Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          vDYZz4KyTkR4O1G3lCIqTD2Uc/SBklnH8YdhhCHCNGk=
Subject key identifier:   EB:F3:5E:FB:24:D5:06:C2:E4:B5:E5:F2:68:0D:C7:D1:C2:2D:6D:62
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5E29159E4BE033F21DD6D658279585E4292F6E4A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30058.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     30058
IP address blocks:        179.61.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:15:9e:4b:e0:33:f2:1d:d6:d6:58:27:95:85:e4:29:2f:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=EBF35EFB24D506C2E4B5E5F2680DC7D1C22D6D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:2d:8b:54:dd:87:85:d9:4b:41:44:88:54:
                    24:65:c3:94:48:8c:7a:52:01:38:4f:23:6d:29:65:
                    ae:03:43:67:39:e5:37:77:30:43:e6:d8:fe:82:f6:
                    db:67:63:c1:3b:23:a2:34:ac:a0:de:c7:b8:45:aa:
                    cf:83:3e:47:41:e0:2a:6f:a7:4f:dc:55:d3:ca:cd:
                    3b:ea:7b:bd:bc:35:12:a6:25:4e:50:16:f1:9f:44:
                    24:1b:e6:a7:ac:ca:13:01:51:2b:37:36:78:3b:58:
                    af:7e:93:2e:f5:7b:1b:f9:bd:f3:a2:dd:84:ff:49:
                    8b:78:bb:80:c0:97:b9:0f:a7:e0:f3:b3:d3:91:82:
                    39:86:30:2d:49:a0:6c:99:98:bd:19:49:d2:10:87:
                    92:b8:56:48:ff:94:95:3b:a9:9c:1d:e1:ad:cf:fc:
                    c2:c5:43:7f:8b:13:2a:d3:4c:0f:4b:5d:13:7a:b0:
                    e0:fc:80:d3:bb:29:1a:31:95:8b:03:2d:4c:0e:f9:
                    4f:c6:10:e0:4a:8f:6a:94:54:f0:71:9c:fd:c5:7b:
                    34:13:fd:75:42:2d:b3:d7:0c:7f:ec:9c:5f:fe:c6:
                    49:ef:1e:70:c2:50:8e:f0:27:f3:8d:88:69:fd:a8:
                    58:cf:5f:6d:b1:0a:9b:64:3f:b5:34:91:dd:a0:dd:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:5E:FB:24:D5:06:C2:E4:B5:E5:F2:68:0D:C7:D1:C2:2D:6D:62
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:49:cd:1f:17:79:29:28:22:53:62:be:cc:80:00:ea:3d:4c:
         4f:58:3d:e4:ac:a8:9b:aa:8f:04:1d:3c:87:77:a9:90:de:0b:
         28:7d:88:62:f2:6d:6d:f5:c7:f3:84:46:27:4b:18:b1:e3:73:
         fa:ba:18:84:ee:8f:6f:d5:16:33:0a:ff:66:1d:cb:3c:16:75:
         eb:34:c9:ae:73:69:69:b3:b7:8c:e9:e7:a6:36:54:de:3e:2f:
         e1:ab:b8:8c:65:b1:95:2c:a1:d5:77:2b:9d:54:7d:2f:46:fc:
         8f:7f:d0:52:20:c6:72:01:5d:ef:13:5c:50:0e:ff:e2:0b:1f:
         24:dc:32:89:f3:5e:db:7c:a3:f9:55:c8:22:54:68:0c:2e:01:
         5c:e8:c9:cf:6e:3b:b0:79:bf:95:57:cb:d9:4d:5c:f8:3d:88:
         68:e4:b5:8d:35:b5:2b:3f:27:fc:3d:cf:fd:a1:54:8d:48:b1:
         c3:31:5e:88:b1:45:44:5e:f5:33:dd:97:db:48:47:35:37:df:
         5e:48:14:11:5b:a7:6d:e2:0d:de:0b:bc:2d:14:25:70:b4:19:
         1a:4e:f2:9d:5d:bd:a2:55:cb:43:07:21:66:55:62:76:68:f4:
         f2:70:55:67:94:e9:31:43:ab:c3:ac:7c:1a:b2:33:bf:f0:08:
         3e:eb:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org