Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30475.roa
File:                     AS30475.roa (raw, json)
Hash identifier:          NEjPO8bin/mxHuX+SzlT+ZQ5kZtytxZvan8Ereexj6c=
Subject key identifier:   8A:28:4B:5D:11:AF:AA:FA:48:B5:11:47:3D:3E:04:A6:70:16:8E:C2
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       63B9D75D3F93C51589FF88B1C973F67E96419AF0
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30475.roa
Signing time:             Mon 02 Jan 2023 21:39:25 +0000
ROA not before:           Mon 02 Jan 2023 21:34:25 +0000
ROA not after:            Mon 01 Jan 2024 21:39:25 +0000
asID:                     30475
IP address blocks:        45.95.15.0/24 maxlen: 24
                          185.170.40.0/24 maxlen: 24
                          193.7.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b9:d7:5d:3f:93:c5:15:89:ff:88:b1:c9:73:f6:7e:96:41:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  2 21:34:25 2023 GMT
            Not After : Jan  1 21:39:25 2024 GMT
        Subject: CN=8A284B5D11AFAAFA48B511473D3E04A670168EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:69:3e:f1:c3:08:86:58:b3:9b:d7:1d:0e:
                    4c:b9:43:41:55:15:7f:77:7a:b7:be:ad:87:d0:04:
                    d6:bc:92:5e:19:aa:46:a3:83:03:62:18:46:85:18:
                    b4:83:59:89:8e:18:22:65:64:32:50:3e:17:ee:c2:
                    8e:87:ab:ca:de:e6:c3:5b:b8:87:3b:fd:a7:e5:49:
                    fd:4c:bc:c4:75:a1:d1:e7:ea:40:be:97:0b:c0:82:
                    1c:75:81:2a:8f:e9:09:4d:4e:ac:39:9d:d3:e5:26:
                    43:4b:f8:c6:c8:10:ae:de:5b:61:eb:e5:22:06:d4:
                    2c:f4:95:a9:58:d7:74:4b:7e:a5:19:42:c4:7d:d2:
                    95:0b:a7:35:c2:67:1c:6f:29:f4:01:a3:2d:3c:29:
                    1f:f2:b6:ef:8a:03:4b:6f:0d:91:5c:2d:22:de:a9:
                    bf:07:14:7f:69:f6:de:0d:24:ef:f6:38:e3:f5:61:
                    6a:4e:64:f2:f7:ce:9d:ae:ef:25:65:e2:a8:27:be:
                    ca:d1:3f:f3:f2:bd:43:aa:0d:f0:fc:69:6f:2f:08:
                    29:fa:6a:bf:0c:aa:8e:37:d7:db:bf:d2:05:88:74:
                    d2:11:80:08:81:d8:23:ce:c4:75:54:78:68:ad:b4:
                    ec:d4:43:24:15:56:cd:79:7a:85:4b:a7:aa:50:97:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:4B:5D:11:AF:AA:FA:48:B5:11:47:3D:3E:04:A6:70:16:8E:C2
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS30475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.15.0/24
                  185.170.40.0/24
                  193.7.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:da:e7:11:48:66:c8:57:f5:f4:ec:e8:42:78:4e:b5:99:
         b0:b0:e5:6b:9d:c9:5b:a0:0f:f6:2e:c7:51:7f:3c:12:0d:bb:
         72:b3:68:59:1b:6b:26:bd:38:9e:9e:26:bc:1c:f5:c7:7a:1c:
         43:2a:4d:3f:1a:56:31:fc:c2:a3:e0:f7:30:23:da:b2:56:82:
         4a:d3:d3:ff:51:54:30:d4:69:1d:cd:88:4d:a2:0c:da:00:7a:
         ca:34:f5:1e:d0:2f:e7:d8:11:ae:80:ed:10:91:42:cb:b5:d6:
         96:46:39:bf:43:32:e5:51:9b:d2:89:ef:86:3a:e7:e6:b4:fc:
         58:7a:cc:03:71:35:cf:77:b8:5c:09:e8:38:a2:ce:cc:7e:79:
         60:66:41:fa:ad:aa:5f:ec:d8:b2:53:d0:9a:79:bd:53:05:04:
         e9:78:f6:bc:47:d4:57:02:cb:85:e2:36:91:69:1d:17:57:4c:
         8d:58:af:6c:e1:10:c7:a7:7b:c6:56:05:5f:fc:3c:d1:89:5e:
         91:7e:86:29:97:8a:38:a1:c0:61:b4:c8:45:40:89:48:75:12:
         0e:34:7b:db:fe:df:e4:be:4e:7d:23:bc:ad:8a:ee:2b:97:68:
         32:61:18:9c:8a:f3:8e:83:25:6a:3b:6c:71:6f:1b:8f:32:38:
         bf:55:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org