Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397373.roa
File:                     AS397373.roa (raw, json)
Hash identifier:          3mAiyBiAikBUFVwAvnTQJ0wZSZv7/mfn8lwLdk/4ID8=
Subject key identifier:   50:9D:98:19:88:D1:7A:70:6A:C5:06:26:9C:8E:1C:34:2B:16:21:7E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       58780FE16B33167ABA85F994DC360691A9C41515
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397373.roa
Signing time:             Sat 11 Jun 2022 05:02:55 +0000
ROA not before:           Sat 11 Jun 2022 04:57:55 +0000
ROA not after:            Sat 10 Jun 2023 05:02:55 +0000
asID:                     397373
IP address blocks:        179.61.223.0/24 maxlen: 24
                          179.61.252.0/24 maxlen: 24
                          181.41.215.0/24 maxlen: 24
                          181.214.47.0/24 maxlen: 24
                          181.214.217.0/24 maxlen: 24
                          181.215.5.0/24 maxlen: 24
                          181.215.248.0/24 maxlen: 24
                          181.215.249.0/24 maxlen: 24
                          185.172.64.0/24 maxlen: 24
                          185.172.67.0/24 maxlen: 24
                          191.96.25.0/24 maxlen: 24
                          191.96.32.0/24 maxlen: 24
                          191.96.131.0/24 maxlen: 24
                          191.96.177.0/24 maxlen: 24
                          191.96.194.0/24 maxlen: 24
                          191.96.221.0/24 maxlen: 24
                          191.96.246.0/24 maxlen: 24
                          191.101.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:78:0f:e1:6b:33:16:7a:ba:85:f9:94:dc:36:06:91:a9:c4:15:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 11 04:57:55 2022 GMT
            Not After : Jun 10 05:02:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:dd:ef:a6:e7:b2:c5:69:d7:7e:30:2c:a0:
                    ca:b6:76:9a:ef:84:ff:6a:0b:1a:11:fa:04:54:e7:
                    81:4c:38:71:1e:e0:b2:e7:1c:76:f6:fa:74:0e:c5:
                    7e:6a:60:c1:7d:16:05:7b:12:39:0e:ba:a0:a8:e8:
                    50:b3:7b:69:e4:75:57:ef:8e:f7:c6:64:cc:e2:89:
                    6a:57:97:15:a3:d3:59:66:57:f7:d8:27:62:3d:e1:
                    c5:38:f3:43:e5:43:17:d8:8c:63:a4:ff:a2:fe:5d:
                    24:6f:be:58:b8:43:2f:74:c1:d1:63:88:93:d0:9e:
                    fb:8d:a7:23:05:51:fa:db:97:ab:7b:5d:3b:e4:b2:
                    fd:01:d5:13:1a:49:22:6f:7a:95:e3:a9:f4:68:f7:
                    1b:cd:49:51:78:9f:69:f0:64:12:dc:cd:b4:f0:88:
                    73:90:a0:63:90:34:9d:20:1c:ff:80:28:38:a0:72:
                    72:ab:ad:e2:6e:56:d9:e6:47:21:01:8c:33:5f:b3:
                    2a:aa:d5:1d:d8:22:aa:bd:ba:99:1f:15:08:89:65:
                    8b:2f:af:d4:25:ce:55:f2:8e:7b:15:e8:28:3e:92:
                    44:b8:d8:91:1f:91:a6:a5:23:8e:a7:a9:76:6a:eb:
                    bd:dd:64:bc:51:80:7f:ad:ba:bf:58:43:89:03:2e:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9D:98:19:88:D1:7A:70:6A:C5:06:26:9C:8E:1C:34:2B:16:21:7E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS397373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.223.0/24
                  179.61.252.0/24
                  181.41.215.0/24
                  181.214.47.0/24
                  181.214.217.0/24
                  181.215.5.0/24
                  181.215.248.0/23
                  185.172.64.0/24
                  185.172.67.0/24
                  191.96.25.0/24
                  191.96.32.0/24
                  191.96.131.0/24
                  191.96.177.0/24
                  191.96.194.0/24
                  191.96.221.0/24
                  191.96.246.0/24
                  191.101.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:2b:f0:78:f2:ab:08:0e:77:4b:a7:dc:43:82:be:1b:2d:
         e3:15:72:d0:32:f3:cf:4e:4c:ae:07:ee:db:5f:95:0e:f5:a1:
         b9:5e:ff:00:ed:12:94:75:ca:d1:8b:1e:73:7c:aa:fb:4b:dd:
         78:a8:f5:d5:5c:7f:5c:21:b4:96:74:c7:1c:f0:c6:14:ba:3e:
         a1:19:73:99:67:29:95:ec:c2:dd:5d:1b:e3:88:d4:59:9e:0c:
         32:97:c7:a4:71:6b:fd:58:28:75:e1:a6:da:82:18:0b:93:c9:
         38:28:f9:c6:92:f3:33:23:02:91:3a:e8:4f:40:db:9d:ec:81:
         d4:00:e2:ee:ad:e1:37:67:44:af:11:07:94:cd:41:3d:16:88:
         c4:bf:9e:c2:e0:06:8d:0f:25:d3:17:e5:a6:27:84:7d:39:65:
         b1:db:98:4f:2b:db:e7:8e:27:c4:cb:1c:8d:6d:c7:8f:92:45:
         a6:83:55:ac:d4:f6:15:ec:cb:17:a0:dd:91:26:e7:5e:d9:f5:
         e3:42:75:49:48:cd:8a:86:d0:9d:40:ec:71:a8:9d:33:a5:ad:
         5d:80:95:33:63:53:63:27:11:18:8f:30:f8:b6:bd:8f:e7:14:
         79:3e:d9:7d:ba:1e:f0:72:e5:28:20:6b:fa:61:8c:4c:a8:d9:
         7b:9f:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org