28 Nov 2022 12:18:15 +0000
ROA not before:           Mon 28 Nov 2022 12:13:15 +0000
ROA not after:            Mon 27 Nov 2023 12:18:15 +0000
asID:                     272110
IP address blocks:        191.96.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:19:cd:2c:22:d2:84:28:c8:37:ed:06:35:2d:93:9a:5a:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:15 2022 GMT
            Not After : Nov 27 12:18:15 2023 GMT
        Subject: CN=083E69626E73CFE09A9FE25F7D64C95DF4A43C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:dd:35:5f:3e:b9:c1:07:ac:2e:82:2e:b9:
                    14:1e:20:6b:bc:b2:0f:00:d5:dd:d7:36:5c:dd:0f:
                    24:d6:69:1f:35:88:a1:ab:1d:2b:c5:85:ff:5b:a3:
                    89:86:dc:e6:18:64:4c:3f:5e:a1:dd:36:72:fc:5f:
                    2e:37:40:80:dd:92:52:6d:52:3f:39:cf:c9:9f:0c:
                    44:20:1f:63:32:48:d0:48:07:c4:01:58:24:65:5d:
                    7a:53:39:47:56:fe:1a:23:67:af:1e:05:e1:4c:a1:
                    ea:98:89:c2:fc:53:b1:04:7f:53:de:94:cc:85:f2:
                    57:a0:f2:4f:e5:cb:a2:01:c7:57:3f:e2:24:6e:c6:
                    6b:8c:74:78:a5:97:6e:b3:bc:23:53:49:03:38:2f:
                    aa:33:31:82:9d:7d:25:49:05:53:9a:25:3a:1d:54:
                    42:a7:b5:a8:9b:ca:4e:35:9f:62:92:a5:8c:b5:43:
                    13:92:4d:c3:f5:3d:3e:67:1b:b9:24:ca:bd:17:e3:
                    5d:0e:6f:5f:61:47:4c:d0:56:34:79:24:c0:46:7f:
                    86:e1:ba:f8:cc:08:ab:58:e6:f5:11:23:be:4e:ba:
                    ef:84:97:87:8e:55:82:b1:6f:3b:cd:cb:66:64:6e:
                    93:a7:03:bd:86:cc:cb:39:08:ab:72:b6:e0:1a:45:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:69:62:6E:73:CF:E0:9A:9F:E2:5F:7D:64:C9:5D:F4:A4:3C:43
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:53:65:0e:aa:a1:ef:b6:6b:98:95:e2:c0:7b:e2:d8:3c:
         57:8b:65:12:25:66:da:ec:a7:bb:bc:6a:58:42:ac:97:58:10:
         86:4d:0a:6e:a0:97:1f:96:2d:6b:86:82:07:6a:06:be:c4:7c:
         53:81:cc:b6:40:b5:ad:7a:b6:76:b7:7e:9e:41:ff:85:3f:4f:
         a5:ef:43:18:30:bc:d5:0e:83:e3:77:f7:77:c9:ec:a7:cb:91:
         a8:94:3d:15:20:fb:26:73:c7:1b:f4:5f:c2:dd:dc:25:c5:b7:
         39:88:f8:d6:57:bc:0c:5f:1c:b4:61:bf:c9:14:f5:13:d8:ab:
         b8:00:01:8d:b4:7e:fc:c7:01:b1:61:1a:da:1b:53:c5:6a:77:
         c6:9a:ca:91:20:bf:b4:60:6c:01:bc:ea:7f:6f:bc:f8:3e:a1:
         89:53:de:46:53:5b:87:6a:30:a2:b1:4c:07:20:10:b6:6f:47:
         d9:35:9d:12:6a:b1:77:3d:01:cc:93:c7:70:50:c5:42:87:8d:
         d9:cd:15:36:06:77:00:ad:e5:dc:a2:e2:24:1f:92:10:47:4a:
         6f:f3:fd:19:09:19:47:40:43:5e:1a:27:cc:81:15:0c:ba:ae:
         6d:35:15:27:49:bf:72:52:f1:2f:54:e0:00:df:a0:f0:3b:9f:
         96:c5:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org