Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46562.roa
File:                     AS46562.roa (raw, json)
Hash identifier:          N60pNUc7H8Ya1c+IT+W3ntzvASllLWDZL6gtvPtDdK0=
Subject key identifier:   F4:15:6C:A9:13:21:65:D5:80:22:42:D1:7A:38:F2:40:C8:9A:B7:BE
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       49398DDDA62EC69B7816B7585C15BDBB6ABE3974
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46562.roa
Signing time:             Wed 02 Nov 2022 02:55:53 +0000
ROA not before:           Wed 02 Nov 2022 02:50:53 +0000
ROA not after:            Wed 01 Nov 2023 02:55:53 +0000
asID:                     46562
IP address blocks:        45.95.37.0/24 maxlen: 24
                          179.61.206.0/24 maxlen: 24
                          179.61.216.0/24 maxlen: 24
                          181.214.5.0/24 maxlen: 24
                          181.214.45.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.214.195.0/24 maxlen: 24
                          181.214.247.0/24 maxlen: 24
                          191.96.37.0/24 maxlen: 24
                          191.96.103.0/24 maxlen: 24
                          191.96.215.0/24 maxlen: 24
                          191.96.236.0/24 maxlen: 24
                          191.96.237.0/24 maxlen: 24
                          191.96.238.0/24 maxlen: 24
                          191.101.237.0/24 maxlen: 24
                          193.227.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:8d:dd:a6:2e:c6:9b:78:16:b7:58:5c:15:bd:bb:6a:be:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov  2 02:50:53 2022 GMT
            Not After : Nov  1 02:55:53 2023 GMT
        Subject: CN=F4156CA9132165D5802242D17A38F240C89AB7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:c1:52:94:ca:72:e8:5a:9a:24:3c:70:f6:
                    67:be:55:cb:26:80:82:eb:f4:b5:87:b6:85:a5:92:
                    63:c6:b5:0e:fa:1f:62:93:80:9f:51:08:56:1d:db:
                    1e:fc:35:f9:40:99:46:d7:bf:a5:31:2c:6d:72:77:
                    a2:c0:16:46:2a:70:67:32:3e:27:4b:b0:d2:c3:00:
                    90:ef:14:8a:24:31:c0:d9:0c:9e:74:8f:a8:3a:15:
                    b6:f9:90:80:49:b0:60:08:94:de:bd:9f:9b:a8:0e:
                    61:93:08:e0:da:32:d1:1a:80:f0:42:08:99:37:e6:
                    e9:b1:2e:6d:eb:bd:dc:74:fb:2f:e2:f6:b7:53:6f:
                    1d:60:97:9e:5c:44:4c:cb:7c:76:c7:c2:83:9c:a7:
                    63:c5:7c:b1:e6:08:f7:c3:7a:49:96:df:e0:78:69:
                    f4:aa:1d:4a:80:5c:31:01:7b:15:7c:85:95:7d:7b:
                    60:ed:f3:5a:c2:88:de:2b:3a:29:c1:b0:c9:58:97:
                    80:9c:96:21:1c:d9:d6:cd:66:a8:e2:90:39:90:20:
                    9e:b4:bd:f0:ba:fb:4d:44:b6:d4:e1:4e:01:59:58:
                    d8:6f:d1:94:33:fe:b5:bc:86:2b:9d:63:7f:9d:b2:
                    3a:8a:31:d0:e4:f4:ce:ad:91:10:0c:4d:a1:fd:58:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:15:6C:A9:13:21:65:D5:80:22:42:D1:7A:38:F2:40:C8:9A:B7:BE
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.37.0/24
                  179.61.206.0/24
                  179.61.216.0/24
                  181.214.5.0/24
                  181.214.45.0/24
                  181.214.122.0/24
                  181.214.195.0/24
                  181.214.247.0/24
                  191.96.37.0/24
                  191.96.103.0/24
                  191.96.215.0/24
                  191.96.236.0-191.96.238.255
                  191.101.237.0/24
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:60:1d:4e:78:08:50:0d:9c:01:9b:2a:ba:97:87:e5:61:
         8a:f9:8b:51:89:24:3e:13:1d:de:74:98:7f:a4:e7:db:e2:9b:
         ca:37:5a:8e:a4:84:88:77:2c:42:41:89:0f:7b:1b:96:74:c1:
         f3:a3:f0:7f:94:51:0f:92:75:23:c1:39:6c:82:5c:85:fa:5a:
         ed:64:b7:ef:44:a6:2f:6c:11:92:84:82:19:c8:cf:50:e6:db:
         43:06:c2:c0:9a:9a:99:71:22:74:3a:17:52:9b:30:aa:91:ae:
         11:79:05:20:a7:8b:be:0a:c7:25:cf:b0:6d:1d:c4:4e:53:0f:
         f0:5c:18:d4:ae:4d:87:11:58:35:ef:4b:dc:00:11:d8:39:f2:
         f5:7b:9a:65:93:fe:e1:0b:4c:b7:5c:9c:fe:ce:c8:70:6d:5d:
         17:7e:25:4a:0f:07:76:01:16:6c:0d:8c:69:30:da:40:79:4e:
         e7:1a:fe:2d:75:bb:b7:ef:10:ec:cc:d5:52:a4:c3:e2:68:d0:
         ad:10:18:dc:3a:63:03:c3:82:ca:84:eb:a7:df:4c:1f:d0:c0:
         e9:7e:7d:b9:24:e4:4d:d2:24:8d:07:10:ee:84:10:50:c9:9d:
         87:d9:6c:21:4a:71:ea:db:81:6b:9d:8b:98:36:5f:41:da:2f:
         2e:ed:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org