Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          rR+TEGGLSx8iY1WuqE4pUy1fMATjfYzlRMZavM+2AAQ=
Subject key identifier:   28:73:6E:69:07:CF:D4:19:D5:3F:6C:00:7E:59:75:E5:74:13:00:D7
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       69553B06B94859BB7A9CC68FEEB7887E90AC79B7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62240.roa
Signing time:             Tue 28 Feb 2023 00:00:15 +0000
ROA not before:           Mon 27 Feb 2023 23:55:15 +0000
ROA not after:            Tue 27 Feb 2024 00:00:15 +0000
asID:                     62240
IP address blocks:        5.252.80.0/24 maxlen: 24
                          45.89.242.0/24 maxlen: 24
                          45.137.126.0/24 maxlen: 24
                          185.141.167.0/24 maxlen: 24
                          191.101.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:55:3b:06:b9:48:59:bb:7a:9c:c6:8f:ee:b7:88:7e:90:ac:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 27 23:55:15 2023 GMT
            Not After : Feb 27 00:00:15 2024 GMT
        Subject: CN=28736E6907CFD419D53F6C007E5975E5741300D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:6b:9b:aa:bb:54:b1:fb:4b:f6:51:4e:2b:
                    0f:0a:93:cc:f2:00:17:ee:13:82:7a:fd:7b:83:65:
                    2f:39:0b:c1:ae:10:e4:de:f1:f3:89:4f:34:2b:c4:
                    09:e5:86:ca:fd:60:ef:2a:41:27:1c:11:68:63:c3:
                    c7:00:2f:d9:15:25:4f:3e:1f:57:a9:e1:c7:46:02:
                    d9:4c:bf:68:c3:bf:fb:79:56:d9:94:85:af:a8:f2:
                    a3:45:b3:f1:0d:e1:31:b5:0b:65:2d:de:9d:ac:63:
                    d9:c6:ab:95:fd:5c:32:50:39:56:c7:01:3c:51:7e:
                    46:41:6a:fb:a6:de:e0:23:1d:10:4a:d8:01:40:18:
                    46:88:34:5f:f9:ea:ad:79:ba:82:51:d8:b5:cd:9a:
                    c6:5d:ba:3e:4a:c4:3e:d5:02:d2:46:a3:c8:e0:a9:
                    8c:23:c4:58:d8:eb:99:da:88:e4:9d:62:92:d6:08:
                    a2:92:2f:59:8c:3d:2e:6d:1d:31:cf:f3:21:c8:b4:
                    bc:d6:5f:23:20:a0:24:3d:eb:6e:7e:94:2a:43:03:
                    08:82:66:b8:cb:9c:ef:db:76:db:8e:ab:cc:06:ae:
                    2d:c3:c6:2f:5f:12:8a:d5:c9:f1:04:b2:4f:15:b2:
                    ce:87:d8:96:5f:59:ed:d6:29:32:57:7b:69:22:25:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:6E:69:07:CF:D4:19:D5:3F:6C:00:7E:59:75:E5:74:13:00:D7
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/24
                  45.89.242.0/24
                  45.137.126.0/24
                  185.141.167.0/24
                  191.101.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:10:42:52:9a:4b:d4:57:c5:24:c0:67:49:f2:f0:64:d3:68:
         2c:69:9e:e4:09:19:1c:37:22:bc:a6:68:8e:fa:a9:b6:a7:42:
         a5:5b:d1:44:67:21:08:9a:1c:51:48:14:e3:49:d6:24:62:9e:
         25:69:0a:f5:d7:c4:61:d9:c1:51:c6:41:22:82:9f:d4:aa:80:
         66:d5:52:df:0b:c1:2d:ac:59:45:ae:1f:5f:73:db:31:bc:99:
         48:3e:ad:27:74:75:5e:01:45:7c:10:39:79:34:26:a5:37:bb:
         31:62:0d:dc:dd:32:b8:2f:d3:61:85:70:01:ae:3b:de:9e:ed:
         1d:fe:1f:95:c8:d2:39:37:eb:3a:52:12:39:81:15:fc:10:83:
         bc:69:3f:79:bb:cb:e2:8d:cd:b3:0d:48:87:b5:50:41:ad:de:
         c6:bf:7c:a4:84:c2:e5:42:82:dd:01:c5:9b:d9:1a:aa:2f:64:
         57:a4:05:a7:17:4e:9e:32:2f:c8:09:6b:e4:00:e8:2d:5a:d2:
         5a:fe:1b:3e:06:29:56:c3:eb:b1:a0:5e:76:6c:6b:6f:c1:7c:
         28:06:58:3b:f3:f0:fb:8b:33:07:d4:c1:cc:2f:ed:fa:14:81:
         b8:3f:08:00:90:f1:4c:bb:78:ba:60:fb:94:9c:07:1b:06:d2:
         d7:ec:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org