Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3320.roa
File:                     AS3320.roa (raw, json)
Hash identifier:          uex4mu1QjSH6cyIgpP7jLLkMsBb+11Qb3TDe7JqLGLM=
Subject key identifier:   A9:25:38:B0:60:39:C7:AA:AD:F2:16:E9:14:C1:13:92:92:1B:F1:3C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0CD3EECE4E2B30E2B888D12A3199FCF677D65EA7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3320.roa
Signing time:             Thu 19 Jan 2023 03:14:41 +0000
ROA not before:           Thu 19 Jan 2023 03:09:41 +0000
ROA not after:            Thu 18 Jan 2024 03:14:41 +0000
asID:                     3320
IP address blocks:        92.118.161.0/24 maxlen: 24
                          179.61.160.0/22 maxlen: 24
                          185.139.236.0/24 maxlen: 24
                          185.174.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d3:ee:ce:4e:2b:30:e2:b8:88:d1:2a:31:99:fc:f6:77:d6:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 19 03:09:41 2023 GMT
            Not After : Jan 18 03:14:41 2024 GMT
        Subject: CN=A92538B06039C7AAADF216E914C11392921BF13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:47:ef:f8:cc:4b:71:9b:42:8e:33:60:79:
                    18:d1:13:b6:cb:4b:94:fc:4e:d5:48:f6:2e:ad:7c:
                    10:1a:72:8c:5c:39:07:da:0b:a8:58:bc:be:b0:0e:
                    fd:2c:62:61:04:09:f6:8a:69:c0:c2:c7:b5:65:5a:
                    06:0f:b9:bc:d1:8b:dc:4d:8c:e4:56:10:d1:e8:3d:
                    9d:5b:ee:e5:66:a7:e7:f2:15:20:18:33:51:b4:d6:
                    48:9e:fe:8b:85:95:46:cc:6c:cc:b4:99:96:18:8b:
                    a7:4f:2d:cc:76:d3:9b:54:a9:82:e3:ba:72:67:7f:
                    9f:c8:54:54:ff:fd:2c:73:48:67:12:bc:e8:0b:bb:
                    e1:ec:30:47:bd:e8:b9:80:bb:49:21:89:2c:9e:e7:
                    2b:73:bf:ed:c5:b5:31:26:e4:8b:f1:81:4d:93:82:
                    1b:bc:5b:58:5f:3d:03:21:85:6f:cb:cd:45:ed:42:
                    b4:a6:5e:1c:5d:78:9e:18:c8:e8:f9:f3:3f:82:17:
                    87:54:de:aa:14:2f:24:24:5b:92:6a:25:29:31:ba:
                    ff:d4:86:62:eb:da:1b:03:84:58:ca:42:44:dc:64:
                    28:c6:8a:f7:16:7b:82:c7:e6:7b:6e:3d:42:c8:3f:
                    67:ee:62:df:eb:47:5d:6b:af:d1:d8:ef:25:34:a5:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:38:B0:60:39:C7:AA:AD:F2:16:E9:14:C1:13:92:92:1B:F1:3C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.161.0/24
                  179.61.160.0/22
                  185.139.236.0/24
                  185.174.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:b7:4b:9a:58:3e:0e:0a:ec:3f:8e:d1:6d:86:c0:6b:37:
         bb:53:61:08:dd:a7:9f:cc:3c:3e:d9:56:12:f2:87:39:29:c2:
         17:3e:55:55:5e:fd:c8:d3:f6:a3:53:9b:d6:11:13:ab:e9:01:
         03:c4:ff:bd:ac:7d:ec:75:f6:ff:31:fd:57:8b:a0:cf:66:a9:
         e6:36:e9:d0:22:5a:7c:e9:21:ab:d0:f9:f2:50:02:0f:2c:db:
         bc:5e:bb:a5:ec:cb:de:90:a9:5b:ed:94:54:9e:02:e5:8c:14:
         02:56:f5:c2:5e:62:c7:cd:02:01:0a:28:e1:b4:6f:36:74:92:
         5f:5d:71:b7:98:eb:5b:1f:31:ac:e8:44:07:b1:66:b9:61:c5:
         05:98:6a:61:f4:71:6f:06:87:05:62:86:0b:b7:d6:39:a6:97:
         d6:48:be:b9:0e:c3:a5:d0:24:6d:3f:75:28:4b:0a:7e:8e:99:
         c0:09:81:57:c4:a9:64:e2:c2:86:6d:36:75:8f:c8:aa:7d:24:
         f3:2f:04:ff:ba:3a:cd:95:e0:38:8a:77:15:d6:30:54:8a:9e:
         24:c3:e6:2e:c2:6d:92:2f:fa:aa:25:c7:4a:18:8d:5a:93:13:
         c4:35:64:e9:97:8a:8a:92:43:fa:ff:5b:13:2a:5e:2f:4e:bb:
         2a:52:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org