Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS40676.roa
File:                     AS40676.roa (raw, json)
Hash identifier:          HmHdkdL4Ka+xXbE1Q4/enbmkzkt2+uAWDDLVEJU2wOY=
Subject key identifier:   B1:D3:3F:08:C6:B9:83:72:DD:D7:AA:68:7A:55:4D:4B:31:81:C5:A5
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       771C37D100B3EBAF549A290C28449FF407990CF4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS40676.roa
Signing time:             Sat 11 Jun 2022 11:22:41 +0000
ROA not before:           Sat 11 Jun 2022 11:17:41 +0000
ROA not after:            Sat 10 Jun 2023 11:22:41 +0000
asID:                     40676
IP address blocks:        5.182.110.0/24 maxlen: 24
                          5.182.111.0/24 maxlen: 24
                          5.252.75.0/24 maxlen: 24
                          89.19.47.0/24 maxlen: 24
                          179.61.147.0/24 maxlen: 24
                          179.61.151.0/24 maxlen: 24
                          179.61.191.0/24 maxlen: 24
                          179.61.197.0/24 maxlen: 24
                          179.61.217.0/24 maxlen: 24
                          179.61.238.0/24 maxlen: 24
                          181.41.192.0/24 maxlen: 24
                          181.41.195.0/24 maxlen: 24
                          181.41.215.0/24 maxlen: 24
                          181.214.93.0/24 maxlen: 24
                          181.214.94.0/24 maxlen: 24
                          181.214.128.0/23 maxlen: 23
                          181.214.182.0/24 maxlen: 24
                          181.214.204.0/24 maxlen: 24
                          181.215.26.0/24 maxlen: 24
                          181.215.66.0/24 maxlen: 24
                          191.96.54.0/24 maxlen: 24
                          191.96.68.0/24 maxlen: 24
                          191.96.141.0/24 maxlen: 24
                          191.96.146.0/24 maxlen: 24
                          191.96.147.0/24 maxlen: 24
                          191.101.29.0/24 maxlen: 24
                          191.101.44.0/22 maxlen: 22
                          191.101.44.0/24 maxlen: 24
                          191.101.45.0/24 maxlen: 24
                          191.101.46.0/24 maxlen: 24
                          191.101.47.0/24 maxlen: 24
                          191.101.97.0/24 maxlen: 24
                          191.101.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1c:37:d1:00:b3:eb:af:54:9a:29:0c:28:44:9f:f4:07:99:0c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 11 11:17:41 2022 GMT
            Not After : Jun 10 11:22:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:65:a2:2c:66:63:4b:67:f1:f3:b2:28:56:
                    53:e2:5c:56:d7:3d:84:77:59:49:03:42:a2:42:43:
                    d6:94:33:d1:8e:dd:13:2f:be:6a:c8:31:b7:ec:ae:
                    e7:82:38:1c:c5:88:f2:a3:62:8c:b8:ee:02:5e:28:
                    b5:9a:2f:c6:7b:7d:a4:f6:85:c7:1e:6f:f2:1c:f5:
                    bf:23:4f:23:7d:fd:fa:8f:90:31:4d:17:35:3b:1e:
                    f4:e4:f7:e5:f8:5a:10:75:fa:eb:96:f8:27:22:44:
                    3c:70:cd:03:a9:0f:fa:ff:d8:3b:e5:d8:a6:a6:b4:
                    b0:10:1f:a3:3e:8c:33:9e:50:3b:7d:0c:bc:2f:b5:
                    c5:c2:ac:84:3b:51:f1:cf:1a:84:52:0b:99:32:63:
                    dc:f9:e6:d1:20:0e:3e:b8:1f:a3:a6:b7:f0:aa:90:
                    20:65:c3:bd:99:7c:eb:c2:21:93:d7:03:5e:08:e1:
                    2c:12:7d:42:32:a2:af:a5:ad:56:6b:47:26:e8:51:
                    f6:bf:a6:4a:b4:e2:94:85:cc:04:69:94:84:c8:ab:
                    26:ed:76:3d:8b:11:f1:96:51:1e:65:91:ec:7e:04:
                    41:e4:23:73:86:ec:06:a7:54:3e:76:7c:92:13:67:
                    f9:4c:63:3b:80:4a:59:ee:84:ec:9e:83:32:32:c2:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:3F:08:C6:B9:83:72:DD:D7:AA:68:7A:55:4D:4B:31:81:C5:A5
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS40676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.110.0/23
                  5.252.75.0/24
                  89.19.47.0/24
                  179.61.147.0/24
                  179.61.151.0/24
                  179.61.191.0/24
                  179.61.197.0/24
                  179.61.217.0/24
                  179.61.238.0/24
                  181.41.192.0/24
                  181.41.195.0/24
                  181.41.215.0/24
                  181.214.93.0-181.214.94.255
                  181.214.128.0/23
                  181.214.182.0/24
                  181.214.204.0/24
                  181.215.26.0/24
                  181.215.66.0/24
                  191.96.54.0/24
                  191.96.68.0/24
                  191.96.141.0/24
                  191.96.146.0/23
                  191.101.29.0/24
                  191.101.44.0/22
                  191.101.97.0/24
                  191.101.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:6d:76:9b:19:d6:4a:ba:98:9e:db:33:96:55:68:f2:30:
         f7:5e:a5:d3:2f:dd:80:ba:d1:0d:5c:de:1e:ba:ec:28:8f:c5:
         33:c3:df:6a:62:66:d2:be:e0:3a:35:b5:d8:58:91:94:cd:f5:
         1d:59:3f:08:98:02:bf:63:4c:c8:e9:84:a9:e2:f4:5e:e6:67:
         42:19:cf:b7:54:5d:00:99:50:5e:0d:8f:86:1c:ff:88:f8:41:
         d4:9d:88:4f:1c:4a:45:64:d5:94:b1:65:ac:50:ae:35:41:a1:
         d2:fa:08:46:ce:49:6d:d4:7e:1d:00:be:89:7c:61:b4:fb:82:
         ed:69:f7:9b:eb:29:2f:e5:cd:27:45:4a:c4:98:17:4f:8b:50:
         29:cc:cc:be:ff:76:a5:b7:71:34:ba:df:8d:0d:e1:44:6b:f3:
         26:9e:73:ab:70:6a:aa:33:a7:a7:8f:58:80:6d:1d:24:03:2f:
         42:85:1c:05:72:5d:8f:33:b7:02:c8:80:c6:59:56:fe:3b:df:
         e9:58:1f:ed:f8:0e:29:11:f2:f3:fa:57:fb:9d:6a:bf:3b:78:
         56:ed:27:b9:35:b0:54:d2:41:65:31:6b:a4:c9:98:06:ca:b4:
         2e:85:69:66:b6:51:42:bf:be:c7:06:a4:8c:07:32:f9:51:b2:
         74:9c:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org