Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267809.roa
File:                     AS267809.roa (raw, json)
Hash identifier:          a4GGLtaROCfHJorAGakjl9mRbhCpMILhpkkU15q4HIw=
Subject key identifier:   FF:E7:B3:2D:7D:21:70:02:55:A3:A3:98:4C:16:DC:D5:94:36:CE:25
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       79684AE8E964D24731C1C2359E7001C7581D6C51
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267809.roa
Signing time:             Wed 09 Mar 2022 13:37:45 +0000
ROA not before:           Wed 09 Mar 2022 13:32:45 +0000
ROA not after:            Wed 08 Mar 2023 13:37:45 +0000
asID:                     267809
IP address blocks:        191.96.231.0/24 maxlen: 24
                          191.101.25.0/24 maxlen: 24
                          191.101.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:4a:e8:e9:64:d2:47:31:c1:c2:35:9e:70:01:c7:58:1d:6c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:45 2022 GMT
            Not After : Mar  8 13:37:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:0f:31:b8:e0:a7:90:2e:2e:19:3e:10:84:
                    7b:65:b6:60:19:15:78:d5:5b:01:a9:94:36:ae:7c:
                    e1:da:de:77:65:76:2f:83:5d:49:bb:30:13:2d:48:
                    19:33:5b:e3:53:7a:32:9d:39:0f:78:08:53:b0:35:
                    b7:88:30:eb:58:07:37:04:21:c1:ab:ac:6b:70:2e:
                    5f:e6:ce:5f:ff:2e:b3:0b:c9:2d:e7:81:ef:3c:12:
                    6b:7c:77:a0:22:9c:a1:55:de:a8:b0:4b:aa:12:3b:
                    51:02:10:53:98:a3:03:33:e6:6f:10:54:1e:62:5b:
                    1f:5b:b3:60:2c:51:b0:8e:25:c5:e8:66:33:e1:9b:
                    b2:db:63:ab:d3:e2:6b:6f:ba:be:0e:4c:2f:f3:00:
                    d1:f1:e0:c6:5a:2b:ca:3f:78:a8:6f:cc:5f:73:da:
                    f5:d5:d7:1d:53:05:c0:0a:d3:e8:07:a7:e8:cc:12:
                    37:1b:2d:b4:ae:32:52:81:c8:23:85:4b:a5:32:97:
                    08:86:49:37:8b:83:25:65:89:4a:70:9d:3a:c6:7d:
                    03:52:0c:e2:f3:c5:7c:9a:72:e2:1b:f4:bc:17:d2:
                    83:f1:f2:e0:e5:39:0e:b9:78:1b:a1:dc:b6:90:d6:
                    c6:c4:02:90:8a:9e:76:2a:24:a5:7f:f1:62:5d:0e:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E7:B3:2D:7D:21:70:02:55:A3:A3:98:4C:16:DC:D5:94:36:CE:25
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.231.0/24
                  191.101.25.0/24
                  191.101.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:d8:5f:11:e2:fc:78:3b:c5:f7:7b:46:b5:60:db:f0:a5:
         f5:63:24:cd:64:dc:c4:f1:1b:88:5c:7b:55:f5:f4:95:16:fb:
         03:fd:51:82:86:d6:35:34:5a:43:df:53:6d:a3:7d:53:7f:d6:
         01:f6:07:94:f4:6e:d5:c4:7c:6d:ff:7f:3a:29:48:ce:cc:75:
         fd:db:47:4f:89:59:45:a7:a5:23:37:60:b5:a2:03:5c:6c:0e:
         ab:38:65:da:ea:f2:84:6e:1c:a4:6c:22:30:e4:59:6f:3e:59:
         d2:51:7b:ba:1e:7b:4b:ac:84:51:b2:60:e8:ad:66:80:29:43:
         76:e1:48:3d:aa:8d:44:65:ba:ed:d2:11:ae:55:0c:84:5e:c5:
         cc:95:ca:53:94:c6:4a:a9:82:28:1f:bd:ff:7b:a8:c1:85:bc:
         9a:c1:0b:e3:9f:f0:08:bb:4a:b2:c3:10:87:32:f0:ef:32:7f:
         2e:f1:64:d5:01:f8:2c:ff:c7:35:95:47:ce:b7:8a:40:bb:45:
         d2:8f:f8:f8:9a:03:c2:6c:60:0a:75:1b:a8:11:bd:2f:88:f3:
         66:c8:d2:4c:34:c0:5d:5d:4d:52:e9:b7:3c:cf:7e:9e:c3:b5:
         3c:7c:65:36:6e:ee:68:7d:ff:37:04:77:5e:f9:91:25:6d:f5:
         ce:4e:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org