Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44092.roa
File:                     AS44092.roa (raw, json)
Hash identifier:          U/G7XxB8GTTKA9CyY5B7CFu7/OQ2uS1VKti+lXksOW8=
Subject key identifier:   0F:DE:A3:23:97:96:DB:67:33:CD:B6:E4:00:C8:7B:24:22:9B:25:37
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       574A9DC79AAED2FBD03F283E56E5FBAA6790D8F7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44092.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     44092
IP address blocks:        194.110.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4a:9d:c7:9a:ae:d2:fb:d0:3f:28:3e:56:e5:fb:aa:67:90:d8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=0FDEA3239796DB6733CDB6E400C87B24229B2537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:a5:45:83:e7:c6:5c:35:fa:8e:80:46:b2:
                    be:bb:fe:ae:46:46:8d:13:86:d2:5d:46:a9:30:6b:
                    96:98:99:4a:6d:c6:e9:51:d2:f5:2e:74:a1:10:3e:
                    3c:a7:1a:2a:28:fa:57:fd:a0:1e:17:e8:e1:10:fc:
                    bd:73:b8:f1:f3:53:9b:40:3d:c4:7d:8b:b8:c7:9f:
                    6e:d9:90:18:f0:55:2c:40:7b:d7:2e:97:d4:cb:a6:
                    e9:63:37:90:e8:d2:3a:5c:9b:a9:28:41:79:8f:f3:
                    08:4a:71:4a:d4:2d:e8:30:c9:69:3b:2f:1c:e4:a0:
                    24:58:b4:56:71:6c:36:6e:24:03:9e:a8:a2:a1:61:
                    4a:96:81:35:bf:14:de:9b:5c:3f:2e:96:05:57:eb:
                    70:e8:bd:3c:17:28:a4:b5:60:fe:de:c0:d2:9d:9f:
                    7b:77:4c:f5:dd:21:0a:64:83:44:1b:c3:2a:62:ba:
                    5b:3f:88:ff:2b:03:35:4c:2b:6c:02:e9:1e:d0:d6:
                    58:8d:c0:97:2c:61:f9:02:08:9c:a2:84:4b:83:3f:
                    ff:2f:92:af:8d:e0:cf:73:77:a4:dd:07:c1:e5:38:
                    3f:1e:42:73:02:78:e9:28:41:c1:4b:f0:46:83:46:
                    7e:cc:92:eb:10:b1:16:2a:10:9b:82:98:e7:ef:62:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:A3:23:97:96:DB:67:33:CD:B6:E4:00:C8:7B:24:22:9B:25:37
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS44092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:e2:2a:97:b1:b9:12:19:54:6e:ed:99:48:f5:4a:f9:2c:
         47:f1:c9:f4:43:f7:d1:05:ed:df:fc:14:a7:96:dc:66:20:f3:
         4c:9a:01:9d:2b:f4:1f:12:42:de:f9:ce:81:39:b2:d9:6e:91:
         7f:59:40:cf:f0:a7:00:2b:0f:ce:63:8e:b8:67:37:c2:0c:5f:
         0a:78:9a:55:11:7c:96:35:c8:42:a0:77:0e:20:e3:76:ff:8f:
         73:94:2f:f9:8c:8e:a8:9d:22:2f:43:ba:a9:73:05:16:8b:a9:
         f3:57:ec:5c:78:4f:21:8a:f6:77:b3:ee:82:94:02:15:48:4b:
         e8:f5:04:78:fa:39:67:d3:17:84:1e:2f:7c:3d:2c:e0:a9:84:
         7b:f4:d1:ea:e7:08:b7:f8:1f:33:66:a3:59:ec:f5:97:61:ac:
         ee:8b:7a:62:72:54:f7:57:de:a2:b1:f0:b3:57:b5:74:72:c5:
         70:32:68:80:de:b1:1d:69:a6:8a:80:99:8d:58:31:e9:d1:d5:
         99:85:49:e0:f2:e9:e6:de:a3:8f:53:44:9c:7f:e0:cd:e2:8e:
         8f:1c:c8:64:44:d4:66:ed:c1:61:d1:c8:41:ce:2a:9b:40:ed:
         74:46:eb:fe:e4:e1:1c:7d:b3:16:fa:49:b6:3d:bc:b2:fa:35:
         ce:3b:ba:08
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUV0qdx5qu0vvQPyg+VuX7qmeQ2PcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjZaFw0yMzExMjcxMjE4MjZaMDMxMTAvBgNV
BAMTKDBGREVBMzIzOTc5NkRCNjczM0NEQjZFNDAwQzg3QjI0MjI5QjI1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASqVFg+fGXDX6joBGsr67/q5G
Ro0ThtJdRqkwa5aYmUptxulR0vUudKEQPjynGioo+lf9oB4X6OEQ/L1zuPHzU5tA
PcR9i7jHn27ZkBjwVSxAe9cul9TLpuljN5Do0jpcm6koQXmP8whKcUrULegwyWk7
LxzkoCRYtFZxbDZuJAOeqKKhYUqWgTW/FN6bXD8ulgVX63DovTwXKKS1YP7ewNKd
n3t3TPXdIQpkg0Qbwypiuls/iP8rAzVMK2wC6R7Q1liNwJcsYfkCCJyihEuDP/8v
kq+N4M9zd6TdB8HlOD8eQnMCeOkoQcFL8EaDRn7MkusQsRYqEJuCmOfvYt1tAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUD96jI5eW22czzbbkAMh7JCKbJTcwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM0NDA5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJuDDANBgkqhkiG9w0BAQsFAAOCAQEAeGri
KpexuRIZVG7tmUj1SvksR/HJ9EP30QXt3/wUp5bcZiDzTJoBnSv0HxJC3vnOgTmy
2W6Rf1lAz/CnACsPzmOOuGc3wgxfCniaVRF8ljXIQqB3DiDjdv+Pc5Qv+YyOqJ0i
L0O6qXMFFoup81fsXHhPIYr2d7PugpQCFUhL6PUEePo5Z9MXhB4vfD0s4KmEe/TR
6ucIt/gfM2ajWez1l2Gs7ot6YnJU91feorHws1e1dHLFcDJogN6xHWmmioCZjVgx
6dHVmYVJ4PLp5t6jj1NEnH/gzeKOjxzIZETUZu3BYdHIQc4qm0DtdEbr/uThHH2z
FvpJtj28svo1zju6CA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org