Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS61135.roa
File:                     AS61135.roa (raw, json)
Hash identifier:          1DhNKOurfuW2eFClXKLStZwuCXUKgMmgGeRj53Uw6j4=
Subject key identifier:   E4:F8:B3:D8:1C:65:FE:C1:D5:D1:1B:95:E3:F3:87:9A:20:F8:F6:1A
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1D326344F9DD2FE81CBF7D5B117AD96813FC9E81
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS61135.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     61135
IP address blocks:        181.215.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:32:63:44:f9:dd:2f:e8:1c:bf:7d:5b:11:7a:d9:68:13:fc:9e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=E4F8B3D81C65FEC1D5D11B95E3F3879A20F8F61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:b3:0f:69:d5:4e:0d:b5:cb:2c:c9:b1:65:
                    4c:89:b5:98:a8:22:81:73:c6:5e:3b:b5:6b:74:67:
                    0c:f2:7f:ca:76:be:71:4a:e7:fc:61:90:a6:ce:31:
                    59:e1:f8:8c:c3:ab:2a:41:c2:1b:71:b0:5c:92:f7:
                    d6:a2:e5:d9:3e:60:21:7c:77:63:49:e7:76:f4:2f:
                    79:d0:9c:02:b2:04:5d:1c:35:4c:45:eb:c0:7e:28:
                    08:d9:ad:9f:a4:d2:6f:c4:45:d2:c2:ed:a4:b1:2f:
                    93:7e:05:c4:47:f4:d8:ef:c3:b2:8a:d2:88:c7:42:
                    8f:c4:99:5c:96:6e:31:1b:ef:dd:ea:73:d6:94:4e:
                    92:a1:0d:45:c9:97:c9:09:0a:b1:6f:98:88:59:a4:
                    86:72:b2:f6:7b:e4:2f:ca:ff:b2:19:d3:bb:5c:09:
                    52:24:1f:c7:8e:1c:00:13:e4:8b:a2:ac:c2:ac:22:
                    c0:18:39:b1:44:49:cb:4a:52:c1:6e:a2:8d:ff:7a:
                    08:09:c6:c6:8e:f8:c8:38:b5:3d:89:c8:7e:a8:3b:
                    11:ac:ae:ac:1a:77:bf:77:fb:e4:02:e8:22:b7:ee:
                    2f:4a:da:1a:e1:db:ed:45:6f:94:97:47:ff:af:52:
                    87:5b:ff:8e:e0:27:7a:d8:8b:ac:6e:39:47:65:5c:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F8:B3:D8:1C:65:FE:C1:D5:D1:1B:95:E3:F3:87:9A:20:F8:F6:1A
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS61135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:f1:1b:96:52:f5:d2:c5:46:8d:d7:aa:40:aa:64:a0:e0:
         02:5a:f6:e6:1e:fe:81:2f:e9:86:3e:99:ab:b6:e6:78:ed:29:
         e8:38:a9:05:48:6a:50:83:f1:84:35:16:55:26:d1:45:98:f4:
         80:ed:7b:ee:62:6b:50:73:be:c1:35:a7:5a:90:2a:a5:84:da:
         ff:b1:e5:0f:3e:64:87:a9:b4:d6:c6:16:ee:08:ee:e5:f1:f9:
         c2:c3:fd:5d:a0:0a:33:06:2f:3a:89:bc:bd:76:d5:b4:af:57:
         f4:5a:de:32:9e:52:98:eb:94:d7:9f:45:4a:04:c8:cb:dc:3c:
         18:ee:4e:25:00:2e:e9:75:a8:93:e7:58:d8:cb:ee:4c:c9:64:
         44:49:49:2a:c4:5a:57:24:8e:7f:35:bf:67:06:72:7d:27:18:
         ff:5d:ab:d2:fd:ff:bf:9f:5f:38:ef:cd:c4:cc:61:e7:dd:84:
         08:f8:98:93:7b:04:bf:d7:a4:88:fc:fb:20:f5:4c:81:f5:9b:
         7c:81:ea:94:3b:c0:1c:8e:06:a3:fb:5d:a5:b1:a4:2f:ab:48:
         07:59:ca:61:04:39:28:87:aa:dc:17:29:bb:46:5c:69:6b:10:
         2c:d5:50:d7:b7:d5:f4:9f:7d:ac:a0:97:1d:9c:d7:dd:30:75:
         3f:5f:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org