Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211975.roa
File:                     AS211975.roa (raw, json)
Hash identifier:          9XiaM2mcxP0JRgaiWthc7Z2LaoNLFgqI+IZdh8t6EPg=
Subject key identifier:   AE:D6:B2:03:16:E6:AA:4F:AB:DA:A0:26:9D:E0:79:E9:12:62:34:78
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       53332FCC7CE514093F504D5FED4FC9FEAC1F133B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211975.roa
Signing time:             Mon 13 Feb 2023 17:21:59 +0000
ROA not before:           Mon 13 Feb 2023 17:16:59 +0000
ROA not after:            Mon 12 Feb 2024 17:21:59 +0000
asID:                     211975
IP address blocks:        45.95.13.0/24 maxlen: 24
                          45.139.183.0/24 maxlen: 24
                          185.135.8.0/24 maxlen: 24
                          185.137.15.0/24 maxlen: 24
                          194.110.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:2f:cc:7c:e5:14:09:3f:50:4d:5f:ed:4f:c9:fe:ac:1f:13:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 13 17:16:59 2023 GMT
            Not After : Feb 12 17:21:59 2024 GMT
        Subject: CN=AED6B20316E6AA4FABDAA0269DE079E912623478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:e2:79:15:ee:20:db:c4:b8:da:3e:21:90:
                    71:2e:4c:5b:1c:49:f3:aa:f9:b8:46:20:c9:e6:36:
                    fa:79:a9:53:a4:d7:9b:dc:02:eb:3d:bb:9a:21:93:
                    30:2c:7e:d8:60:77:b5:d1:57:6f:ca:b1:18:aa:0d:
                    53:18:0c:af:c1:07:a1:6a:1d:a1:11:9c:c2:17:6e:
                    af:14:05:24:1e:20:24:bf:33:50:e9:6f:59:be:1e:
                    52:ea:bb:84:61:23:23:31:38:4a:fc:32:6f:e7:a5:
                    fd:ee:d4:c0:fa:ed:4c:29:2b:08:65:c3:f3:75:cd:
                    5f:73:6d:e2:30:7f:5d:dc:c3:08:94:4c:c0:ca:df:
                    0d:7e:05:27:a3:4c:0f:d9:68:69:89:5b:a7:50:3d:
                    61:c1:ab:9a:36:e2:95:23:1e:ff:c1:8d:45:3e:ed:
                    c0:0d:1c:7d:d5:27:8b:90:91:a8:fb:b6:fc:0d:c1:
                    f4:c9:54:e9:b7:a6:fc:2a:aa:bb:13:e7:ca:83:bc:
                    ab:4e:cd:20:0f:9f:20:95:a3:0b:27:18:b2:6c:4c:
                    a8:ed:44:f7:30:c6:73:44:ce:c0:e8:95:12:7a:85:
                    b0:1e:cc:4f:9f:1b:d3:8e:b1:62:d1:1c:fa:71:cf:
                    40:50:ed:76:c5:ab:52:f0:65:d3:50:33:d7:37:db:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:B2:03:16:E6:AA:4F:AB:DA:A0:26:9D:E0:79:E9:12:62:34:78
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.13.0/24
                  45.139.183.0/24
                  185.135.8.0/24
                  185.137.15.0/24
                  194.110.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:04:7a:8c:c4:8a:ff:ad:5c:41:76:0a:b4:7e:0d:68:1e:
         ce:00:35:67:c0:bf:17:b7:be:0f:26:26:b1:12:8c:c3:72:af:
         be:22:9c:08:63:6c:bd:a3:b0:2a:3b:4e:3e:96:eb:20:f2:6c:
         1c:e1:14:dd:50:39:96:17:ba:8c:0f:6e:e2:b4:3f:7b:0d:dc:
         97:11:f6:8a:85:18:32:d0:60:8d:99:67:50:6d:03:03:84:36:
         bf:d1:48:fe:09:13:9c:bd:4d:91:7a:8a:28:c3:84:25:55:2e:
         03:00:e3:e2:cb:48:d4:3e:a3:5e:aa:bd:65:a8:bb:8a:77:dd:
         42:98:55:45:24:61:83:b6:df:e1:61:6b:e4:4f:2a:8f:e0:78:
         17:33:90:00:0b:1c:a2:f4:f9:eb:0e:34:4a:32:f4:aa:49:cb:
         98:94:6a:43:5a:18:8f:f9:19:e0:d5:40:62:59:bc:68:ec:9b:
         ca:e5:4d:26:09:42:87:4f:fa:10:6a:cf:66:b0:2b:ff:48:d5:
         7a:88:a5:47:92:56:c8:ac:a2:d0:c9:06:45:5d:d0:33:97:38:
         49:c1:f8:52:ff:8a:c4:11:3c:b1:8d:08:b6:14:62:b4:33:84:
         36:6c:f6:0a:af:4a:23:70:97:82:8d:69:a2:61:51:92:e3:56:
         49:a8:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org