Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272697.roa
File:                     AS272697.roa (raw, json)
Hash identifier:          2BLH88bGu0i1KhXy0jO8mM/v9NwHd6FoAs3lv1Bz/oc=
Subject key identifier:   67:9E:8B:E2:51:D3:A5:42:E8:E7:67:81:3D:E0:0C:62:DD:85:89:99
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0BFAD74C34075140E291748D51807DD7201871D5
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272697.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     272697
IP address blocks:        181.215.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:d7:4c:34:07:51:40:e2:91:74:8d:51:80:7d:d7:20:18:71:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=679E8BE251D3A542E8E767813DE00C62DD858999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:d9:37:97:53:61:00:27:66:c9:af:6c:88:
                    09:6b:cb:53:9a:26:18:51:23:d1:0c:69:3f:13:f3:
                    ff:37:1d:38:ec:36:5d:cc:67:ea:07:62:51:df:6d:
                    be:bb:52:8b:fe:f3:5e:48:d4:8c:e8:4c:5c:85:52:
                    36:71:57:6b:e1:b7:1f:bb:d3:65:2b:85:61:b5:d9:
                    72:94:71:81:05:1f:04:17:ba:5e:54:30:9c:89:ff:
                    60:fe:7b:3b:33:64:a4:31:6a:3f:d3:23:b7:db:b4:
                    26:21:ea:34:e0:21:cb:46:f8:f3:b6:c0:de:a8:96:
                    85:2c:a5:c2:84:7d:73:a2:16:de:0a:8a:0d:94:97:
                    62:45:76:73:fa:ab:0c:72:c9:57:ca:6a:1a:6e:39:
                    a9:f3:22:35:d7:c9:14:c6:24:41:48:f2:00:91:e8:
                    7c:ee:1d:ee:7c:5d:2f:08:27:d0:83:e3:26:f0:5e:
                    09:20:20:29:01:44:62:dc:5e:94:7e:80:1b:03:df:
                    9b:4c:e6:78:48:2e:21:da:82:95:dd:5b:a0:fa:aa:
                    0f:68:c8:b5:1a:d9:12:94:c6:d1:54:6d:9e:f5:40:
                    94:a7:4b:56:29:b4:f8:37:de:2a:db:25:8c:50:b0:
                    40:75:43:3f:50:20:91:a9:77:8a:ef:cd:4e:0e:d6:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:8B:E2:51:D3:A5:42:E8:E7:67:81:3D:E0:0C:62:DD:85:89:99
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272697.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:2e:28:f7:af:40:b2:98:0c:78:78:af:7b:09:41:f3:c8:
         e5:e9:7b:3a:5e:6a:5f:88:14:17:0a:36:0f:75:f5:e5:ea:27:
         59:94:b5:6a:07:e2:8e:8a:1e:17:70:49:f8:5b:7a:ee:27:db:
         35:69:fe:11:bd:50:e4:41:b2:d9:da:cd:d0:fb:79:ff:d5:1b:
         4d:7e:9a:64:7d:9a:e7:14:11:d1:d1:73:34:9b:fb:ef:ea:2d:
         af:65:5f:0f:d1:72:6b:4c:01:e8:5d:de:54:1a:a6:43:e5:83:
         2d:75:60:39:d3:3a:6a:78:00:e1:80:f6:aa:48:29:e3:ae:8e:
         f9:15:78:8f:8e:2f:e5:3f:ba:73:75:61:ef:02:fa:f0:e8:1f:
         24:b1:de:0e:8b:74:24:3f:d6:a1:34:82:f1:ff:86:18:03:c7:
         e8:8e:e3:d1:09:e9:f4:2f:3c:38:f3:c1:f7:78:5c:c7:a9:2e:
         21:c7:6d:e3:4c:46:fd:cc:8c:bd:ac:9f:29:96:5f:1c:9c:08:
         50:72:77:56:a6:a9:0d:e7:b3:5a:36:bb:8b:cc:45:83:ab:09:
         29:b8:3c:d9:3e:d7:fc:2c:a9:35:eb:6e:c9:9f:fa:f7:ea:fd:
         90:37:4c:49:8e:44:f3:4d:61:41:b0:3c:57:be:7a:2d:e0:35:
         94:be:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org