Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          4jyDNwxCa+lFGSpUM2ruClM0YwhyVxuPpacJYwuMNow=
Subject key identifier:   F9:D2:F4:77:79:C6:30:80:AA:60:24:07:4E:EB:67:67:C1:E0:19:B1
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       25837FEF824E857EB3E849FD64205A4F8781704F
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55154.roa
Signing time:             Fri 23 Dec 2022 16:45:21 +0000
ROA not before:           Fri 23 Dec 2022 16:40:21 +0000
ROA not after:            Fri 22 Dec 2023 16:45:21 +0000
asID:                     55154
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:83:7f:ef:82:4e:85:7e:b3:e8:49:fd:64:20:5a:4f:87:81:70:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 23 16:40:21 2022 GMT
            Not After : Dec 22 16:45:21 2023 GMT
        Subject: CN=F9D2F47779C63080AA6024074EEB6767C1E019B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:6c:a9:4a:c9:2c:54:e3:af:9a:6a:fe:e5:
                    02:db:4c:1f:e6:e3:d4:f0:a8:14:b7:35:80:53:1a:
                    c7:9b:19:c2:04:db:c6:e6:72:33:95:09:93:9f:10:
                    8e:c0:fa:9a:b8:93:bd:08:18:06:4b:28:4c:d8:3e:
                    9f:a9:bf:db:86:d4:45:97:b0:1a:d3:31:e6:f0:6c:
                    60:1a:77:b7:fd:00:94:fe:c6:4c:ac:10:de:3b:9a:
                    b7:ee:fc:12:86:4b:6a:bb:5b:a7:dc:15:35:34:fe:
                    25:d1:0e:a5:2d:e2:d1:12:c1:c7:96:5e:63:3e:67:
                    b6:ba:f8:96:21:a6:f5:f4:60:22:62:35:97:62:25:
                    88:f1:75:0b:c0:37:f7:3c:83:ee:16:d0:2e:03:9b:
                    44:1d:3c:0b:96:66:15:fb:20:b1:31:53:11:d9:b1:
                    e4:00:a8:08:f4:cd:03:b2:34:e4:af:aa:b0:13:61:
                    32:7f:7f:fb:b6:5a:a7:29:04:8d:ec:0c:1b:c4:32:
                    1a:94:e6:05:85:78:45:8b:f1:66:0c:5a:c3:99:bb:
                    6e:b4:9f:49:32:3b:5c:ae:39:5c:38:4e:13:7f:d1:
                    d9:46:d0:ad:9a:aa:ce:c1:9b:c3:ca:62:9e:02:46:
                    d5:ca:77:03:29:71:2e:e0:d5:68:ef:5c:ac:23:86:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D2:F4:77:79:C6:30:80:AA:60:24:07:4E:EB:67:67:C1:E0:19:B1
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:9a:0e:c6:09:58:9c:19:4c:21:c4:8b:81:03:da:3b:43:
         94:20:32:1d:1b:8c:d7:37:8d:f2:41:50:0d:dc:8c:98:83:a7:
         7d:11:fe:e3:58:c7:f4:23:2d:83:ce:62:4d:6c:8b:e5:e6:21:
         89:5b:5b:e4:64:29:9a:8a:c8:1f:16:fc:ce:12:9b:8b:b6:3a:
         0a:be:a9:62:5b:cb:03:39:dd:a0:22:e7:76:49:ef:d8:83:46:
         a8:75:78:eb:56:5d:32:14:1c:bc:49:0a:cd:c4:26:77:b2:df:
         a7:79:7b:44:4c:20:bb:d9:33:cc:e0:1b:93:8c:2f:1f:b9:bb:
         11:ca:60:fd:15:0c:f1:2b:34:63:8a:c2:64:4a:76:5f:9e:18:
         aa:fc:ee:5f:a7:94:6f:2f:14:cc:35:ac:9e:25:1f:34:d3:da:
         17:c4:36:99:14:9e:e0:fd:d8:ad:43:92:d2:18:a3:5b:69:0e:
         e9:80:b9:60:db:9c:5f:61:a0:41:c8:d4:01:4c:20:fe:2a:42:
         ff:53:26:84:03:f4:85:3b:0d:fe:0e:f8:be:30:f5:46:14:eb:
         d5:66:5d:f7:23:94:d5:25:99:81:b4:ab:34:43:ca:4b:31:d5:
         bb:25:9c:0d:11:37:3b:63:ab:9c:35:b9:3f:6f:b9:1a:81:69:
         38:59:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org