Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS11426.roa
File:                     AS11426.roa (raw, json)
Hash identifier:          N+P+VZGiM7pwDfY2SXZfPWlfRgernGXkggJ6y8/LI0k=
Subject key identifier:   D4:34:75:E4:8D:22:E5:19:1D:E5:B6:8F:92:FE:32:43:88:4A:1C:BC
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       584B6216858501707135899164C2A465709BA1F6
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS11426.roa
Signing time:             Wed 09 Mar 2022 13:30:28 +0000
ROA not before:           Wed 09 Mar 2022 13:25:28 +0000
ROA not after:            Wed 08 Mar 2023 13:30:28 +0000
asID:                     11426
IP address blocks:        181.214.13.0/24 maxlen: 24
                          191.101.190.0/24 maxlen: 24
                          191.101.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:62:16:85:85:01:70:71:35:89:91:64:c2:a4:65:70:9b:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:25:28 2022 GMT
            Not After : Mar  8 13:30:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:7b:81:7d:28:17:84:86:73:79:fe:f6:99:
                    12:28:59:a3:db:00:4d:e4:68:ee:98:b4:da:1a:18:
                    a1:e1:9a:b3:50:31:98:4c:df:bc:d7:1e:3d:0d:4c:
                    7d:9b:7b:31:d4:fb:41:12:ab:79:2e:1f:2f:60:1a:
                    8c:de:fa:a8:8a:df:a5:9e:e6:86:49:f6:54:01:59:
                    50:41:38:f5:36:6c:d2:e0:77:ef:23:53:ef:ed:23:
                    6c:7f:f0:65:e1:da:6c:4f:7d:c9:7c:79:78:10:1d:
                    1b:0a:94:e5:7c:75:f2:17:2c:17:01:61:eb:c5:99:
                    77:aa:5d:03:15:9c:58:93:15:b4:12:c0:25:f9:d6:
                    83:1c:d9:b0:ac:73:4d:7b:60:ba:a0:76:f2:a9:4b:
                    2f:7c:47:ae:8e:42:62:e4:49:3d:25:98:55:3a:a2:
                    e6:fc:f0:a9:41:f4:d4:3c:0b:8a:6c:85:13:99:82:
                    cb:a4:e5:e7:60:af:1e:c1:05:2f:2a:86:e8:88:82:
                    98:31:92:0c:be:ee:12:15:70:1f:5e:7c:13:20:7c:
                    2c:e9:be:ab:e5:01:93:35:ce:05:15:cd:39:f8:07:
                    b6:88:5d:e6:bc:06:d1:5e:ba:23:45:c4:87:08:0a:
                    af:ed:6f:e6:01:a0:57:27:6a:dc:34:ab:1e:c7:a9:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:34:75:E4:8D:22:E5:19:1D:E5:B6:8F:92:FE:32:43:88:4A:1C:BC
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS11426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.13.0/24
                  191.101.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:48:26:8d:bc:65:f0:dc:27:2b:c1:4f:16:27:db:31:29:b6:
         68:31:52:46:71:fa:3b:ea:9e:bd:52:cc:75:93:1c:fa:0d:f6:
         80:51:d3:ff:44:94:0a:f9:b1:2f:0b:68:43:fc:36:33:7c:09:
         21:79:24:e6:3a:06:62:a7:d4:25:fe:c2:37:aa:64:b9:c3:c5:
         a8:c4:bf:dd:77:cc:e0:fb:35:0b:80:ea:49:5e:86:28:28:2b:
         47:a3:14:b8:32:4e:e3:bd:d5:eb:ab:1b:4a:c2:df:af:f1:2a:
         f4:f5:07:27:99:d8:fc:22:b5:f7:f0:3d:3e:2f:d5:d6:25:3f:
         b5:10:94:52:d6:4a:12:9c:cf:2e:c4:ec:93:7c:fd:e0:75:91:
         aa:df:c1:8f:30:ca:f2:ad:2d:4c:94:57:24:46:f3:8f:ae:b6:
         2f:e4:10:55:dc:73:e1:8e:dd:ce:30:b6:07:5b:7e:15:7a:23:
         82:21:3d:e0:53:84:43:dc:9c:38:11:71:dc:48:9a:0f:8c:0c:
         ac:79:8a:9e:59:7c:14:a6:c7:32:c0:7a:02:b6:b7:be:7a:ef:
         4a:aa:02:59:21:50:45:ce:1c:a9:f5:f8:c2:dd:e9:a8:01:a7:
         d8:f0:bc:a6:93:02:68:da:8d:c2:64:7f:0d:2c:de:85:ae:83:
         77:1f:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org