Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          veYd79JDI8Q90QED5AVY3azmSj9MfB8sFmOLxwsfCOQ=
Subject key identifier:   CA:E6:FE:FF:03:2F:CF:78:AA:C5:C7:7B:BD:5C:EB:C0:D4:54:52:E1
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6D9A843DE020CD99FBD6F2CDA281573313521162
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14618.roa
Signing time:             Tue 11 Oct 2022 16:17:20 +0000
ROA not before:           Tue 11 Oct 2022 16:12:20 +0000
ROA not after:            Tue 10 Oct 2023 16:17:20 +0000
asID:                     14618
IP address blocks:        185.145.38.0/24 maxlen: 24
                          185.151.58.0/24 maxlen: 24
                          185.170.41.0/24 maxlen: 24
                          213.109.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9a:84:3d:e0:20:cd:99:fb:d6:f2:cd:a2:81:57:33:13:52:11:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 11 16:12:20 2022 GMT
            Not After : Oct 10 16:17:20 2023 GMT
        Subject: CN=CAE6FEFF032FCF78AAC5C77BBD5CEBC0D45452E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:72:12:89:da:8b:76:31:a6:6e:14:8a:3f:
                    e7:f3:3d:13:3d:b7:e4:a5:ff:c5:e5:58:15:3f:b8:
                    8e:74:77:25:1b:0f:51:ad:72:57:aa:43:43:2b:a4:
                    cb:26:da:c8:22:b3:9c:91:ef:da:16:22:4e:e1:18:
                    79:a8:a6:e2:1d:ad:b0:ba:62:44:89:b3:a8:c5:47:
                    15:59:bd:a3:68:05:45:b6:8f:28:3e:36:ae:c8:f5:
                    1c:dc:b7:dd:d2:e2:a4:a8:6c:17:31:c6:d5:7a:81:
                    fe:48:28:90:54:66:54:db:78:e9:47:ef:bc:17:74:
                    b0:f7:d5:ee:c6:c8:69:82:12:9c:96:3d:ec:a7:8f:
                    ca:33:7e:e8:35:c3:60:47:59:8c:f1:01:c9:94:7c:
                    09:c3:79:1d:da:83:b6:4f:a6:0c:ad:4f:e1:4e:72:
                    ac:be:de:ec:85:ae:94:9a:d9:a0:78:12:38:e5:a5:
                    19:6d:7c:56:38:9c:da:3f:23:06:16:a2:61:2f:71:
                    b6:45:62:6c:84:da:a6:e7:d6:8f:01:02:31:14:8b:
                    65:c3:f4:19:0b:22:aa:d7:8f:76:f5:e8:62:e6:eb:
                    f0:ee:0d:2f:4d:7f:5f:bf:86:7c:62:64:45:9b:c5:
                    12:b6:48:7f:a5:ba:c1:cc:92:b0:a5:fd:38:73:d0:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:FE:FF:03:2F:CF:78:AA:C5:C7:7B:BD:5C:EB:C0:D4:54:52:E1
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.38.0/24
                  185.151.58.0/24
                  185.170.41.0/24
                  213.109.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:99:9b:93:61:08:f9:49:c0:9b:e8:22:bb:64:11:55:84:49:
         46:35:05:64:d8:ed:e5:b6:38:30:ec:99:24:8b:17:65:91:18:
         f2:12:e7:bc:8a:a2:c9:5a:a8:97:29:3f:cf:9e:07:a4:e5:0b:
         5b:02:ce:93:e0:3f:ea:36:3e:16:dc:f4:08:fd:9c:74:96:16:
         4c:6c:55:10:15:a4:e0:c9:c4:6e:b8:9c:4f:87:f6:1b:1f:5b:
         7f:53:d8:fb:7b:15:65:50:d8:38:6a:d9:02:5c:83:54:d2:91:
         41:d7:97:42:cf:68:dc:5c:80:6f:a9:df:9f:1a:f4:6b:f3:21:
         4f:88:61:bf:79:16:24:ca:e4:f5:54:4c:7b:f6:46:2b:61:42:
         8c:fe:4a:63:8d:1a:c3:95:f4:28:26:b2:fc:11:77:17:74:6f:
         2d:3a:c4:d4:c4:bf:d2:e0:71:09:74:9e:fe:10:94:ce:60:a1:
         11:93:b6:b6:5d:d1:77:f1:cc:31:0c:45:bb:98:d4:79:27:61:
         e7:35:4b:1d:fe:b2:f3:dc:28:46:d1:16:70:d1:60:ad:4d:98:
         8e:d1:8b:28:3a:f8:5a:5f:ef:86:1d:0b:2a:b5:e8:ca:df:86:
         a8:a8:bc:2d:15:76:93:13:16:c5:7a:f3:86:6e:d2:df:7a:16:
         ef:7b:70:8f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUbZqEPeAgzZn71vLNooFXMxNSEWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMTExNjEyMjBaFw0yMzEwMTAxNjE3MjBaMDMxMTAvBgNV
BAMTKENBRTZGRUZGMDMyRkNGNzhBQUM1Qzc3QkJENUNFQkMwRDQ1NDUyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2M3ISidqLdjGmbhSKP+fzPRM9
t+Sl/8XlWBU/uI50dyUbD1GtcleqQ0MrpMsm2sgis5yR79oWIk7hGHmopuIdrbC6
YkSJs6jFRxVZvaNoBUW2jyg+Nq7I9Rzct93S4qSobBcxxtV6gf5IKJBUZlTbeOlH
77wXdLD31e7GyGmCEpyWPeynj8ozfug1w2BHWYzxAcmUfAnDeR3ag7ZPpgytT+FO
cqy+3uyFrpSa2aB4EjjlpRltfFY4nNo/IwYWomEvcbZFYmyE2qbn1o8BAjEUi2XD
9BkLIqrXj3b16GLm6/DuDS9Nf1+/hnxiZEWbxRK2SH+lusHMkrCl/Thz0KsfAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUyub+/wMvz3iqxcd7vVzrwNRUUuEwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMxNDYxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEF
BQcBBwEB/wQiMCAwHgQCAAEwGAMEALmRJgMEALmXOgMEALmqKQMEANVtqTANBgkq
hkiG9w0BAQsFAAOCAQEAE5mbk2EI+UnAm+giu2QRVYRJRjUFZNjt5bY4MOyZJIsX
ZZEY8hLnvIqiyVqolyk/z54HpOULWwLOk+A/6jY+Ftz0CP2cdJYWTGxVEBWk4MnE
bricT4f2Gx9bf1PY+3sVZVDYOGrZAlyDVNKRQdeXQs9o3FyAb6nfnxr0a/MhT4hh
v3kWJMrk9VRMe/ZGK2FCjP5KY40aw5X0KCay/BF3F3RvLTrE1MS/0uBxCXSe/hCU
zmChEZO2tl3Rd/HMMQxFu5jUeSdh5zVLHf6y89woRtEWcNFgrU2YjtGLKDr4Wl/v
hh0LKrXoyt+GqKi8LRV2kxMWxXrzhm7S33oW73twjw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org