Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          ZI692Nj1eVElBgPVpwPymOlGRSWasamcHo++7XwyeKo=
Subject key identifier:   3D:7C:19:E4:AC:B7:8A:89:E4:8D:3C:4F:00:C1:95:1A:99:CC:2A:18
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       3532FAFC101573BF01400E1CF5B2815183A18591
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS62240.roa
Signing time:             Thu 24 Nov 2022 10:51:54 +0000
ROA not before:           Thu 24 Nov 2022 10:46:54 +0000
ROA not after:            Thu 23 Nov 2023 10:51:54 +0000
asID:                     62240
IP address blocks:        5.252.80.0/24 maxlen: 24
                          45.89.242.0/24 maxlen: 24
                          45.137.126.0/24 maxlen: 24
                          181.41.195.0/24 maxlen: 24
                          181.214.1.0/24 maxlen: 24
                          181.215.55.0/24 maxlen: 24
                          185.141.167.0/24 maxlen: 24
                          191.96.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:fa:fc:10:15:73:bf:01:40:0e:1c:f5:b2:81:51:83:a1:85:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 24 10:46:54 2022 GMT
            Not After : Nov 23 10:51:54 2023 GMT
        Subject: CN=3D7C19E4ACB78A89E48D3C4F00C1951A99CC2A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:96:54:cd:2c:e3:db:21:ac:37:f9:48:c6:
                    6d:00:6f:7b:08:b0:ca:4d:06:c3:94:91:72:a5:16:
                    15:1c:b5:31:32:ca:fc:63:02:39:56:c3:d2:67:37:
                    e9:8d:e2:6e:58:59:c4:7f:4d:c3:e9:da:ed:3d:56:
                    a5:8c:d5:00:64:0a:87:f4:f9:25:b6:81:a1:a8:0f:
                    49:1d:dd:41:c3:7a:c6:65:ea:77:48:ed:5c:2b:c8:
                    8e:51:bb:49:50:73:e5:91:f6:50:26:9c:57:b5:24:
                    8f:e9:71:60:b7:75:3d:0c:40:f9:db:72:4a:18:b5:
                    2e:b8:23:85:cd:4b:c2:11:bf:8a:c7:0c:a7:bf:01:
                    7b:b0:28:15:e3:70:1a:a0:b6:06:03:3f:ec:ae:8e:
                    a2:aa:c2:c8:86:6c:00:57:a2:ce:e9:8b:2b:06:a4:
                    78:93:f1:42:2d:1d:5c:95:31:87:fc:ab:ea:ab:4f:
                    94:5b:82:da:9c:d5:84:2a:96:10:bb:fc:dd:5a:a6:
                    ab:1a:24:7e:0d:65:7b:9b:24:be:43:46:d4:c4:cf:
                    8e:db:44:10:87:31:6d:5b:98:01:ff:0b:e2:88:ae:
                    00:67:cc:52:37:13:ca:2e:79:ef:c8:6e:e5:f1:9d:
                    95:8d:cb:e0:99:aa:a2:ff:e3:87:29:59:3b:8c:e4:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7C:19:E4:AC:B7:8A:89:E4:8D:3C:4F:00:C1:95:1A:99:CC:2A:18
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/24
                  45.89.242.0/24
                  45.137.126.0/24
                  181.41.195.0/24
                  181.214.1.0/24
                  181.215.55.0/24
                  185.141.167.0/24
                  191.96.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:03:7f:51:97:5b:de:4f:b3:11:ef:67:0b:2b:1e:fc:36:c1:
         66:5c:fd:bc:51:8b:78:ca:91:78:1b:55:2e:b4:d3:84:59:7f:
         88:c4:82:bb:76:4b:e7:e1:c6:b7:16:55:8b:97:ee:82:3c:f7:
         8e:19:35:28:3d:ce:a6:ca:d2:e5:73:cd:7a:34:a8:57:6a:43:
         33:63:41:90:19:42:0d:7c:a6:82:1c:a4:ff:5e:13:38:39:6a:
         6f:18:39:a8:2b:d0:5c:d5:e6:21:f3:b0:13:d1:47:70:8d:8c:
         01:65:15:31:f8:42:96:ad:d3:99:0c:f4:8d:81:a6:1b:03:3f:
         36:06:53:2d:f7:85:3a:f5:14:1e:03:ab:b8:f1:68:1d:82:14:
         78:90:fe:2d:f7:96:ba:5d:a2:ba:8c:ee:16:76:db:fa:99:c3:
         50:e1:53:91:a5:a7:d2:08:fb:99:78:10:cd:4c:3a:82:71:36:
         a0:97:f7:d2:f4:80:82:b8:12:58:72:12:02:35:e0:96:f8:4a:
         0f:20:d9:47:fa:88:6b:ee:6c:b5:22:9b:fc:32:f5:d7:e6:ae:
         a7:02:26:7c:04:ae:28:a4:e5:91:af:4d:90:0c:4a:2f:0c:ad:
         60:e3:42:67:d6:e2:36:72:a6:bc:5d:2e:c4:9d:bb:d6:23:ff:
         e8:7a:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org