Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS15440.roa
File:                     AS15440.roa (raw, json)
Hash identifier:          KRihd7+M8uHKQ9v/9EQwjQbhTWsEWFy53qWAgEM529A=
Subject key identifier:   0B:F5:18:E2:AF:47:61:84:E3:5A:C2:07:C3:B8:7D:82:07:D4:80:C2
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       608871039FFF72125487C029B23696954E94EEC5
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS15440.roa
Signing time:             Sat 27 Aug 2022 09:41:23 +0000
ROA not before:           Sat 27 Aug 2022 09:36:23 +0000
ROA not after:            Sat 26 Aug 2023 09:41:23 +0000
asID:                     15440
IP address blocks:        181.214.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:88:71:03:9f:ff:72:12:54:87:c0:29:b2:36:96:95:4e:94:ee:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:36:23 2022 GMT
            Not After : Aug 26 09:41:23 2023 GMT
        Subject: CN=0BF518E2AF476184E35AC207C3B87D8207D480C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:7b:e6:ff:76:6f:3d:1b:26:8f:3f:d7:41:
                    c3:3c:7c:7f:1d:7e:3d:c9:2c:94:3b:55:aa:db:d0:
                    c8:da:d5:40:1c:5f:75:8f:73:58:6b:2c:5e:58:c1:
                    b9:35:63:ca:81:57:75:a0:36:f5:f7:cb:9b:f2:a4:
                    72:da:6d:c6:2d:f3:20:ab:b9:e8:8f:a4:60:6c:65:
                    3f:82:82:ef:9c:bd:31:88:95:a9:d0:e9:42:05:48:
                    34:b7:c6:80:4f:69:fd:3d:d5:5c:5c:bb:8d:8f:6d:
                    db:e9:81:a7:6c:3f:a6:bf:0a:f7:23:56:47:4e:01:
                    18:91:92:06:77:8f:d6:35:d3:01:44:7c:ce:1b:a0:
                    4f:cf:72:e7:ed:31:fc:ea:11:39:6a:de:e4:ca:01:
                    bb:b4:f0:71:b8:fa:0a:27:dd:2c:eb:ca:24:ec:6a:
                    31:6e:bf:58:08:44:43:6b:6e:6e:e2:71:86:50:0c:
                    9d:00:7c:f0:ad:ee:bd:6e:c5:14:af:bd:b5:78:e7:
                    2d:64:58:62:da:e6:ff:04:4d:45:66:e3:0f:98:80:
                    e5:9b:46:9e:e1:0a:32:fb:2d:0c:8d:c2:ea:5e:68:
                    f3:f4:ab:14:66:40:c4:27:12:a8:54:a9:f0:95:09:
                    25:0c:9d:c2:5f:93:c6:72:74:4e:5a:73:48:28:3d:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F5:18:E2:AF:47:61:84:E3:5A:C2:07:C3:B8:7D:82:07:D4:80:C2
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS15440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:9d:36:2b:8c:11:6e:c9:d6:06:e0:f8:9c:11:2e:77:08:
         27:15:a7:93:a4:43:c8:b3:7d:09:41:43:3d:3e:c5:09:e3:c7:
         aa:e0:ba:e0:00:1e:18:ff:0f:0c:ee:b9:8f:e9:15:e5:d2:82:
         42:43:55:4d:66:b1:af:ed:09:bd:52:48:8a:99:fa:ae:49:0f:
         27:f1:bf:21:6a:92:16:b3:81:21:8d:03:42:b5:8a:d3:4c:71:
         25:12:b4:82:82:cf:21:41:fa:74:58:d6:4b:84:4e:d1:c3:33:
         22:a3:16:ac:48:79:40:0b:e9:51:7b:df:d5:14:09:37:55:fe:
         6f:1b:54:a4:6e:fb:b9:d6:12:db:44:66:97:3c:fe:c4:a8:67:
         1f:54:91:c5:82:38:ef:39:22:1c:7c:80:d1:65:ba:45:1d:94:
         d2:89:e9:a8:4e:13:9f:56:fc:45:a6:ff:8a:26:76:c3:79:ae:
         40:10:f2:1b:64:b8:85:d5:a6:1c:db:ed:de:25:a2:1c:9f:8c:
         d3:10:ed:ba:31:dd:d2:2b:2a:62:f7:fc:5b:d0:9a:6c:ad:5c:
         e8:78:6f:59:e1:67:38:bc:c9:ae:a8:ac:4a:8d:02:3a:ee:af:
         38:e6:cb:f1:19:e5:48:7d:0e:09:94:74:f2:be:9d:00:5b:05:
         67:41:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org