Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12129.roa
File:                     AS12129.roa (raw, json)
Hash identifier:          j++Ih8adE9NZYGQurtrG6m8wxqhyVkyeAo1OS7syvwA=
Subject key identifier:   12:78:CC:0B:E4:D4:8A:A7:18:A9:B0:39:D5:01:86:37:68:B7:0F:2E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       041215C9C21BEC144BAA3FF6530DAB88EA5F4A2D
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12129.roa
Signing time:             Wed 09 Mar 2022 13:30:44 +0000
ROA not before:           Wed 09 Mar 2022 13:25:44 +0000
ROA not after:            Wed 08 Mar 2023 13:30:44 +0000
asID:                     12129
IP address blocks:        45.137.125.0/24 maxlen: 24
                          181.214.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:12:15:c9:c2:1b:ec:14:4b:aa:3f:f6:53:0d:ab:88:ea:5f:4a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:25:44 2022 GMT
            Not After : Mar  8 13:30:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:68:3e:08:98:26:17:cd:7a:c8:03:ec:c7:
                    c3:a6:16:5e:88:a0:d1:22:14:25:f9:c4:5f:f2:5d:
                    6b:bc:41:8e:6f:5e:d9:57:bf:46:a1:63:77:a9:29:
                    58:58:44:ad:9a:3f:61:4a:08:37:69:1e:45:ab:ee:
                    16:79:29:2c:40:62:54:f8:77:d5:59:ad:54:a7:29:
                    07:5f:43:ea:08:93:32:a5:5f:5f:8b:67:54:a3:56:
                    3f:69:5a:94:32:76:11:b9:32:1d:e8:cf:13:7a:3e:
                    fd:16:f9:96:0c:d6:5b:8e:e1:c3:19:2c:41:fa:5f:
                    9a:56:b3:59:46:c3:07:81:3d:5d:22:2f:04:64:d9:
                    c3:96:2d:42:f8:31:67:2b:8e:62:2a:84:c1:14:3f:
                    fa:92:3d:8c:88:5d:ec:55:e7:70:c9:cd:f2:e6:27:
                    ad:3d:e8:bd:41:eb:20:a5:07:92:d6:5b:91:f9:cd:
                    65:ab:21:b2:07:b7:62:86:74:0f:f1:8b:62:c9:8c:
                    12:0f:f0:3b:22:16:10:f0:9e:80:e3:09:b0:9f:05:
                    fb:41:23:aa:26:24:6a:95:e2:af:e6:b6:a3:84:c9:
                    32:4e:e7:62:6b:e3:20:17:68:ca:2d:d3:81:3e:7d:
                    6d:5e:d5:1f:26:b1:34:31:57:de:8d:fb:6c:ae:0b:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:CC:0B:E4:D4:8A:A7:18:A9:B0:39:D5:01:86:37:68:B7:0F:2E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.125.0/24
                  181.214.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:a2:cd:d4:bd:bf:c1:3d:92:c7:c4:c0:59:7d:a5:29:54:
         0b:30:7c:77:16:8f:5a:c2:b2:16:3d:d1:b3:1a:34:4a:1e:1e:
         a4:1d:75:c9:8c:b9:63:41:46:5e:d4:ee:c4:16:01:80:28:c3:
         af:3a:80:42:61:ec:2e:b3:0b:50:4c:3f:95:4d:61:57:fc:34:
         25:e4:59:1c:78:25:55:b3:23:5e:24:34:83:4c:68:ad:0a:b2:
         09:c9:3f:63:84:9a:ea:07:89:00:e7:ee:af:18:e3:f7:2b:36:
         70:3d:97:21:58:c5:cd:af:e9:3d:c2:73:b2:7e:f7:e8:b4:5b:
         9d:83:a9:84:69:4a:c5:a6:56:84:57:ae:2c:d1:3b:71:94:95:
         70:a7:2e:f2:3d:41:25:ae:5d:aa:d7:2e:35:4e:02:b7:46:a4:
         27:66:74:79:97:ba:b6:ba:12:ef:d3:1c:77:8f:b2:f1:fa:88:
         72:9d:06:c0:a7:53:a9:12:e2:ec:cd:e3:9a:9c:a0:a2:1d:e4:
         06:72:de:38:12:53:9f:53:05:ad:01:3b:15:0d:14:97:47:fd:
         4b:09:0c:82:af:c4:f1:4d:fa:88:b6:56:eb:40:7b:a7:75:41:
         8f:2b:1c:05:9d:4e:52:80:56:ac:94:52:7a:f6:e5:9e:76:d2:
         4a:e4:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org