Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS137571.roa
File:                     AS137571.roa (raw, json)
Hash identifier:          WG381b5BSdThKdMOuaG9pIChQVUg2i0P09hbTaIEhAo=
Subject key identifier:   0D:24:B1:15:E2:1A:7F:C9:1C:35:BB:BC:58:44:1D:F6:9F:8B:51:F5
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       10D9B4433B62F43933441D56A234DC58438DCCF0
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS137571.roa
Signing time:             Fri 20 May 2022 14:39:22 +0000
ROA not before:           Fri 20 May 2022 14:34:22 +0000
ROA not after:            Fri 19 May 2023 14:39:22 +0000
asID:                     137571
IP address blocks:        191.101.44.0/22 maxlen: 24
                          191.101.45.0/24 maxlen: 24
                          191.101.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:b4:43:3b:62:f4:39:33:44:1d:56:a2:34:dc:58:43:8d:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: May 20 14:34:22 2022 GMT
            Not After : May 19 14:39:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:b1:96:5b:11:13:e7:97:6b:89:2a:55:47:
                    24:17:2b:57:3f:a2:6f:db:5c:89:55:76:a8:16:0c:
                    91:a2:67:96:c9:cf:75:de:6a:a3:35:da:8b:b4:e0:
                    f3:a2:33:85:3a:90:e5:b0:76:cb:36:e4:d0:4b:10:
                    1c:89:18:33:76:50:51:df:26:74:e6:65:53:a6:e6:
                    9e:db:3d:bb:b3:09:ed:9c:30:6a:ff:47:a8:0c:dd:
                    3c:ee:83:c7:5a:fd:d8:1a:2a:3d:5e:fd:b4:af:e4:
                    0f:87:4a:ba:8d:7d:24:42:69:68:c1:e9:85:ab:11:
                    c6:9a:4b:66:2b:3a:bf:47:df:5a:cb:50:4a:19:5c:
                    03:dd:6c:da:b6:e1:d2:fd:c0:30:40:f1:c6:70:31:
                    60:03:db:5e:36:01:ff:0d:95:1c:2a:aa:c6:d3:bb:
                    23:3c:8a:54:1e:51:b5:83:28:8e:76:c8:3a:f1:0d:
                    d1:29:b5:16:f5:f6:e3:c9:bc:33:bd:63:06:0c:ec:
                    31:af:93:8c:6b:ed:9f:16:f5:68:b8:70:17:8b:dd:
                    75:2f:3d:e3:bc:52:27:09:d0:bf:36:7e:81:2c:9a:
                    2c:95:8c:eb:b4:6d:8a:4e:74:f4:e5:5d:35:26:4c:
                    9c:a9:0d:64:f3:b2:43:ab:ad:81:19:66:f1:8a:37:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:B1:15:E2:1A:7F:C9:1C:35:BB:BC:58:44:1D:F6:9F:8B:51:F5
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS137571.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:87:21:9e:ec:a8:e4:12:25:6c:d6:01:df:7b:d0:77:9a:d4:
         86:e9:07:18:cf:e1:be:59:23:06:fe:9f:f8:2c:97:b5:c5:8c:
         c1:58:0a:58:2d:88:ed:17:1e:37:96:e5:a8:aa:69:a5:53:50:
         b7:b9:fc:84:66:3d:3f:b4:97:09:87:65:29:d6:58:f1:b8:a7:
         65:75:16:6c:0c:30:aa:2d:8e:0e:f3:0d:ff:1e:b7:25:b5:84:
         ff:33:f3:d5:db:b7:4c:af:77:45:4a:84:d3:92:8c:6e:ce:9a:
         46:58:68:24:e2:8e:4e:f6:79:75:e3:9f:b6:47:6a:04:6d:9f:
         e4:8d:61:eb:bb:85:74:ac:b0:bd:83:b9:40:28:f5:95:2b:4d:
         d9:0f:f7:91:90:b1:d6:c8:d1:4b:7a:65:4a:79:34:5a:38:07:
         ab:17:5f:e0:8b:bd:8e:b9:54:ce:2a:64:5b:1b:c4:a4:dc:74:
         7e:e4:e8:b6:c3:a9:c2:b0:0d:da:50:1d:eb:8e:39:e1:d1:a3:
         2d:b9:5c:c9:e5:bc:43:67:ac:ef:a9:ec:2e:38:3a:98:13:ad:
         84:66:07:9e:38:fc:75:3f:96:ff:97:bc:23:fe:ff:87:c1:2a:
         60:7b:66:a5:e2:92:1f:39:e8:66:17:03:9f:cc:5e:a8:a2:ed:
         21:13:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org