Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212384.roa
File:                     AS212384.roa (raw, json)
Hash identifier:          Enz3km4j8uPrdAadvwXKylTLK33f7EC1xuC9A9hKBUo=
Subject key identifier:   D7:BD:6A:68:94:29:95:DE:A0:95:83:D8:2B:62:5B:4A:8F:EC:45:A8
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       52B1FC582EA38E018C6DAFFE4B3582573FDB79A6
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212384.roa
Signing time:             Fri 25 Nov 2022 16:04:37 +0000
ROA not before:           Fri 25 Nov 2022 15:59:37 +0000
ROA not after:            Fri 24 Nov 2023 16:04:37 +0000
asID:                     212384
IP address blocks:        179.61.130.0/24 maxlen: 24
                          181.214.241.0/24 maxlen: 24
                          181.215.37.0/24 maxlen: 24
                          185.139.3.0/24 maxlen: 24
                          185.139.239.0/24 maxlen: 24
                          185.158.105.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          191.96.109.0/24 maxlen: 24
                          191.101.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b1:fc:58:2e:a3:8e:01:8c:6d:af:fe:4b:35:82:57:3f:db:79:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 15:59:37 2022 GMT
            Not After : Nov 24 16:04:37 2023 GMT
        Subject: CN=D7BD6A68942995DEA09583D82B625B4A8FEC45A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:95:17:48:96:21:68:d9:99:65:6f:88:58:
                    9f:49:e4:43:be:ae:1a:b4:92:f6:0f:fb:a1:12:31:
                    54:2d:f5:fd:6c:5d:98:ed:db:47:74:d2:32:f4:8c:
                    ab:e3:bd:0c:34:e4:17:89:d1:74:0f:e1:04:a7:23:
                    b3:39:b8:3e:73:70:d0:ba:9a:79:c0:87:80:dd:2e:
                    75:55:03:84:3f:c1:7f:28:09:dc:9c:a2:fd:ee:ed:
                    95:da:ac:b0:e7:56:2d:22:df:90:db:1a:f5:07:68:
                    7f:44:6a:8f:9b:68:e8:1b:d4:91:c8:c4:5f:e6:47:
                    87:7e:f6:9d:95:48:2a:47:94:50:02:45:54:23:4d:
                    98:51:31:fd:5f:8f:49:1a:89:98:cb:4b:f4:e1:92:
                    27:c3:51:7f:f0:74:d4:2f:1d:ca:6d:ef:b7:45:bf:
                    74:ea:6a:34:14:12:f7:34:72:87:a9:c3:ce:27:5b:
                    9a:eb:ef:ef:40:b8:e3:3a:44:84:af:71:91:d0:be:
                    52:42:bc:df:55:8e:a7:5a:cb:4d:23:af:53:3e:9e:
                    03:37:8a:e2:33:c6:f0:93:ac:9e:24:46:06:b8:22:
                    de:00:af:ff:7e:f7:3e:9c:8c:bb:4b:5e:7c:9d:f6:
                    ca:aa:ee:eb:a6:b3:7f:db:dd:b1:84:5c:65:f3:a2:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:6A:68:94:29:95:DE:A0:95:83:D8:2B:62:5B:4A:8F:EC:45:A8
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS212384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.130.0/24
                  181.214.241.0/24
                  181.215.37.0/24
                  185.139.3.0/24
                  185.139.239.0/24
                  185.158.105.0/24
                  191.96.34.0/24
                  191.96.109.0/24
                  191.101.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:18:7e:52:55:40:67:21:78:7a:14:4a:14:27:57:82:c4:18:
         f0:96:bc:02:24:22:6a:45:bd:5f:f9:f3:20:49:e4:d3:85:a5:
         30:69:7b:84:55:cf:c7:65:47:6f:e0:52:18:c1:82:e5:04:f8:
         2a:20:3b:45:ab:0d:b2:54:90:1b:34:0b:bc:e7:19:0f:95:65:
         18:b3:37:19:b3:18:1a:01:b6:33:1d:53:9c:6f:d8:eb:cd:c3:
         9f:29:ee:ae:dd:6b:5f:71:65:27:60:32:10:69:de:d6:4c:0e:
         68:a9:d6:60:7b:16:21:b5:7e:35:92:60:e2:a2:25:a3:2f:22:
         29:c5:84:38:1e:7b:d9:35:0c:8b:13:12:fe:58:5b:dc:a5:e8:
         99:48:b0:32:3c:3e:0f:1d:3b:51:e6:51:1d:fd:95:2e:b8:d9:
         16:dc:4e:9e:11:61:84:bc:a8:25:53:3c:33:eb:00:07:72:82:
         f8:6a:f6:dc:e8:af:3b:b7:3b:59:ae:1e:ee:43:38:18:a0:ae:
         9c:02:ff:96:b8:4e:21:25:12:98:50:e2:a4:34:6c:77:1d:fa:
         e1:91:11:8e:bb:cb:84:6e:17:7e:e4:fb:ee:9f:be:07:33:3c:
         d1:cf:32:9a:3d:a0:f5:03:e6:6a:b8:0a:1b:f7:e9:15:0d:16:
         11:45:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org