Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          v41Th0tUdGZgCgO+Mgdil2ZQIZ4JKCthlsa9YEeNY4g=
Subject key identifier:   2C:C1:C9:48:50:A5:BB:CB:BE:1D:C5:F3:DF:5F:26:0A:5A:EE:B4:55
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7CBD129577694C8E317026051FD8645BBBD7355F
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53356.roa
Signing time:             Thu 09 Feb 2023 13:55:43 +0000
ROA not before:           Thu 09 Feb 2023 13:50:43 +0000
ROA not after:            Thu 08 Feb 2024 13:55:43 +0000
asID:                     53356
IP address blocks:        181.214.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bd:12:95:77:69:4c:8e:31:70:26:05:1f:d8:64:5b:bb:d7:35:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  9 13:50:43 2023 GMT
            Not After : Feb  8 13:55:43 2024 GMT
        Subject: CN=2CC1C94850A5BBCBBE1DC5F3DF5F260A5AEEB455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4f:2d:e8:f3:a7:8e:68:bc:dd:0c:b7:25:5a:
                    4e:c0:66:d7:be:85:83:62:42:76:84:c1:8d:32:a9:
                    6b:e0:ae:a1:bb:e8:7d:d9:53:fd:d8:70:90:bc:ff:
                    fb:ba:da:04:31:8f:ea:31:db:8b:b2:ea:4c:1d:64:
                    b3:ab:67:6e:9f:90:04:53:a7:0b:2a:b2:d3:4a:6f:
                    49:b6:0d:fa:a4:ee:a7:60:35:12:95:b8:f6:82:c3:
                    33:33:1a:ac:22:e7:ea:33:dc:14:14:89:40:2a:84:
                    b9:f0:50:be:7b:79:f0:33:38:76:a4:73:60:5f:9c:
                    a1:c4:24:7e:fd:a9:bc:f6:ae:fe:45:32:90:d9:d5:
                    10:73:5a:4f:c7:44:04:79:d0:91:34:a0:2c:c4:45:
                    83:70:4e:aa:81:9c:99:a5:f1:b7:9c:b1:0f:b1:15:
                    16:42:a9:18:cc:ae:5f:14:e5:4c:b1:c8:db:e9:c4:
                    59:13:9f:44:45:6c:cb:cb:fb:12:22:5e:0b:26:c1:
                    b1:9f:ff:f6:39:be:31:86:08:8c:c0:10:97:28:f2:
                    41:f0:0a:8b:47:7b:a4:2b:9a:f0:e6:7c:f0:db:74:
                    2a:89:d5:be:5e:64:81:38:31:f8:ab:da:95:fe:1e:
                    e1:16:5f:27:ce:e4:d6:4f:06:a1:d3:f8:89:73:ea:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:C9:48:50:A5:BB:CB:BE:1D:C5:F3:DF:5F:26:0A:5A:EE:B4:55
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:da:cd:7c:52:66:6f:89:b1:de:5e:24:ea:e5:21:fa:73:e9:
         b8:42:02:ed:17:21:e4:4d:7f:db:b1:14:fa:5c:e9:96:db:e0:
         66:e3:38:e9:64:e3:5e:e8:05:81:55:ec:97:28:52:ac:f2:84:
         7f:5e:3f:1f:8a:2d:11:80:97:37:e8:f8:dd:f7:16:8f:5d:9c:
         39:56:24:82:45:bf:44:63:ba:e4:f2:44:f9:07:1f:54:51:89:
         8a:50:89:a9:4c:71:91:e7:fb:03:4d:42:75:21:fa:a6:d9:c6:
         53:40:ae:d2:b7:7f:d2:fe:3f:4b:98:a9:08:0a:ec:80:d6:a2:
         a7:8e:ff:85:a1:f1:78:6b:ad:27:f6:21:b5:4c:c4:5f:ef:25:
         d6:a6:a0:4b:e7:32:26:2a:92:70:5c:49:19:7a:03:28:61:5d:
         21:f4:b4:f2:68:09:4f:57:32:98:15:60:e6:df:3e:e9:3c:0a:
         eb:1a:05:33:ef:eb:92:61:c3:a9:56:f3:09:ac:6d:2f:3b:0a:
         78:d5:a3:ba:ef:e2:d6:65:49:81:d6:6d:1a:09:37:d5:44:a2:
         3b:30:e1:55:e2:65:2f:91:ac:b6:02:91:8b:5f:54:7a:9a:84:
         68:9a:92:72:9b:73:e6:82:c3:e6:f7:b8:e0:92:84:52:5a:c1:
         9c:5a:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org