Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270014.roa
File:                     AS270014.roa (raw, json)
Hash identifier:          JO4d1zoWz2Tij457oYkXXT/vdH5Agni9xmxw2mznMWI=
Subject key identifier:   CF:B6:2E:4F:6C:2B:F2:1B:03:4E:33:3B:7E:A1:CC:4C:5B:CF:C5:5A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3AE8B96C9414C84AACF3909FFC6ED138025BE2B8
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270014.roa
Signing time:             Wed 09 Mar 2022 13:37:45 +0000
ROA not before:           Wed 09 Mar 2022 13:32:45 +0000
ROA not after:            Wed 08 Mar 2023 13:37:45 +0000
asID:                     270014
IP address blocks:        191.96.184.0/24 maxlen: 24
                          191.101.192.0/24 maxlen: 24
                          191.101.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e8:b9:6c:94:14:c8:4a:ac:f3:90:9f:fc:6e:d1:38:02:5b:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:45 2022 GMT
            Not After : Mar  8 13:37:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:dc:17:47:c8:3d:22:c6:70:f2:76:a7:2e:
                    ce:96:8e:8a:1b:9c:26:67:23:01:50:c8:79:ba:9f:
                    96:c9:3a:ad:b0:4e:0a:73:52:df:f4:82:24:a9:05:
                    f7:18:9c:bf:a7:e9:47:e5:54:1c:ad:2c:ac:b1:12:
                    ae:be:2b:05:fa:aa:fb:ae:7f:c3:8d:99:5f:ff:1a:
                    74:b5:67:98:71:0d:64:3b:62:34:81:06:ba:84:e6:
                    52:b1:68:b0:77:1a:62:5c:d7:b2:6f:3d:3b:cf:8d:
                    fb:09:1c:16:d2:23:3e:28:bf:f1:c4:7c:b1:03:4a:
                    6e:b7:4f:fc:2c:f6:98:f4:8b:2c:6c:4f:56:0d:6a:
                    c2:f3:0f:df:32:8b:63:39:72:38:07:f9:ee:b6:da:
                    16:36:79:2a:9a:46:f4:74:79:a1:20:72:e1:4a:3b:
                    16:23:45:34:66:29:aa:4f:87:39:b3:95:b9:de:61:
                    c0:86:7d:58:9a:55:da:0e:d9:36:9f:93:49:c8:2a:
                    f8:87:41:10:77:93:ad:16:c4:21:c3:77:0d:96:68:
                    9d:3e:a2:3f:d1:89:35:70:e6:b6:a4:12:01:c6:57:
                    3a:aa:9e:19:80:1f:cc:5f:dc:61:85:ce:b0:c2:96:
                    c6:13:b1:4b:d3:2b:b5:e1:5b:af:62:d1:e8:9b:8b:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:2E:4F:6C:2B:F2:1B:03:4E:33:3B:7E:A1:CC:4C:5B:CF:C5:5A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270014.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.184.0/24
                  191.101.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:31:04:3a:e9:1e:51:8a:ca:95:e2:b4:30:45:dd:03:ca:
         51:71:7a:be:6f:7d:50:30:2e:4e:59:d2:aa:ae:ec:1b:bf:61:
         8e:aa:55:23:f5:e9:79:0b:0f:bd:22:fd:ac:c7:81:e6:09:7c:
         a2:35:7b:2a:4a:bb:13:32:7f:a6:b3:be:60:95:a9:a5:45:82:
         8d:60:97:35:7b:09:f1:60:2c:a9:9e:f3:b7:0f:3f:39:d7:b2:
         2f:d8:bd:01:f5:96:6d:a9:99:0b:b2:f3:db:3b:64:cc:ce:40:
         67:a1:9e:28:83:d3:f6:4a:75:72:66:bf:01:cb:18:21:b3:96:
         38:8d:a7:89:cd:c4:15:55:94:67:7f:c1:b9:b3:01:a3:3b:3a:
         81:3d:d3:b8:2b:47:66:f8:17:08:5f:4c:90:21:79:d1:a4:23:
         25:11:8f:17:65:0a:54:52:ca:8d:5b:48:c7:7e:da:2f:ad:a4:
         f5:8a:91:b3:69:15:69:fa:0e:7d:5c:d2:83:53:11:81:c0:e4:
         b7:6d:53:00:f9:0b:1f:89:ad:6f:19:c5:0a:d1:e0:5b:c6:46:
         a2:1a:ab:77:f6:53:86:1a:40:e8:d4:7a:a9:22:b0:9c:40:44:
         48:44:01:be:e8:ef:5b:13:c0:07:49:88:41:46:5d:b7:30:65:
         68:de:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org