Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211415.roa
File:                     AS211415.roa (raw, json)
Hash identifier:          XckumkFQCCjH7ij0D/5F14iK+n/sY+5vm2qumoqFTdQ=
Subject key identifier:   D8:73:11:0F:2C:4A:D2:26:28:A2:3A:CA:0C:52:BC:68:07:4E:02:40
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0BD9CA344ABFBB4FDD19FC687F6999B01E89C34A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211415.roa
Signing time:             Wed 09 Nov 2022 11:08:16 +0000
ROA not before:           Wed 09 Nov 2022 11:03:16 +0000
ROA not after:            Wed 08 Nov 2023 11:08:16 +0000
asID:                     211415
IP address blocks:        45.133.177.0/24 maxlen: 24
                          45.139.180.0/24 maxlen: 24
                          45.139.182.0/24 maxlen: 24
                          181.215.223.0/24 maxlen: 24
                          191.101.21.0/24 maxlen: 24
                          191.101.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:ca:34:4a:bf:bb:4f:dd:19:fc:68:7f:69:99:b0:1e:89:c3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  9 11:03:16 2022 GMT
            Not After : Nov  8 11:08:16 2023 GMT
        Subject: CN=D873110F2C4AD22628A23ACA0C52BC68074E0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:70:e8:92:af:07:cf:fb:4a:48:60:57:b1:
                    c2:56:5b:59:8c:ac:c6:d2:9f:11:2f:ce:56:73:5f:
                    55:c5:73:b7:20:8b:f0:8c:5e:fe:bd:0a:f4:75:5e:
                    26:8b:0d:9d:62:6d:08:97:6b:f6:37:c1:c0:d7:02:
                    60:39:6e:40:9c:01:68:2c:25:d7:ec:61:17:f3:69:
                    d4:4e:d7:36:ca:bd:8a:c5:b7:aa:94:3c:80:8c:ec:
                    75:bd:2c:39:8e:2c:68:88:75:93:54:85:85:12:6a:
                    bd:8e:03:06:66:c0:46:7a:63:4c:ea:77:06:28:1e:
                    0c:30:31:ee:d1:80:5a:1e:81:6e:1f:79:90:d6:64:
                    e1:58:30:b8:08:c7:6a:a1:a7:0c:45:f3:07:0c:cd:
                    98:ac:84:38:d3:49:5c:5a:04:98:5e:fa:81:f0:90:
                    f0:a2:26:fe:c9:12:dd:5c:f3:3c:51:dc:ce:1a:55:
                    de:8d:2a:18:d1:c9:a9:ff:8c:5e:72:ac:ce:9f:8f:
                    8f:d3:5b:92:42:ca:a0:6b:97:09:0e:8a:25:9c:77:
                    1f:7d:9d:d1:54:68:70:91:2f:52:ad:03:38:d8:0a:
                    37:d2:79:27:eb:80:ac:f0:9b:8c:32:cb:7f:69:c4:
                    11:f4:cb:b3:10:46:24:2f:5f:b1:fb:1b:17:a2:14:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:11:0F:2C:4A:D2:26:28:A2:3A:CA:0C:52:BC:68:07:4E:02:40
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211415.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.177.0/24
                  45.139.180.0/24
                  45.139.182.0/24
                  181.215.223.0/24
                  191.101.21.0/24
                  191.101.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:91:fe:5c:02:7f:c6:c4:f7:5b:3c:7f:6a:c9:1e:d5:34:4d:
         80:06:b6:1d:b8:5e:33:dd:71:76:bd:e0:6c:a6:1a:85:03:c6:
         d7:a4:f1:23:ae:c0:22:5b:eb:b4:64:42:97:91:9e:af:4b:35:
         93:cf:72:c9:27:c9:4e:f9:75:2c:f8:05:de:59:6b:bd:d0:f7:
         df:0d:5a:ec:18:f6:a8:2d:78:11:b5:29:c6:99:94:4c:6a:88:
         1a:f9:3b:3a:4f:c7:09:ea:b0:10:32:f3:7a:d4:b7:8e:84:87:
         35:74:48:75:95:27:6c:f2:b0:41:c2:23:04:df:10:51:84:db:
         bb:2d:eb:93:37:7e:22:37:dd:94:1e:78:7e:92:47:06:c7:90:
         6f:bc:94:dc:62:36:07:15:60:ba:77:d0:f4:0b:5d:f3:9b:1c:
         3b:20:a2:ee:bd:fc:fc:70:67:00:c5:4c:a6:93:35:1b:97:a0:
         84:6e:13:52:0e:79:e2:4a:2b:bd:2c:20:c8:12:2b:00:f2:6b:
         9a:92:d1:d6:6c:77:17:1f:4b:f8:8d:b9:c7:1e:81:c6:2c:fc:
         b3:cc:e8:df:d6:c1:c3:9b:da:1c:c8:67:b4:00:dc:ed:5b:24:
         95:d7:b1:19:e2:5e:c1:bc:2b:d7:13:15:ab:ca:73:e7:1a:6c:
         67:11:a3:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUC9nKNEq/u0/dGfxof2mZsB6Jw0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMDkxMTAzMTZaFw0yMzExMDgxMTA4MTZaMDMxMTAvBgNV
BAMTKEQ4NzMxMTBGMkM0QUQyMjYyOEEyM0FDQTBDNTJCQzY4MDc0RTAyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IXDokq8Hz/tKSGBXscJWW1mM
rMbSnxEvzlZzX1XFc7cgi/CMXv69CvR1XiaLDZ1ibQiXa/Y3wcDXAmA5bkCcAWgs
JdfsYRfzadRO1zbKvYrFt6qUPICM7HW9LDmOLGiIdZNUhYUSar2OAwZmwEZ6Y0zq
dwYoHgwwMe7RgFoegW4feZDWZOFYMLgIx2qhpwxF8wcMzZishDjTSVxaBJhe+oHw
kPCiJv7JEt1c8zxR3M4aVd6NKhjRyan/jF5yrM6fj4/TW5JCyqBrlwkOiiWcdx99
ndFUaHCRL1KtAzjYCjfSeSfrgKzwm4wyy39pxBH0y7MQRiQvX7H7GxeiFHSpAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQU2HMRDyxK0iYoojrKDFK8aAdOAkAwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMTE0MTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYB
BQUHAQcBAf8ELjAsMCoEAgABMCQDBAAthbEDBAAti7QDBAAti7YDBAC1198DBAC/
ZRUDBAC/ZR0wDQYJKoZIhvcNAQELBQADggEBAHCR/lwCf8bE91s8f2rJHtU0TYAG
th24XjPdcXa94GymGoUDxtek8SOuwCJb67RkQpeRnq9LNZPPcsknyU75dSz4Bd5Z
a73Q998NWuwY9qgteBG1KcaZlExqiBr5OzpPxwnqsBAy83rUt46EhzV0SHWVJ2zy
sEHCIwTfEFGE27st65M3fiI33ZQeeH6SRwbHkG+8lNxiNgcVYLp30PQLXfObHDsg
ou69/PxwZwDFTKaTNRuXoIRuE1IOeeJKK70sIMgSKwDya5qS0dZsdxcfS/iNucce
gcYs/LPM6N/WwcOb2hzIZ7QA3O1bJJXXsRniXsG8K9cTFavKc+cabGcRo5w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org