Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211017.roa
File:                     AS211017.roa (raw, json)
Hash identifier:          WX3lm5JBWFKcTS1Eej2eU9W85bDfpcMwVD36RgXSfa0=
Subject key identifier:   31:00:37:75:09:05:00:15:57:46:71:50:D6:D9:17:2C:E7:09:C3:77
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3E8A353D9FA44DC3CF57821858B40B88660469A9
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211017.roa
Signing time:             Wed 09 Mar 2022 13:37:42 +0000
ROA not before:           Wed 09 Mar 2022 13:32:42 +0000
ROA not after:            Wed 08 Mar 2023 13:37:42 +0000
asID:                     211017
IP address blocks:        45.89.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:35:3d:9f:a4:4d:c3:cf:57:82:18:58:b4:0b:88:66:04:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:42 2022 GMT
            Not After : Mar  8 13:37:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:86:17:df:f3:de:75:3a:2e:c4:a0:0e:82:
                    b0:98:c7:53:88:b8:9e:3b:05:e5:92:77:08:50:72:
                    44:0a:3a:fb:36:bd:5c:b0:d7:41:54:44:ae:a5:91:
                    2e:6c:df:25:11:1b:bb:66:bc:cf:8e:66:d8:ae:97:
                    6a:16:34:36:ef:04:24:60:78:53:3e:f7:f6:6b:2d:
                    c8:27:fd:99:10:9e:97:61:62:cd:54:0c:83:52:76:
                    5a:68:0c:f8:9e:43:6c:be:7f:1f:93:d2:4d:c7:9d:
                    e3:85:7a:a1:b9:c4:68:55:9c:0c:2a:07:40:74:9c:
                    90:6d:d0:25:6f:a0:a8:98:ff:56:5d:c4:c4:14:77:
                    4f:a9:b1:b1:95:10:0c:cd:30:b7:30:4b:6a:be:b1:
                    3b:a6:f7:11:28:2b:23:e1:10:e4:70:da:e8:09:c8:
                    96:41:e5:b4:23:af:7b:48:a6:ec:84:ed:97:6a:74:
                    a8:cc:a0:8d:83:8a:64:ee:41:9f:29:00:2e:b7:00:
                    1e:b2:c1:6b:3c:2a:2c:58:b0:3d:a1:05:80:e2:70:
                    5b:e4:7d:a1:0e:b2:a1:15:05:fb:3e:a6:54:98:9d:
                    50:f5:33:d7:c5:99:aa:06:9f:9f:3e:ab:cc:12:01:
                    1b:72:e8:13:dc:a8:92:43:d6:7b:3b:ec:0b:2b:15:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:00:37:75:09:05:00:15:57:46:71:50:D6:D9:17:2C:E7:09:C3:77
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211017.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:e4:ab:d6:19:93:6c:6c:66:df:94:63:48:71:4f:1a:cb:
         96:5e:a8:0b:71:d2:d3:e7:7a:01:f6:f3:9b:6a:2d:cb:37:e9:
         2f:50:e2:ee:ec:f5:04:6d:d7:02:9c:3c:7e:92:7b:48:ea:db:
         2e:43:f9:f7:0e:9a:ad:59:70:22:33:ab:c0:77:8c:d7:ef:d2:
         21:93:f0:0b:b9:8c:4e:f4:7c:0d:39:83:df:61:b9:9f:c7:98:
         9a:8f:9f:e8:32:08:44:f1:9b:e7:5a:f1:8a:1b:2e:6f:d9:52:
         4d:01:00:30:60:dd:d9:8c:f7:f6:3f:42:e3:ce:4f:29:8e:bf:
         d1:e4:12:36:ee:73:67:d5:0a:84:76:04:d6:61:30:a6:9d:13:
         f4:1a:e6:f0:56:5a:d7:1e:58:de:f2:e5:27:f5:30:4b:01:db:
         a0:e1:1f:ac:7f:2c:51:11:d1:13:c0:15:f5:74:e6:b2:bd:59:
         3c:b9:67:2c:47:d3:7c:a6:5a:af:5a:10:56:58:43:1a:94:95:
         20:06:cd:08:b2:a4:37:30:00:1f:8d:29:26:d6:41:f3:4a:3c:
         a9:1a:53:11:eb:d9:37:16:e8:19:5d:83:11:8d:f4:23:9e:cd:
         40:c5:73:9b:82:a8:21:4f:71:1c:c0:3a:a8:52:97:70:8c:c2:
         38:6a:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org