Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205220.roa
File:                     AS205220.roa (raw, json)
Hash identifier:          8NFTN28dJyUajt5h1LbmVAC2DgejNSnynj2ogtj4LbA=
Subject key identifier:   10:E9:8F:B3:76:33:01:17:D0:EA:34:A9:DA:B2:C5:3C:CC:23:94:FF
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0C56B790EC26C3643AF3D25E7FDD034B92844C9E
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205220.roa
Signing time:             Fri 21 Oct 2022 20:19:20 +0000
ROA not before:           Fri 21 Oct 2022 20:14:20 +0000
ROA not after:            Fri 20 Oct 2023 20:19:20 +0000
asID:                     205220
IP address blocks:        179.61.158.0/23 maxlen: 23
                          179.61.160.0/22 maxlen: 22
                          181.215.74.0/23 maxlen: 24
                          181.215.76.0/23 maxlen: 24
                          191.101.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:56:b7:90:ec:26:c3:64:3a:f3:d2:5e:7f:dd:03:4b:92:84:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 20:14:20 2022 GMT
            Not After : Oct 20 20:19:20 2023 GMT
        Subject: CN=10E98FB376330117D0EA34A9DAB2C53CCC2394FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:23:dc:93:8f:0e:3d:2a:8a:75:5d:68:87:
                    53:9b:c5:1b:6d:0f:30:7f:ce:61:51:d8:f6:50:3f:
                    dd:65:a5:2d:15:30:ef:bb:d3:11:4f:ee:83:47:39:
                    f5:0f:8b:54:6c:39:85:22:f4:5d:12:ea:cb:10:59:
                    8b:7a:68:5d:0f:cd:fd:15:16:55:36:70:58:1d:49:
                    da:22:a6:7d:07:d2:1d:6c:f0:e7:ad:b5:19:5a:ba:
                    38:e5:fb:51:15:2e:5a:33:28:94:7f:0a:49:0b:51:
                    82:d0:b0:fa:20:d7:a5:37:3c:be:84:b9:e5:53:76:
                    5b:8a:b7:bd:b8:58:4c:e0:df:f4:20:c2:34:fe:b1:
                    9a:b5:26:97:50:2c:ba:3e:d5:2f:f9:d2:36:45:5e:
                    7a:6c:df:5e:92:7c:b5:18:f2:f2:30:11:43:60:18:
                    d2:7f:5f:35:bc:c2:9b:20:a3:34:ef:87:79:ff:2c:
                    af:bc:61:57:06:26:36:ed:f4:18:55:f4:ce:92:d0:
                    63:2c:e3:a0:69:c4:e9:80:96:65:1c:9f:35:28:de:
                    71:4a:19:1c:a1:84:44:18:81:54:bc:43:73:e4:1b:
                    c3:3e:2e:7b:a1:09:02:ee:50:9a:f4:41:18:06:dc:
                    f3:8c:8e:29:f6:88:41:5d:e8:96:6e:b1:a4:c8:25:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:8F:B3:76:33:01:17:D0:EA:34:A9:DA:B2:C5:3C:CC:23:94:FF
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205220.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.158.0-179.61.163.255
                  181.215.74.0-181.215.77.255
                  191.101.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:43:9d:f1:93:ed:3e:3f:70:2d:2e:eb:58:a0:61:e0:cc:
         b2:31:6e:91:7c:fa:36:05:20:08:d1:e0:5b:d7:37:01:08:00:
         9d:71:ce:c0:50:3e:c3:90:40:5e:fb:75:a9:9a:b0:fd:3e:76:
         b5:b2:3d:ff:f1:99:a5:cd:ac:97:1a:63:57:f9:af:7e:4f:ce:
         69:99:bc:c0:b4:66:52:ca:69:e8:0c:04:43:12:01:d4:8b:53:
         65:c5:32:95:40:73:40:cd:e8:80:60:af:24:3a:59:bf:ad:34:
         15:b1:c6:a5:a3:23:d5:2f:e2:b5:23:ad:71:36:cb:82:20:e3:
         ba:54:09:ad:15:80:19:3f:c3:43:f5:d2:ca:c4:1d:ae:7f:de:
         4d:2e:53:a2:ff:b8:45:9d:89:ba:f3:28:79:b4:64:08:43:04:
         d4:79:69:15:fc:f0:db:c6:d9:f8:e4:c7:21:5a:e1:b2:49:8c:
         f0:b5:50:9d:1d:04:39:c2:26:be:04:fe:12:3a:89:94:f1:14:
         49:cf:e2:4a:b8:f2:16:f9:b2:6e:14:db:fb:74:e7:b6:b9:e9:
         77:f0:15:5a:68:d3:98:dd:a2:dd:43:bb:36:a9:8e:51:00:c2:
         02:91:23:fa:d7:dd:c8:9f:e9:3e:da:39:7b:b4:a3:75:d8:1b:
         30:86:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org