Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS47583.roa
File:                     AS47583.roa (raw, json)
Hash identifier:          X1LdDwTsH0qrgizeylA8rrCttfFTvAeM8vkqWAIq1kQ=
Subject key identifier:   B9:43:2D:24:8A:20:7A:A6:AB:95:C3:79:9E:D3:7B:EB:59:BC:BC:69
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3E5A2C973502219B4A50A4C0EBB592026A927A19
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS47583.roa
Signing time:             Fri 27 Jan 2023 10:01:04 +0000
ROA not before:           Fri 27 Jan 2023 09:56:04 +0000
ROA not after:            Fri 26 Jan 2024 10:01:04 +0000
asID:                     47583
IP address blocks:        5.252.75.0/24 maxlen: 24
                          45.137.158.0/24 maxlen: 24
                          92.242.187.0/24 maxlen: 24
                          179.61.188.0/24 maxlen: 24
                          179.61.189.0/24 maxlen: 24
                          179.61.192.0/24 maxlen: 24
                          179.61.219.0/24 maxlen: 24
                          179.61.246.0/24 maxlen: 24
                          181.215.68.0/23 maxlen: 24
                          181.215.78.0/23 maxlen: 24
                          181.215.134.0/23 maxlen: 23
                          191.96.1.0/24 maxlen: 24
                          191.96.31.0/24 maxlen: 24
                          191.96.53.0/24 maxlen: 24
                          191.96.54.0/24 maxlen: 24
                          191.96.56.0/24 maxlen: 24
                          191.96.57.0/24 maxlen: 24
                          191.96.63.0/24 maxlen: 24
                          191.96.144.0/24 maxlen: 24
                          191.96.159.0/24 maxlen: 24
                          191.96.234.0/24 maxlen: 24
                          191.96.244.0/24 maxlen: 24
                          191.96.251.0/24 maxlen: 24
                          191.101.0.0/24 maxlen: 24
                          191.101.1.0/24 maxlen: 24
                          191.101.2.0/24 maxlen: 24
                          191.101.3.0/24 maxlen: 24
                          191.101.12.0/22 maxlen: 22
                          191.101.18.0/24 maxlen: 24
                          191.101.32.0/24 maxlen: 24
                          191.101.70.0/23 maxlen: 24
                          191.101.78.0/23 maxlen: 24
                          191.101.80.0/23 maxlen: 24
                          191.101.104.0/24 maxlen: 24
                          191.101.228.0/22 maxlen: 24
                          191.101.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5a:2c:97:35:02:21:9b:4a:50:a4:c0:eb:b5:92:02:6a:92:7a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 27 09:56:04 2023 GMT
            Not After : Jan 26 10:01:04 2024 GMT
        Subject: CN=B9432D248A207AA6AB95C3799ED37BEB59BCBC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:00:bd:04:f9:c4:08:68:b4:63:32:eb:71:
                    5c:3b:2a:8e:f4:80:e7:a6:ae:f7:ac:2c:a9:d3:7c:
                    39:1e:ca:fa:64:70:61:db:91:af:a0:2a:8d:b3:8b:
                    3d:97:58:df:73:b9:ff:98:bc:5f:b3:ab:f2:d1:d3:
                    b8:4c:04:40:7b:09:1e:c3:3a:a4:1d:b5:da:a4:db:
                    54:80:3d:c8:8c:7c:ef:cd:71:04:1a:63:6b:b8:3b:
                    db:36:bb:98:c3:1c:9d:24:c7:54:79:91:e7:97:a0:
                    cc:03:30:88:d9:ba:19:5e:41:5b:64:99:3e:30:78:
                    75:f5:ba:ad:44:56:72:66:db:d1:0f:ca:50:64:6f:
                    2e:8a:8c:8e:9c:09:11:2f:61:22:b7:91:bb:25:52:
                    96:31:04:61:a8:26:ad:66:26:1d:d9:72:4f:8b:73:
                    b0:ce:4d:81:54:6b:c1:61:2c:dd:b6:6a:7e:67:94:
                    97:71:20:e2:98:dd:7d:26:5e:71:7d:73:a2:a1:cb:
                    ab:32:f5:b6:8c:35:1c:dc:77:9c:7e:e4:5a:dd:c6:
                    b2:01:e3:c6:11:3d:05:f2:5e:d5:91:cc:75:9c:d4:
                    ef:22:cc:b4:9f:a5:20:4f:fb:16:5d:0d:aa:11:d1:
                    02:49:16:df:20:8c:6a:14:85:07:bb:95:9e:1b:77:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:2D:24:8A:20:7A:A6:AB:95:C3:79:9E:D3:7B:EB:59:BC:BC:69
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS47583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.75.0/24
                  45.137.158.0/24
                  92.242.187.0/24
                  179.61.188.0/23
                  179.61.192.0/24
                  179.61.219.0/24
                  179.61.246.0/24
                  181.215.68.0/23
                  181.215.78.0/23
                  181.215.134.0/23
                  191.96.1.0/24
                  191.96.31.0/24
                  191.96.53.0-191.96.54.255
                  191.96.56.0/23
                  191.96.63.0/24
                  191.96.144.0/24
                  191.96.159.0/24
                  191.96.234.0/24
                  191.96.244.0/24
                  191.96.251.0/24
                  191.101.0.0/22
                  191.101.12.0/22
                  191.101.18.0/24
                  191.101.32.0/24
                  191.101.70.0/23
                  191.101.78.0-191.101.81.255
                  191.101.104.0/24
                  191.101.228.0-191.101.235.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:0b:32:c8:a4:b3:64:14:25:af:4e:6e:8d:d1:2b:26:08:
         c7:3e:5e:2d:e5:75:e6:ae:6d:5d:63:bb:f7:f1:6c:b7:d9:b7:
         ef:94:e1:98:23:c5:06:b7:50:a2:79:c2:b2:f3:8a:00:23:f2:
         fa:b4:13:b9:1a:e5:29:bd:f4:6f:0a:5d:8e:16:7e:47:cf:0d:
         06:e1:ec:23:b0:83:5b:2c:c3:c6:e0:3b:f8:07:a1:de:78:91:
         83:5c:5c:5c:81:12:1b:10:03:1e:63:d7:2a:64:70:c9:0d:16:
         23:fd:db:1b:5d:dc:c0:b0:64:99:29:c1:37:31:c4:89:b5:ef:
         06:95:85:bd:bf:a8:ff:50:06:4c:6e:e8:c3:28:8c:37:35:bc:
         f3:e1:10:d2:77:3d:63:81:56:87:c0:cd:95:b9:68:12:7c:55:
         fc:a9:15:f2:7e:6d:c4:d7:bf:ff:77:ef:4d:c1:4f:31:d8:2f:
         de:26:a8:2e:c2:ba:18:9a:d7:29:5c:eb:76:28:f4:bc:84:18:
         08:d9:4f:9e:63:af:29:f7:ad:5f:88:5d:e8:8b:64:66:51:88:
         d8:13:1b:d5:93:c3:e9:3c:4d:24:4c:e1:88:f7:49:e1:52:02:
         45:87:3f:51:d0:4e:32:e7:27:89:47:ec:c0:5c:de:8d:f5:cf:
         14:03:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org