Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7203.roa
File:                     AS7203.roa (raw, json)
Hash identifier:          UCgXVcTNTQjHIwocQJmlTrRlGR6gCM0Ho7S4QADMiCo=
Subject key identifier:   83:00:F2:BF:F4:3F:E3:99:58:15:FF:18:06:CF:39:6D:F0:4E:89:06
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7D19001368065571FC1F024E1A0ADE19954278A9
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7203.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     7203
IP address blocks:        191.96.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:19:00:13:68:06:55:71:fc:1f:02:4e:1a:0a:de:19:95:42:78:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=8300F2BFF43FE3995815FF1806CF396DF04E8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:96:70:d3:99:fe:98:1c:33:19:a6:73:2c:
                    5b:da:36:cc:3d:f3:db:7a:56:7b:46:5b:6e:aa:3d:
                    b5:bf:1e:64:04:62:ab:7c:a6:4a:fc:89:79:b0:b9:
                    65:5e:89:f2:ae:68:f6:f6:25:87:f1:2b:cf:50:e8:
                    8d:37:9c:75:24:31:d8:dc:93:53:b6:3a:a1:75:1d:
                    3a:5d:2d:40:fd:74:12:53:a9:8b:ae:f5:4a:98:4b:
                    a2:ac:f6:25:2b:1d:22:4b:91:17:96:42:d7:16:20:
                    99:d2:ee:75:e7:f4:c6:0e:ff:b1:35:69:58:0c:d6:
                    d6:09:2a:13:d4:8c:75:80:72:c4:9c:2c:43:09:3a:
                    bf:f3:94:73:3d:24:8c:02:7b:a5:ae:3e:f2:23:3a:
                    e3:a0:ea:4a:c9:39:62:be:9b:91:62:06:10:bc:82:
                    90:98:d9:fa:39:4e:b7:99:07:f4:ca:18:50:0c:0d:
                    a8:66:80:81:36:8e:0c:d7:2d:e5:47:21:9c:27:68:
                    45:78:7e:83:bf:bb:8f:90:5c:be:10:e4:ee:ba:41:
                    7e:0a:61:c3:76:93:c3:d7:00:54:59:9b:c9:8d:c8:
                    e1:b4:2e:4a:0c:b7:57:6e:2d:57:f1:49:ad:3f:7a:
                    1b:b7:68:3e:a2:ff:27:54:93:65:9d:d1:34:18:d7:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:F2:BF:F4:3F:E3:99:58:15:FF:18:06:CF:39:6D:F0:4E:89:06
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS7203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:44:b2:4a:d1:e2:44:e6:63:9b:dd:3a:31:54:8d:4d:7e:
         3c:27:7a:6a:aa:ae:6d:a8:6d:fb:eb:23:98:bd:5f:37:6e:e7:
         b1:4c:44:a6:a7:87:47:02:58:f1:5e:5a:89:f9:f6:d1:83:1c:
         5c:a6:65:72:02:d6:47:d1:af:61:87:43:9e:89:c1:68:cb:3b:
         6c:f9:90:0a:4a:27:51:a2:23:bc:d6:95:93:d2:63:98:81:a7:
         05:e2:e3:c6:61:04:64:c5:56:b8:9b:4f:22:d0:68:8d:5f:cd:
         c4:06:21:69:d3:78:e3:dc:7a:3b:91:e3:c0:8e:3f:bc:a3:f8:
         e7:ed:a0:f4:da:c7:42:de:7c:2c:a8:c3:fd:76:62:30:82:29:
         1c:f0:7b:1b:37:3f:ea:44:32:8a:fe:1b:ee:cb:5c:73:bc:dc:
         ee:81:6d:1b:5b:3e:e8:ef:e5:1d:bb:95:19:e7:44:81:11:3f:
         65:ec:40:06:89:a0:3b:af:71:e7:9a:ee:b3:b4:68:15:fc:bf:
         88:86:be:65:53:4d:93:a0:b1:a2:75:1e:fa:04:d2:3a:63:a2:
         ee:31:65:45:88:b3:3d:bc:bb:bd:44:92:20:b2:f7:1e:2c:54:
         20:ce:3f:89:a3:73:fd:58:dc:07:76:df:ed:d9:71:d8:7f:4b:
         2c:8f:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org