Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          kmeaYMwne9757mAvJSBIBzuOjjB8NFETzO7Ti4o7ezI=
Subject key identifier:   BB:E3:21:CE:6A:2D:5B:F9:06:03:7D:1B:B5:7B:8F:44:9E:4F:EB:83
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       09D9D9F9DA510AD1FCBC56ACE9BC07025E710B09
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS174.roa
Signing time:             Mon 14 Nov 2022 09:43:55 +0000
ROA not before:           Mon 14 Nov 2022 09:38:55 +0000
ROA not after:            Mon 13 Nov 2023 09:43:55 +0000
asID:                     174
IP address blocks:        45.88.97.0/24 maxlen: 24
                          45.133.172.0/24 maxlen: 24
                          45.133.173.0/24 maxlen: 24
                          179.61.197.0/24 maxlen: 24
                          179.61.239.0/24 maxlen: 24
                          181.41.202.0/24 maxlen: 24
                          181.41.206.0/24 maxlen: 24
                          181.214.93.0/24 maxlen: 24
                          181.214.94.0/24 maxlen: 24
                          181.214.153.0/24 maxlen: 24
                          181.214.164.0/24 maxlen: 24
                          181.214.165.0/24 maxlen: 24
                          181.214.166.0/24 maxlen: 24
                          181.214.173.0/24 maxlen: 24
                          181.214.218.0/24 maxlen: 24
                          181.215.176.0/24 maxlen: 24
                          181.215.182.0/24 maxlen: 24
                          191.96.36.0/24 maxlen: 24
                          191.96.106.0/24 maxlen: 24
                          191.96.145.0/24 maxlen: 24
                          191.96.150.0/24 maxlen: 24
                          191.96.168.0/24 maxlen: 24
                          191.96.185.0/24 maxlen: 24
                          191.96.190.0/24 maxlen: 24
                          191.96.227.0/24 maxlen: 24
                          191.96.255.0/24 maxlen: 24
                          191.101.31.0/24 maxlen: 24
                          191.101.61.0/24 maxlen: 24
                          191.101.157.0/24 maxlen: 24
                          191.101.217.0/24 maxlen: 24
                          194.110.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d9:d9:f9:da:51:0a:d1:fc:bc:56:ac:e9:bc:07:02:5e:71:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 14 09:38:55 2022 GMT
            Not After : Nov 13 09:43:55 2023 GMT
        Subject: CN=BBE321CE6A2D5BF906037D1BB57B8F449E4FEB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:47:c8:71:f9:48:64:a5:6d:08:31:ee:89:
                    e6:86:f4:e0:31:c9:76:7c:17:a1:ca:a3:0e:80:0a:
                    61:8b:b7:07:c6:5c:e1:a8:9f:6c:51:c7:ed:26:50:
                    f4:f2:2f:96:21:88:78:19:41:11:1d:f1:c9:96:4f:
                    e2:4a:5e:f9:64:aa:52:95:eb:7e:ec:99:4f:67:f7:
                    d6:41:94:3f:4f:c9:62:25:f1:c6:74:6f:b7:f2:32:
                    78:8c:0a:4c:da:b8:2b:a4:53:93:21:7c:19:b0:bf:
                    41:a9:45:9f:f4:b4:31:fc:63:81:ba:3e:37:40:4a:
                    3c:bb:60:69:53:dc:ad:48:fc:ba:72:41:a7:b7:40:
                    4f:e0:11:fa:7a:83:b7:e7:a6:69:07:db:2c:42:4e:
                    4b:a9:2e:9e:53:6c:8e:6a:9b:5b:f9:34:f2:b3:5b:
                    b0:cf:e6:e1:e3:ab:77:1c:5c:3c:09:8a:d5:7e:cb:
                    9c:2c:aa:e3:e8:ac:d3:20:f4:77:f7:96:52:26:e3:
                    2a:85:2f:42:5f:c5:76:ef:12:57:fd:3b:86:49:0f:
                    68:e7:5c:51:55:b2:e3:1f:72:aa:3e:ff:a4:fd:69:
                    55:d9:a8:fa:65:8a:c8:d1:4f:04:f6:6f:3f:8d:28:
                    e9:21:f2:3b:ca:ad:27:5a:c9:5f:2a:ef:25:09:e4:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E3:21:CE:6A:2D:5B:F9:06:03:7D:1B:B5:7B:8F:44:9E:4F:EB:83
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.97.0/24
                  45.133.172.0/23
                  179.61.197.0/24
                  179.61.239.0/24
                  181.41.202.0/24
                  181.41.206.0/24
                  181.214.93.0-181.214.94.255
                  181.214.153.0/24
                  181.214.164.0-181.214.166.255
                  181.214.173.0/24
                  181.214.218.0/24
                  181.215.176.0/24
                  181.215.182.0/24
                  191.96.36.0/24
                  191.96.106.0/24
                  191.96.145.0/24
                  191.96.150.0/24
                  191.96.168.0/24
                  191.96.185.0/24
                  191.96.190.0/24
                  191.96.227.0/24
                  191.96.255.0/24
                  191.101.31.0/24
                  191.101.61.0/24
                  191.101.157.0/24
                  191.101.217.0/24
                  194.110.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:38:f0:b6:b2:0d:61:0b:28:fe:f7:b6:fa:79:7d:b2:c7:d6:
         56:17:45:cf:6a:1b:bc:5f:55:35:2e:52:9d:b5:21:81:61:3a:
         78:d1:c8:0a:b7:8d:ea:95:6c:56:3a:6b:be:51:ac:37:97:cc:
         e7:3a:67:38:b4:0a:35:50:60:b1:7c:68:c5:62:6e:96:e2:47:
         05:a6:48:d7:41:37:c7:9e:33:72:c4:6d:5d:f7:20:05:e7:f0:
         23:b5:12:8c:05:36:e8:a8:3a:f8:11:e5:7e:98:3e:c1:78:22:
         a1:92:6a:7c:98:c0:1e:41:ef:fd:a5:2f:77:92:f3:a9:8f:27:
         1a:c6:ae:94:0f:49:4f:7c:c8:fd:ca:67:4e:7e:cd:b6:4d:24:
         b9:a4:e2:23:f2:ab:4c:c7:2a:47:36:a6:7f:9f:ac:3f:6a:bf:
         1a:aa:ea:69:23:5a:85:a9:e8:85:aa:1f:35:03:62:ce:65:d9:
         f1:e3:20:2b:40:0b:6a:74:8b:4e:aa:32:87:85:35:95:ab:3f:
         d9:31:09:28:f6:7d:88:29:40:1b:12:67:f0:7f:ae:5c:68:8e:
         65:23:f8:21:19:8a:b4:81:8b:86:5b:4b:9c:1f:5f:60:bf:56:
         d9:57:a8:a6:3c:6d:f9:60:90:14:ae:cc:01:cc:b9:97:c6:49:
         91:f9:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org