Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS135375.roa
File:                     AS135375.roa (raw, json)
Hash identifier:          /5foo2Uu7QSJEtxOVanRajlDSN+r509uHff0fn08PIo=
Subject key identifier:   14:41:A5:A4:96:91:50:21:75:B7:19:D4:56:00:E9:33:08:AD:2C:33
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       66C01C0C9BCBB807AD143D876D63D08BF10251A2
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS135375.roa
Signing time:             Mon 25 Apr 2022 17:06:06 +0000
ROA not before:           Mon 25 Apr 2022 17:01:06 +0000
ROA not after:            Mon 24 Apr 2023 17:06:06 +0000
asID:                     135375
IP address blocks:        45.133.168.0/24 maxlen: 24
                          181.214.168.0/24 maxlen: 24
                          181.214.169.0/24 maxlen: 24
                          181.214.180.0/24 maxlen: 24
                          191.96.158.0/24 maxlen: 24
                          193.58.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c0:1c:0c:9b:cb:b8:07:ad:14:3d:87:6d:63:d0:8b:f1:02:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 25 17:01:06 2022 GMT
            Not After : Apr 24 17:06:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:f7:3a:4c:24:aa:0a:c9:3c:f2:9e:ea:eb:
                    ce:7c:3a:63:53:a4:a9:f0:59:1d:bf:93:9b:83:d8:
                    65:63:91:38:0f:a2:32:b5:15:78:42:20:74:38:90:
                    33:db:15:61:8c:b3:47:e8:94:72:19:50:dd:32:13:
                    17:5f:22:db:56:dc:c6:fa:d0:85:5b:20:57:c7:6b:
                    c1:ea:f2:de:04:3e:e7:db:ae:8d:79:d6:43:02:c9:
                    71:1d:79:b9:6f:5b:3f:b1:ac:08:6b:65:5b:59:84:
                    4a:f0:fe:d9:00:33:58:c0:32:bf:7f:62:42:41:2f:
                    59:af:be:ed:6a:40:c7:82:04:44:ba:81:66:89:0c:
                    37:16:cd:fb:12:ec:75:08:b2:de:89:93:5a:8c:09:
                    03:08:64:f8:a9:60:1f:d5:98:7b:ae:80:93:24:78:
                    36:5b:c9:85:e6:c9:82:7d:56:11:84:f4:e1:3d:02:
                    7b:ea:eb:30:cb:be:a7:07:88:e2:5c:18:82:09:33:
                    1e:3e:b4:54:9e:f3:41:46:a0:ae:45:9b:90:7f:50:
                    e6:f0:54:8e:31:cb:98:9c:df:2c:d3:94:2b:f3:ae:
                    9b:cc:67:30:0b:aa:1c:dd:e5:fe:5d:bb:d4:b7:e9:
                    c6:ca:4f:8f:e7:71:a0:39:0c:14:b8:51:18:20:9a:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:A5:A4:96:91:50:21:75:B7:19:D4:56:00:E9:33:08:AD:2C:33
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS135375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.168.0/24
                  181.214.168.0/23
                  181.214.180.0/24
                  191.96.158.0/24
                  193.58.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:28:01:7a:8f:b0:4d:0f:49:e8:b7:26:60:d7:34:b3:2f:
         52:5e:ee:b3:d6:71:ce:3a:59:9f:fc:64:d1:31:04:e0:35:17:
         ce:70:60:4c:dc:29:30:cf:77:c9:41:c9:08:eb:de:b3:df:d0:
         c7:0a:7c:b6:2c:18:29:9a:a1:02:6e:dc:85:c5:f1:d9:f6:9e:
         4e:23:76:0d:09:07:1f:9e:36:9f:c4:34:a3:d6:ed:c9:e2:09:
         56:58:4e:dc:4b:42:29:27:d8:00:a7:a1:1f:a8:e6:6a:67:ec:
         cf:42:02:c4:1f:11:d7:ce:a3:82:f4:9b:be:f9:0c:99:86:e7:
         da:42:e7:ed:d5:f5:bb:17:b2:29:9b:9b:d3:1c:45:18:71:f4:
         1f:ce:46:57:a2:7e:36:d7:3e:0b:eb:63:c8:97:7d:59:28:72:
         2e:e6:1a:91:71:a3:45:74:be:94:14:e3:1e:ab:c0:20:36:e8:
         36:10:01:70:aa:6d:09:47:91:2e:f1:1c:81:81:e1:8d:a3:2e:
         db:22:2e:41:26:ad:11:4e:0e:84:67:d4:f5:b3:76:35:85:36:
         f8:ed:c7:c9:1a:6f:43:3c:06:88:a3:a9:5d:ca:6e:1c:31:be:
         f8:73:2a:6d:6b:ad:43:6a:1d:c5:53:24:f4:65:c3:e5:ec:8b:
         b8:9b:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org