Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS59816.roa
File:                     AS59816.roa (raw, json)
Hash identifier:          iwgdNYt7HBX8lwEtjtq5hQxpVEax0T7cm8fp5xbevu4=
Subject key identifier:   30:72:13:1D:77:5B:6D:0D:E6:85:EE:68:76:D9:59:E2:39:DB:A6:7E
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       26CA31942214467DEC83BBB14C61FF5170482218
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS59816.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     59816
IP address blocks:        5.252.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ca:31:94:22:14:46:7d:ec:83:bb:b1:4c:61:ff:51:70:48:22:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=3072131D775B6D0DE685EE6876D959E239DBA67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:ca:d2:d6:12:aa:bd:f2:a2:af:ef:a2:55:
                    a8:06:4c:ec:9e:6c:d5:73:bc:40:91:3c:6b:9f:72:
                    23:7e:60:0e:b3:f7:4a:a4:8b:3e:b5:80:a5:8f:bb:
                    03:91:12:92:48:39:e9:17:8a:cd:a8:a3:cd:79:df:
                    ad:eb:c5:03:6d:39:b3:96:ae:a1:02:7d:70:63:f3:
                    35:86:57:03:ea:90:a4:a1:02:f6:ce:b2:68:d7:cb:
                    68:c6:b1:b0:fe:d9:44:90:ba:d0:7b:d1:52:f9:24:
                    a0:57:89:00:c0:48:cf:6e:1f:04:33:bb:f2:34:5a:
                    ef:2a:0d:de:7d:fe:a0:c3:70:19:0d:dd:c8:c1:7b:
                    db:88:22:af:bc:f9:4d:6d:ab:48:75:89:e0:8b:91:
                    19:39:ef:7d:5f:8e:ea:c0:70:1b:72:1f:3e:1d:c7:
                    1f:9a:e1:82:54:a5:5f:b5:af:86:1f:18:ee:c9:16:
                    92:02:de:30:f6:12:e7:2d:f9:5f:a7:f5:07:d5:d9:
                    0d:7d:7a:08:2f:79:b3:23:a2:ce:8f:ff:78:12:ee:
                    e2:b3:a5:14:27:a2:fb:67:a5:21:bb:ae:d9:15:e8:
                    58:0c:85:f0:9b:84:cb:ca:ac:ec:14:ba:c1:c4:5a:
                    25:42:30:71:b4:28:74:a6:64:1d:42:40:16:6b:c6:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:72:13:1D:77:5B:6D:0D:E6:85:EE:68:76:D9:59:E2:39:DB:A6:7E
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS59816.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:47:26:01:15:8e:51:f5:94:cf:4a:71:c3:57:5c:97:36:
         7e:e1:d0:74:20:75:90:cb:34:d7:f5:db:ee:32:a0:6d:d8:52:
         2d:ce:37:6a:9e:b8:83:c3:1c:4a:06:e2:88:f2:d2:18:24:f0:
         6b:9f:90:9c:c4:53:1e:fd:bb:3e:ea:d3:f6:66:c9:06:7b:b8:
         fb:dc:73:c1:15:e5:bd:2b:0c:0f:31:44:98:e6:04:75:bc:4f:
         f1:90:00:9a:48:58:6c:ea:17:9b:7f:8a:fc:d1:e8:a3:f3:72:
         62:c5:07:77:18:f2:a1:60:a4:81:3c:6a:6a:af:18:78:6e:86:
         51:23:ab:03:e3:db:b2:9a:3c:ea:2a:de:9a:e7:26:a9:9b:35:
         7b:38:6c:26:88:0b:b1:4a:33:4d:d1:89:e7:af:98:c3:a0:87:
         e3:31:c2:ca:d3:16:b5:54:b8:dd:9e:cd:08:0c:e0:25:36:f4:
         53:2c:f5:0f:64:53:ab:0b:fb:cc:90:54:e0:4c:86:e4:7b:4e:
         ff:d6:70:86:61:bc:f8:2f:63:97:b8:56:4f:dc:44:b5:e3:d4:
         cf:1d:fc:ca:ab:82:89:18:b4:5d:b5:d3:70:f7:d0:2f:00:05:
         1b:04:1f:a0:94:5f:01:4f:c1:1e:8c:fa:7d:b7:cb:4e:c7:8b:
         2b:3b:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org