Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60721.roa
File:                     AS60721.roa (raw, json)
Hash identifier:          wZzBa12NfUVW55LuYA1JWtHkeu+JLUCqMzQBo4n5lLA=
Subject key identifier:   71:5E:22:71:77:AC:0B:27:B6:D4:13:77:83:1E:BA:E8:B4:70:AA:B0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       1C4615C263DB557F791C29DB41281414FF09BEDE
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60721.roa
Signing time:             Tue 22 Nov 2022 01:34:54 +0000
ROA not before:           Tue 22 Nov 2022 01:29:54 +0000
ROA not after:            Tue 21 Nov 2023 01:34:54 +0000
asID:                     60721
IP address blocks:        5.45.39.0/24 maxlen: 24
                          5.181.135.0/24 maxlen: 24
                          45.93.47.0/24 maxlen: 24
                          45.95.23.0/24 maxlen: 24
                          45.137.127.0/24 maxlen: 24
                          92.118.160.0/24 maxlen: 24
                          179.61.174.0/24 maxlen: 24
                          181.214.25.0/24 maxlen: 24
                          181.215.24.0/24 maxlen: 24
                          181.215.170.0/24 maxlen: 24
                          181.215.227.0/24 maxlen: 24
                          185.170.56.0/24 maxlen: 24
                          191.96.40.0/24 maxlen: 24
                          191.96.82.0/24 maxlen: 24
                          191.96.143.0/24 maxlen: 24
                          191.96.249.0/24 maxlen: 24
                          191.96.250.0/24 maxlen: 24
                          191.96.251.0/24 maxlen: 24
                          191.101.11.0/24 maxlen: 24
                          191.101.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:15:c2:63:db:55:7f:79:1c:29:db:41:28:14:14:ff:09:be:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 22 01:29:54 2022 GMT
            Not After : Nov 21 01:34:54 2023 GMT
        Subject: CN=715E227177AC0B27B6D41377831EBAE8B470AAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:76:1b:0e:09:50:a3:24:23:f2:73:7d:ac:
                    d5:f9:51:44:f5:1c:9a:93:8a:02:94:e4:dc:1b:24:
                    e3:9d:e5:67:64:c0:e8:2b:52:00:e9:95:d5:ae:68:
                    09:d6:a7:25:29:13:c6:9b:30:b5:aa:be:07:e7:70:
                    5b:44:83:d4:f9:01:5d:2a:7f:9d:5b:60:7a:6d:7d:
                    f9:b3:90:d7:c7:0a:5c:fe:94:9e:bd:bb:dc:36:f6:
                    3e:16:71:e1:af:bb:7e:27:ef:c8:b6:2c:4e:02:c1:
                    25:68:d4:b6:b3:6f:9c:45:56:d7:94:3e:2a:d3:e0:
                    fe:5a:f8:72:cd:30:20:90:a3:f1:8d:db:2d:e0:b3:
                    68:68:43:98:e2:05:2c:b5:cc:6a:21:9a:46:07:44:
                    64:0c:1d:59:1e:d1:be:7b:81:5b:36:0e:a9:1f:c8:
                    84:8a:9a:64:a6:81:58:6f:d2:72:74:ca:c3:46:78:
                    c9:2e:65:05:1a:dd:5c:1f:02:73:58:a5:16:2a:b6:
                    09:f2:bf:78:22:5c:cb:0d:4e:6f:02:a3:1b:72:f6:
                    92:a3:44:4d:e6:43:f5:17:0f:79:8e:90:1d:58:b2:
                    16:92:d5:ec:e0:95:06:9d:7b:da:08:e0:04:98:f2:
                    9f:da:33:12:48:d4:24:bd:46:21:2a:f5:9c:00:ad:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:22:71:77:AC:0B:27:B6:D4:13:77:83:1E:BA:E8:B4:70:AA:B0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60721.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.39.0/24
                  5.181.135.0/24
                  45.93.47.0/24
                  45.95.23.0/24
                  45.137.127.0/24
                  92.118.160.0/24
                  179.61.174.0/24
                  181.214.25.0/24
                  181.215.24.0/24
                  181.215.170.0/24
                  181.215.227.0/24
                  185.170.56.0/24
                  191.96.40.0/24
                  191.96.82.0/24
                  191.96.143.0/24
                  191.96.249.0-191.96.251.255
                  191.101.11.0/24
                  191.101.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:ea:9a:2e:e6:d4:da:ea:88:e8:66:c0:bc:48:b1:68:55:
         53:67:3c:6f:fb:32:c1:3e:13:2b:05:95:e8:b7:6f:64:a1:90:
         38:b5:6d:ab:cf:91:40:e8:97:cf:99:4c:44:7d:61:81:8f:53:
         e9:48:90:c3:7c:d7:80:8b:3b:81:c5:ee:6f:34:3c:23:0c:46:
         e3:92:d5:1a:ba:07:39:21:e3:36:fa:f3:bb:83:ca:bb:ad:04:
         90:97:5b:9d:e6:88:55:d5:9f:9b:04:62:d9:47:8e:58:5e:77:
         b4:fe:22:97:22:8c:25:a2:bb:57:d6:eb:06:35:78:4c:41:f6:
         dc:30:53:4e:72:7f:d9:46:ba:7a:e7:5c:a7:65:95:50:ef:32:
         e4:ea:17:25:9b:d4:1f:04:01:19:c0:52:ec:a9:ae:ac:de:89:
         8f:8c:65:b7:c2:b4:92:16:dc:b7:96:41:66:84:2e:15:7f:b9:
         33:64:8f:4e:f1:4e:b3:78:27:6c:6e:ea:e5:78:d9:43:7a:2d:
         3f:43:0f:2b:ff:9b:5a:ad:4f:95:e6:33:40:d7:a2:38:73:2d:
         15:c6:b8:d8:29:29:94:d2:a7:4a:8d:f4:71:a1:fc:2e:f7:cd:
         77:eb:36:68:a6:4f:87:e1:07:56:16:5a:c6:92:6a:31:77:04:
         1a:ac:a1:e5
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUHEYVwmPbVX95HCnbQSgUFP8Jvt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMjIwMTI5NTRaFw0yMzExMjEwMTM0NTRaMDMxMTAvBgNV
BAMTKDcxNUUyMjcxNzdBQzBCMjdCNkQ0MTM3NzgzMUVCQUU4QjQ3MEFBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx43YbDglQoyQj8nN9rNX5UUT1
HJqTigKU5NwbJOOd5WdkwOgrUgDpldWuaAnWpyUpE8abMLWqvgfncFtEg9T5AV0q
f51bYHptffmzkNfHClz+lJ69u9w29j4WceGvu34n78i2LE4CwSVo1Lazb5xFVteU
PirT4P5a+HLNMCCQo/GN2y3gs2hoQ5jiBSy1zGohmkYHRGQMHVke0b57gVs2Dqkf
yISKmmSmgVhv0nJ0ysNGeMkuZQUa3VwfAnNYpRYqtgnyv3giXMsNTm8Coxty9pKj
RE3mQ/UXD3mOkB1YshaS1ezglQade9oI4ASY8p/aMxJI1CS9RiEq9ZwArVG/AgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUcV4icXesCye21BN3gx666LRwqrAwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM2MDcyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBjQYIKwYB
BQUHAQcBAf8EfjB8MHoEAgABMHQDBAAFLScDBAAFtYcDBAAtXS8DBAAtXxcDBAAt
iX8DBABcdqADBACzPa4DBAC11hkDBAC11xgDBAC116oDBAC11+MDBAC5qjgDBAC/
YCgDBAC/YFIDBAC/YI8wDAMEAL9g+QMEAr9g+AMEAL9lCwMEAL9lkzANBgkqhkiG
9w0BAQsFAAOCAQEALbTqmi7m1NrqiOhmwLxIsWhVU2c8b/sywT4TKwWV6LdvZKGQ
OLVtq8+RQOiXz5lMRH1hgY9T6UiQw3zXgIs7gcXubzQ8IwxG45LVGroHOSHjNvrz
u4PKu60EkJdbneaIVdWfmwRi2UeOWF53tP4ilyKMJaK7V9brBjV4TEH23DBTTnJ/
2Ua6eudcp2WVUO8y5OoXJZvUHwQBGcBS7KmurN6Jj4xlt8K0khbct5ZBZoQuFX+5
M2SPTvFOs3gnbG7q5XjZQ3otP0MPK/+bWq1PleYzQNeiOHMtFca42CkplNKnSo30
caH8LvfNd+s2aKZPh+EHVhZaxpJqMXcEGqyh5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org