Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14445.roa
File:                     AS14445.roa (raw, json)
Hash identifier:          FCdtMetlccWwARPSuxg3RAXUWJ3EiDrr+nbRE73/WI4=
Subject key identifier:   4C:4A:DC:CD:8E:0F:EA:14:60:32:FA:F3:99:D1:58:71:EF:24:7E:58
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       525950E3742ACC6DEAF3C24C2CCB5D8328997725
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14445.roa
Signing time:             Fri 23 Dec 2022 00:00:14 +0000
ROA not before:           Thu 22 Dec 2022 23:55:14 +0000
ROA not after:            Fri 22 Dec 2023 00:00:14 +0000
asID:                     14445
IP address blocks:        45.95.12.0/24 maxlen: 24
                          181.214.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:59:50:e3:74:2a:cc:6d:ea:f3:c2:4c:2c:cb:5d:83:28:99:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 22 23:55:14 2022 GMT
            Not After : Dec 22 00:00:14 2023 GMT
        Subject: CN=4C4ADCCD8E0FEA146032FAF399D15871EF247E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:3a:e2:d1:a4:bd:b8:db:c6:38:ee:fb:c7:
                    b1:2e:0a:ed:5d:9e:9d:2c:49:7d:38:1e:4c:ea:a8:
                    c3:09:6a:e7:19:1b:ff:a4:f2:f3:f4:86:de:c8:bc:
                    c1:50:0d:f7:a0:17:08:08:87:dc:13:5c:4f:f8:d2:
                    16:2f:31:2e:65:bb:de:e1:f6:40:19:48:f8:fe:55:
                    bf:f5:bb:23:18:e3:74:f3:e7:e4:40:54:22:74:ed:
                    a8:18:4a:89:b2:9b:b4:24:f2:57:24:3b:c6:a0:ae:
                    f5:ac:5e:0d:ba:76:19:09:f2:62:94:e2:5b:e7:8e:
                    f1:87:e8:3c:35:ed:f9:a7:bb:3b:54:2b:85:8c:e5:
                    8b:be:f6:75:33:14:50:40:92:48:05:63:09:21:01:
                    bc:13:c9:73:4f:f2:e6:f2:e4:5e:c8:29:d2:f7:e9:
                    8f:6d:57:15:7e:d3:fa:5f:6c:13:13:29:a0:4f:62:
                    25:e8:b7:f3:c1:b6:6b:b3:7a:f0:4f:03:1e:12:6a:
                    06:ae:65:af:a5:aa:08:f0:3d:8a:4a:e0:03:02:7f:
                    a3:a8:af:97:ec:8d:a6:5c:9a:9c:6c:a5:35:fc:0b:
                    b2:40:9b:7a:96:95:6c:f0:19:ab:53:73:fa:35:15:
                    e6:7d:c2:f9:d6:05:e1:4e:31:12:79:35:f8:71:5b:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:DC:CD:8E:0F:EA:14:60:32:FA:F3:99:D1:58:71:EF:24:7E:58
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.12.0/24
                  181.214.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:81:07:7b:7d:f0:d0:0d:0c:2d:ae:9e:f6:52:f5:8b:6f:
         db:da:ef:ed:60:17:1c:b1:5b:a2:07:5a:3d:56:5f:18:02:99:
         97:24:6b:32:34:84:7c:34:5a:c6:1c:ae:bf:9e:23:de:1b:61:
         b3:85:c9:ad:dc:14:09:f8:c2:82:88:33:fc:c8:ce:7d:1e:17:
         c5:b6:b7:02:22:f8:f1:54:06:50:11:b3:9e:ea:f6:dc:e3:33:
         61:1d:e9:2a:d0:31:f9:50:37:5f:54:a8:20:43:54:9a:de:64:
         8a:53:38:fc:4b:de:7f:1b:d0:65:f8:97:74:90:e9:1e:e6:ae:
         f5:45:2a:3a:2a:5c:c5:cc:46:77:15:01:ed:f5:da:bf:44:fc:
         f5:17:1e:c5:d0:2f:61:f2:54:f7:60:d9:7f:c2:ce:aa:14:a4:
         32:c3:cf:0b:08:39:cb:c0:4b:2a:fe:df:4d:11:fb:5c:6f:de:
         1f:6e:4b:eb:d9:08:e6:57:6b:61:06:15:e1:f4:6b:25:11:77:
         5d:fe:cc:06:29:e5:04:79:a0:26:3b:b4:89:d8:99:d8:27:e5:
         91:82:bb:57:ca:f1:7f:54:5e:a1:2f:97:57:35:18:35:b4:d5:
         18:1c:3f:cc:e3:85:bb:d9:19:d5:43:a0:cb:0b:16:37:07:de:
         27:46:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org