Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14445.roa
File:                     AS14445.roa (raw, json)
Hash identifier:          PeV2eqbFx4AHDqLRXU/I568su0oUJkJiX1Kj66LC8oU=
Subject key identifier:   63:4B:2D:E5:30:62:4D:14:BC:DD:AB:19:9E:4A:97:02:1F:2C:07:B5
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5FA5DDB50F37E6B816556E30480548E5254A2820
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14445.roa
Signing time:             Sat 26 Nov 2022 00:00:18 +0000
ROA not before:           Fri 25 Nov 2022 23:55:18 +0000
ROA not after:            Sat 25 Nov 2023 00:00:18 +0000
asID:                     14445
IP address blocks:        45.95.12.0/24 maxlen: 24
                          179.61.134.0/24 maxlen: 24
                          179.61.214.0/24 maxlen: 24
                          181.41.218.0/24 maxlen: 24
                          181.214.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a5:dd:b5:0f:37:e6:b8:16:55:6e:30:48:05:48:e5:25:4a:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 23:55:18 2022 GMT
            Not After : Nov 25 00:00:18 2023 GMT
        Subject: CN=634B2DE530624D14BCDDAB199E4A97021F2C07B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:0e:f6:d5:84:ae:7f:77:46:30:0a:77:37:
                    22:a2:0f:0d:24:4b:fb:e6:ad:d2:dd:34:43:39:48:
                    8f:e9:60:ec:a5:fd:de:f9:55:15:2a:fc:4a:9a:f3:
                    86:59:da:29:41:91:3c:ba:d5:7e:4d:82:8e:11:a1:
                    13:4d:87:2f:d4:12:35:e6:d7:e4:60:d6:61:84:4c:
                    ae:43:19:ec:09:ad:87:1e:56:25:97:57:b9:4f:c0:
                    3b:69:05:86:ae:8e:3f:09:42:3e:ab:83:37:17:8b:
                    89:93:11:89:77:94:4b:de:bf:8f:4e:14:28:41:83:
                    66:0e:22:64:7b:68:00:b2:5e:75:85:a0:d0:29:83:
                    87:7c:d1:df:6f:a8:de:35:21:6e:33:ed:c2:fb:69:
                    97:61:88:e6:92:d3:ce:63:13:e7:8d:75:f9:e1:db:
                    bf:84:e1:a8:f3:c3:6a:2b:7c:7f:3d:62:15:4c:89:
                    63:64:11:ea:68:cb:13:24:ef:57:87:bd:89:fc:ad:
                    ea:ae:95:44:30:51:d7:fa:16:7c:48:08:24:0e:0e:
                    d6:ae:7d:45:5f:39:44:bd:18:3e:79:cd:2b:b9:a0:
                    9c:f5:7a:44:0f:18:d1:7a:2d:04:94:ef:3d:ed:3a:
                    52:a5:23:cb:dc:a9:92:5a:5d:c7:64:ea:6d:f6:2c:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:2D:E5:30:62:4D:14:BC:DD:AB:19:9E:4A:97:02:1F:2C:07:B5
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.12.0/24
                  179.61.134.0/24
                  179.61.214.0/24
                  181.41.218.0/24
                  181.214.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:b2:5a:71:11:c6:13:1b:61:48:bd:2c:46:cf:4c:0d:5d:
         55:cf:3c:99:5b:e0:46:92:74:4f:51:3c:44:ad:78:c2:ae:8c:
         4a:f3:5e:ee:47:d6:73:48:29:82:a3:e6:9e:7a:9a:53:67:78:
         2b:c5:44:81:f3:d9:26:cc:4e:27:9d:90:76:d3:ce:73:e0:6f:
         d0:db:b8:f7:21:4b:46:4d:aa:a7:3c:f8:a7:c1:14:22:18:22:
         ce:7e:f2:ce:75:43:56:7d:f2:fb:a8:ae:11:94:7a:d5:0a:6e:
         b7:cc:08:f9:02:3d:0e:58:b4:8d:c4:cd:08:ea:46:65:60:00:
         36:31:1e:2b:29:7b:ae:82:47:b9:a0:02:a3:6d:7c:2d:38:9b:
         e7:ac:29:81:bf:6a:00:53:46:7a:b8:75:d7:9b:db:75:0b:f3:
         a6:ce:6b:82:dc:a6:24:61:a0:ad:b6:93:ae:1a:9c:26:8f:77:
         d0:fd:3a:87:7f:02:42:b3:1a:0c:bf:d0:a1:54:23:27:96:89:
         67:6b:c0:ca:ca:c5:05:03:81:3d:f4:91:2b:32:01:98:c6:a4:
         40:46:bf:54:e8:91:37:c1:f4:a6:e1:5f:de:fb:86:51:be:ac:
         2b:f5:fe:1b:ec:ac:e4:2e:f3:0e:1b:08:0c:8d:e0:ec:ec:2e:
         fb:65:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org