Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30456.roa
File:                     AS30456.roa (raw, json)
Hash identifier:          4XRhmsg/b6gxiqiLZ9itljtZtqWVlOOPXgvcNKcChqM=
Subject key identifier:   F7:81:97:38:74:A2:9E:65:04:50:90:18:CD:F6:03:0A:32:2F:50:93
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       68A3B865D54E7C65D6BC80308174FEC463006F39
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30456.roa
Signing time:             Sat 27 Aug 2022 09:40:11 +0000
ROA not before:           Sat 27 Aug 2022 09:35:11 +0000
ROA not after:            Sat 26 Aug 2023 09:40:11 +0000
asID:                     30456
IP address blocks:        181.215.31.0/24 maxlen: 24
                          185.135.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a3:b8:65:d5:4e:7c:65:d6:bc:80:30:81:74:fe:c4:63:00:6f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:35:11 2022 GMT
            Not After : Aug 26 09:40:11 2023 GMT
        Subject: CN=F781973874A29E6504509018CDF6030A322F5093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:80:c2:9d:ee:bb:ed:f7:19:d8:19:24:cb:
                    d9:2b:50:00:a1:70:1a:45:79:33:2e:f2:c6:87:69:
                    30:96:66:fb:bc:c4:0a:67:b7:05:22:fb:9b:7a:8f:
                    db:be:29:99:fb:0b:49:be:84:71:c7:76:df:88:cb:
                    98:10:31:33:b9:10:3a:46:da:0b:f6:94:51:5a:f0:
                    84:0c:60:11:e4:23:9b:c7:52:71:aa:b8:e1:9d:b6:
                    43:63:68:e8:4c:07:01:3e:6c:80:44:00:ba:bc:9e:
                    c4:c5:16:79:58:dd:35:af:6e:e8:a6:3f:46:11:e5:
                    37:70:43:e1:9f:57:1e:3d:0a:eb:e7:8f:e1:ce:29:
                    b6:de:9f:e2:e2:aa:ac:0c:79:b0:85:75:82:9f:2c:
                    7a:35:c5:31:d3:04:f2:4a:23:8f:93:63:42:63:1c:
                    b4:6b:21:2b:61:72:a2:55:63:90:07:9f:45:c2:8a:
                    07:29:55:fd:fa:53:a6:42:d0:e6:b5:53:a0:53:72:
                    9a:f2:10:8a:8a:70:6e:1f:5a:8c:03:92:b1:19:f9:
                    c2:41:1d:52:1c:38:bd:79:2f:a9:78:6e:3b:96:df:
                    48:33:e9:77:4d:29:73:9c:5b:91:eb:7e:ec:71:14:
                    62:75:db:ec:ff:83:18:3b:ed:5e:e7:64:a8:91:31:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:97:38:74:A2:9E:65:04:50:90:18:CD:F6:03:0A:32:2F:50:93
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30456.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.31.0/24
                  185.135.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:51:85:c0:4e:a8:48:42:71:55:5a:db:4e:8c:27:a2:42:
         a6:da:01:82:0b:5d:f6:83:4f:da:22:fa:6f:e8:12:e0:7c:71:
         28:8a:d6:1b:9a:f0:99:ad:4e:e1:82:89:24:5a:0f:7e:77:34:
         5f:bc:51:16:72:6d:b9:a0:f7:7e:cd:17:0d:fa:16:37:f5:8f:
         27:ef:33:04:cc:eb:f7:f0:d2:99:d7:8c:6c:a9:5c:3d:3e:c8:
         ba:ff:be:e8:3b:eb:fb:11:76:06:34:eb:96:c1:41:5e:81:7e:
         dd:5a:ac:84:21:c4:b8:d2:c9:9c:0c:33:d4:e3:6c:33:1d:42:
         27:9b:18:81:5d:0d:07:15:aa:78:2e:f4:7a:31:9a:b4:8c:43:
         b1:d0:60:d1:76:fd:dc:48:8b:83:4a:1a:b8:cd:a8:51:97:1f:
         a3:41:40:66:c0:23:a2:ff:8a:6f:d0:2a:3d:49:24:16:5e:6d:
         a3:8a:1e:d0:8d:42:d0:43:78:e5:19:a5:3e:20:26:44:25:b2:
         7a:aa:cd:c6:ad:67:c1:d4:7a:73:f3:8e:eb:6a:ef:bd:85:3a:
         1d:2d:c6:21:41:2e:5c:28:b0:22:a4:45:84:d9:31:7f:ee:57:
         4e:99:c8:71:af:d1:59:47:c9:55:87:50:77:3b:19:e7:07:fb:
         10:98:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org