Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS28753.roa
File:                     AS28753.roa (raw, json)
Hash identifier:          JpKMssSP6Rz9eS5A2bcXMxRwdOxfafFv3N4+StHm66I=
Subject key identifier:   95:6A:DB:17:78:B0:6C:3E:34:4A:37:22:BF:79:80:06:86:E9:8B:B0
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1E2286B7E70B683ED802F52E56EEF71027D8B94E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS28753.roa
Signing time:             Wed 09 Mar 2022 13:35:32 +0000
ROA not before:           Wed 09 Mar 2022 13:30:32 +0000
ROA not after:            Wed 08 Mar 2023 13:35:32 +0000
asID:                     28753
IP address blocks:        45.137.119.0/24 maxlen: 24
                          92.118.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:22:86:b7:e7:0b:68:3e:d8:02:f5:2e:56:ee:f7:10:27:d8:b9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:30:32 2022 GMT
            Not After : Mar  8 13:35:32 2023 GMT
        Subject: CN=3082010A028201010094E28E887E5D9394E07683BCE9B36DDA1872BBD48550FDB0559854B2EF1BE180362EDD64C2BE348FF7EF905D83C3788CCD230D062B7D7FB5930EF9B9D898CE3E954B2ADA0FAF4160D5B4792367C434CEFF80D31466DE32A04349AA89B2469657D6B65B64643E1564FDBDD970E469BBC10958324D8890EAA54A6F5CE63A560BD0BC6455D8CEF79A786DFD48C93A357040759C0B0A99DE074FE7784282C97D7B4635129F3663922CDD0940AFDE2C683841018F8E5AE531B5D60D361097D0F4AFFAD0674429529DA6B6EDB937437A7A1F9162880401E490A147E3952C8F6ABA2CC483123D948340C5B8ACBF79CA2FC32B592ABF6A9627FB61657EAB7ADC4CBA2B250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:8e:88:7e:5d:93:94:e0:76:83:bc:e9:b3:
                    6d:da:18:72:bb:d4:85:50:fd:b0:55:98:54:b2:ef:
                    1b:e1:80:36:2e:dd:64:c2:be:34:8f:f7:ef:90:5d:
                    83:c3:78:8c:cd:23:0d:06:2b:7d:7f:b5:93:0e:f9:
                    b9:d8:98:ce:3e:95:4b:2a:da:0f:af:41:60:d5:b4:
                    79:23:67:c4:34:ce:ff:80:d3:14:66:de:32:a0:43:
                    49:aa:89:b2:46:96:57:d6:b6:5b:64:64:3e:15:64:
                    fd:bd:d9:70:e4:69:bb:c1:09:58:32:4d:88:90:ea:
                    a5:4a:6f:5c:e6:3a:56:0b:d0:bc:64:55:d8:ce:f7:
                    9a:78:6d:fd:48:c9:3a:35:70:40:75:9c:0b:0a:99:
                    de:07:4f:e7:78:42:82:c9:7d:7b:46:35:12:9f:36:
                    63:92:2c:dd:09:40:af:de:2c:68:38:41:01:8f:8e:
                    5a:e5:31:b5:d6:0d:36:10:97:d0:f4:af:fa:d0:67:
                    44:29:52:9d:a6:b6:ed:b9:37:43:7a:7a:1f:91:62:
                    88:04:01:e4:90:a1:47:e3:95:2c:8f:6a:ba:2c:c4:
                    83:12:3d:94:83:40:c5:b8:ac:bf:79:ca:2f:c3:2b:
                    59:2a:bf:6a:96:27:fb:61:65:7e:ab:7a:dc:4c:ba:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6A:DB:17:78:B0:6C:3E:34:4A:37:22:BF:79:80:06:86:E9:8B:B0
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS28753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.119.0/24
                  92.118.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:e4:9e:43:f8:ff:d1:7e:58:c1:04:67:89:8f:7f:27:c6:
         ec:48:85:40:3c:cc:9b:db:8b:45:47:29:8b:36:bf:72:5f:1c:
         cf:d5:1f:b3:ba:1a:ee:0f:01:9f:13:01:e3:77:d4:07:0d:13:
         83:9b:58:b9:e1:aa:0e:34:5a:a2:e0:94:32:c4:c6:07:a0:aa:
         33:f2:19:f4:31:24:7c:e2:78:df:21:db:47:f6:f4:89:56:bf:
         8f:8e:2f:98:51:2f:cf:f5:ac:81:b7:dc:93:ec:50:df:74:c7:
         4c:5a:30:e9:9c:34:8f:8e:9e:38:bd:4e:cc:08:fe:52:ac:b3:
         ec:dd:75:91:06:8e:4a:0a:fb:9a:53:37:2e:64:74:69:75:d7:
         91:0c:be:c1:d5:28:57:bf:79:68:da:4e:bb:07:8e:42:15:98:
         2f:ff:32:e6:8f:f3:66:bc:9a:3a:77:9b:52:dc:51:37:ae:04:
         6d:7d:56:ca:69:ca:2d:42:b4:5d:0c:12:1d:08:90:51:a8:fb:
         f3:3d:54:85:9c:6b:61:ba:23:62:aa:36:a8:75:bb:f0:e8:12:
         b4:d6:78:f6:e4:7f:a6:4f:3e:71:b8:f4:23:37:d0:56:d7:02:
         82:20:a0:ce:ad:9f:19:1a:33:95:83:92:5a:b2:17:98:a0:64:
         17:e6:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org