Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47583.roa
File:                     AS47583.roa (raw, json)
Hash identifier:          nE7jEY74oEk4b4rXC//ms6VpknRsqSmbEIQ22ozP/po=
Subject key identifier:   4B:3A:B1:AF:FD:02:82:54:C9:B5:A1:95:9F:0D:7E:B1:0B:2B:89:03
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4068C1E05491AF13887B94B63A60C33207FAC2D3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47583.roa
Signing time:             Thu 13 Oct 2022 12:58:43 +0000
ROA not before:           Thu 13 Oct 2022 12:53:43 +0000
ROA not after:            Thu 12 Oct 2023 12:58:43 +0000
asID:                     47583
IP address blocks:        179.61.188.0/24 maxlen: 24
                          179.61.189.0/24 maxlen: 24
                          179.61.192.0/24 maxlen: 24
                          179.61.219.0/24 maxlen: 24
                          179.61.246.0/24 maxlen: 24
                          181.215.68.0/23 maxlen: 24
                          181.215.78.0/23 maxlen: 24
                          181.215.134.0/23 maxlen: 23
                          191.96.1.0/24 maxlen: 24
                          191.96.31.0/24 maxlen: 24
                          191.96.53.0/24 maxlen: 24
                          191.96.54.0/24 maxlen: 24
                          191.96.56.0/24 maxlen: 24
                          191.96.57.0/24 maxlen: 24
                          191.96.63.0/24 maxlen: 24
                          191.101.0.0/24 maxlen: 24
                          191.101.1.0/24 maxlen: 24
                          191.101.2.0/24 maxlen: 24
                          191.101.3.0/24 maxlen: 24
                          191.101.12.0/22 maxlen: 22
                          191.101.12.0/23 maxlen: 24
                          191.101.14.0/23 maxlen: 24
                          191.101.70.0/23 maxlen: 24
                          191.101.78.0/23 maxlen: 24
                          191.101.80.0/23 maxlen: 24
                          191.101.228.0/22 maxlen: 24
                          191.101.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:68:c1:e0:54:91:af:13:88:7b:94:b6:3a:60:c3:32:07:fa:c2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 13 12:53:43 2022 GMT
            Not After : Oct 12 12:58:43 2023 GMT
        Subject: CN=4B3AB1AFFD028254C9B5A1959F0D7EB10B2B8903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:e2:1a:c1:cf:1a:17:3c:16:7d:49:9a:54:
                    7e:0e:b9:a0:ea:39:15:f1:3e:e4:bd:7a:54:2d:6b:
                    96:ba:9c:fb:69:60:58:4d:5a:7c:68:eb:ac:be:c1:
                    b5:61:88:be:84:82:6e:e9:6e:22:c0:3c:00:df:d5:
                    cd:73:f6:86:52:d5:bc:41:46:3c:bb:76:00:00:25:
                    55:b0:98:85:4d:06:6d:a9:61:b1:17:7d:e3:08:51:
                    31:e1:70:f0:85:59:fa:a1:46:34:8f:48:39:76:74:
                    a8:69:95:22:1c:e6:ce:5e:43:c5:bd:dc:f1:35:b0:
                    2c:50:e6:28:ba:3c:08:a5:00:f1:dc:3d:68:d2:c5:
                    9d:69:85:25:1d:21:70:91:a3:10:21:a5:e9:b9:a4:
                    63:96:8c:a9:c0:6f:11:2d:7e:47:a2:d1:59:5c:f2:
                    ac:d3:02:29:2b:b8:e6:c7:4d:df:78:c6:e2:26:07:
                    e7:91:77:9f:0d:cc:55:eb:4e:65:ce:fc:77:90:9a:
                    38:ac:57:62:ce:e2:a6:0f:6a:7d:31:7c:f4:d2:41:
                    ab:47:76:5c:98:4a:1d:d6:ec:50:d8:91:6c:f1:e5:
                    c7:7d:fd:ff:a3:cb:49:ae:ba:4a:7a:65:3f:ae:90:
                    aa:91:3e:c0:63:10:76:b3:63:6e:ec:c8:d2:82:71:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:B1:AF:FD:02:82:54:C9:B5:A1:95:9F:0D:7E:B1:0B:2B:89:03
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS47583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.188.0/23
                  179.61.192.0/24
                  179.61.219.0/24
                  179.61.246.0/24
                  181.215.68.0/23
                  181.215.78.0/23
                  181.215.134.0/23
                  191.96.1.0/24
                  191.96.31.0/24
                  191.96.53.0-191.96.54.255
                  191.96.56.0/23
                  191.96.63.0/24
                  191.101.0.0/22
                  191.101.12.0/22
                  191.101.70.0/23
                  191.101.78.0-191.101.81.255
                  191.101.228.0-191.101.235.255

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:26:6a:dc:b6:5f:80:64:d3:32:a5:45:f9:f0:c3:df:fb:
         b8:69:37:d4:a1:1d:7f:88:1e:91:15:54:25:96:ed:0f:c5:3c:
         42:e6:79:80:da:f4:c8:fd:38:f9:8d:e9:f7:8e:2f:3d:51:3d:
         ef:78:44:f3:9e:4a:bb:0b:87:e4:19:1c:d6:7d:6a:e2:61:d6:
         6e:79:04:36:95:47:43:7a:12:69:ee:13:5e:0d:df:1f:5b:9b:
         2f:ab:a6:eb:03:b2:2c:a3:59:26:7d:81:94:d0:53:3a:1c:af:
         a2:18:43:6c:7a:ca:49:aa:9f:54:99:f4:e7:15:65:ae:e3:3e:
         99:b6:73:f3:8b:70:3a:7b:6a:88:b1:a0:12:6c:b8:6b:ba:6e:
         6b:d2:5a:92:a4:c6:0c:12:b2:e2:da:81:43:17:17:c7:ff:37:
         de:ce:48:db:48:ca:7f:19:27:85:1c:83:48:4a:30:2e:42:d6:
         2c:53:37:0e:47:1f:27:9d:93:80:3a:0a:f8:97:79:f0:f0:61:
         e2:70:df:e9:dc:d3:63:95:ad:e9:33:6c:8c:d2:99:70:1e:4f:
         4c:70:2d:3f:8a:70:b2:87:14:cd:16:2f:f5:59:cf:d7:b1:d1:
         8e:89:9a:96:d0:11:da:c9:bf:46:7a:5e:28:34:e5:46:de:a7:
         90:d7:59:a4
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUQGjB4FSRrxOIe5S2OmDDMgf6wtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMTMxMjUzNDNaFw0yMzEwMTIxMjU4NDNaMDMxMTAvBgNV
BAMTKDRCM0FCMUFGRkQwMjgyNTRDOUI1QTE5NTlGMEQ3RUIxMEIyQjg5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3eIawc8aFzwWfUmaVH4OuaDq
ORXxPuS9elQta5a6nPtpYFhNWnxo66y+wbVhiL6Egm7pbiLAPADf1c1z9oZS1bxB
Rjy7dgAAJVWwmIVNBm2pYbEXfeMIUTHhcPCFWfqhRjSPSDl2dKhplSIc5s5eQ8W9
3PE1sCxQ5ii6PAilAPHcPWjSxZ1phSUdIXCRoxAhpem5pGOWjKnAbxEtfkei0Vlc
8qzTAikruObHTd94xuImB+eRd58NzFXrTmXO/HeQmjisV2LO4qYPan0xfPTSQatH
dlyYSh3W7FDYkWzx5cd9/f+jy0muukp6ZT+ukKqRPsBjEHazY27syNKCcVyzAgMB
AAGjggJvMIICazAdBgNVHQ4EFgQUSzqxr/0CglTJtaGVnw1+sQsriQMwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM0NzU4My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBmgYIKwYB
BQUHAQcBAf8EgYowgYcwgYQEAgABMH4DBAGzPbwDBACzPcADBACzPdsDBACzPfYD
BAG110QDBAG1104DBAG114YDBAC/YAEDBAC/YB8wDAMEAL9gNQMEAL9gNgMEAb9g
OAMEAL9gPwMEAr9lAAMEAr9lDAMEAb9lRjAMAwQBv2VOAwQBv2VQMAwDBAK/ZeQD
BAK/ZegwDQYJKoZIhvcNAQELBQADggEBACCqJmrctl+AZNMypUX58MPf+7hpN9Sh
HX+IHpEVVCWW7Q/FPELmeYDa9Mj9OPmN6feOLz1RPe94RPOeSrsLh+QZHNZ9auJh
1m55BDaVR0N6EmnuE14N3x9bmy+rpusDsiyjWSZ9gZTQUzocr6IYQ2x6ykmqn1SZ
9OcVZa7jPpm2c/OLcDp7aoixoBJsuGu6bmvSWpKkxgwSsuLagUMXF8f/N97OSNtI
yn8ZJ4Ucg0hKMC5C1ixTNw5HHyedk4A6CviXefDwYeJw3+nc02OVrekzbIzSmXAe
T0xwLT+KcLKHFM0WL/VZz9ex0Y6JmpbQEdrJv0Z6Xig05Ubep5DXWaQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org