Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          y5U9XkH3WvGgMlsztzkUKdTR/X/MHMwGik5PTbH9Ukk=
Subject key identifier:   4B:CA:3E:67:BB:11:DB:19:A0:49:80:56:D6:02:64:A1:4C:58:ED:78
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5A3A6DC675CB9DC249961D2537AEAC8A8F7BA0C7
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29802.roa
Signing time:             Fri 15 Apr 2022 12:31:56 +0000
ROA not before:           Fri 15 Apr 2022 12:26:56 +0000
ROA not after:            Fri 14 Apr 2023 12:31:56 +0000
asID:                     29802
IP address blocks:        191.96.170.0/24 maxlen: 24
                          191.101.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3a:6d:c6:75:cb:9d:c2:49:96:1d:25:37:ae:ac:8a:8f:7b:a0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 15 12:26:56 2022 GMT
            Not After : Apr 14 12:31:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:01:0a:19:0d:09:5d:b6:ae:85:87:7d:8c:
                    d7:af:2c:7f:8f:68:05:cc:60:d9:8a:2d:b1:60:34:
                    06:07:4a:11:85:c8:e4:dc:3d:fd:94:56:36:a0:25:
                    3c:d1:10:32:11:47:b8:ce:04:02:67:79:09:23:3d:
                    67:f0:31:c8:aa:0d:b0:97:58:0a:c8:c2:17:04:de:
                    79:05:2a:fa:46:dd:82:9d:39:66:70:98:11:bc:86:
                    9b:d7:d1:24:f2:25:eb:24:b1:c8:fa:d3:90:29:88:
                    64:c5:f5:24:32:8e:1d:d1:28:75:c5:7b:32:07:98:
                    11:a2:f1:9b:ea:9d:5c:a4:1a:7f:74:2f:22:10:c2:
                    36:4b:99:5e:ec:89:54:e8:bf:1e:7e:25:98:8c:e8:
                    9f:cf:f7:4d:20:0c:be:38:8f:f9:49:f1:07:fb:0d:
                    e8:47:45:74:43:83:c1:79:11:b0:4b:8b:20:ac:67:
                    9c:b6:09:98:b3:cb:90:a3:fa:5f:4f:c6:ea:5c:17:
                    bd:63:f6:bb:75:ce:85:36:33:63:1a:df:94:b8:5f:
                    1f:80:61:31:c7:9e:d9:d7:0b:26:13:c3:e4:f4:96:
                    7d:60:3d:ec:4b:58:51:58:50:94:f8:58:83:bd:83:
                    fd:5e:f5:a8:6c:02:72:53:57:9a:76:3b:d8:c6:0a:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:3E:67:BB:11:DB:19:A0:49:80:56:D6:02:64:A1:4C:58:ED:78
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.170.0/24
                  191.101.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:f5:31:55:b6:86:ed:df:02:2f:7f:8c:bd:c6:db:5c:e8:
         77:72:4f:f3:42:a9:f7:02:59:2b:ca:26:f4:b9:2e:38:ce:9f:
         ac:ad:5c:d4:4c:8d:2f:b4:1d:99:b8:8f:5c:30:5c:0e:d4:32:
         bb:78:20:05:89:7c:35:85:96:81:fd:0f:53:2e:38:f1:e0:52:
         28:24:9f:3c:f4:a2:f7:8c:50:ea:59:2a:16:33:88:31:4a:13:
         5c:e9:e1:0d:b9:12:8e:a1:1f:ec:7e:28:08:ee:c0:64:ee:72:
         7a:50:e0:40:9a:e1:8f:dd:28:00:79:ff:92:33:61:29:13:12:
         4b:26:fa:41:4a:52:13:80:b5:4f:6d:59:7f:6c:15:3d:38:fe:
         82:79:d2:4c:2a:4d:96:91:07:37:92:14:da:97:ce:59:81:10:
         2c:fd:9f:91:b2:bc:88:7e:02:32:98:dc:30:5a:b2:42:05:e2:
         f2:14:93:81:09:b0:28:c0:e5:84:d0:ee:e5:a0:02:24:2c:c9:
         62:86:ad:49:e0:69:b4:59:46:90:03:1f:54:f7:79:c7:25:93:
         0c:0d:f1:59:2b:a5:ed:72:c8:36:d4:da:e4:26:70:ce:77:53:
         1a:cc:3d:56:5f:0d:8f:dc:fc:e2:a3:b3:ff:72:29:1c:fb:79:
         6a:7e:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org