Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS46337.roa
File:                     AS46337.roa (raw, json)
Hash identifier:          VMekDyUTzqkTTvoah4c4Ec2jZXSBHQBuly0iBbizIk4=
Subject key identifier:   48:29:A0:12:19:42:0F:7B:3A:2D:66:6D:A1:B0:B8:FC:BF:52:CB:31
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       25108666E56D3F21B0A4852EC862DC11D74A6A4A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS46337.roa
Signing time:             Wed 09 Mar 2022 13:37:39 +0000
ROA not before:           Wed 09 Mar 2022 13:32:39 +0000
ROA not after:            Wed 08 Mar 2023 13:37:39 +0000
asID:                     46337
IP address blocks:        179.61.137.0/24 maxlen: 24
                          179.61.192.0/24 maxlen: 24
                          179.61.232.0/24 maxlen: 24
                          181.214.31.0/24 maxlen: 24
                          181.214.83.0/24 maxlen: 24
                          181.214.142.0/24 maxlen: 24
                          181.214.156.0/24 maxlen: 24
                          181.215.55.0/24 maxlen: 24
                          191.96.133.0/24 maxlen: 24
                          191.96.151.0/24 maxlen: 24
                          191.96.165.0/24 maxlen: 24
                          191.101.33.0/24 maxlen: 24
                          191.101.50.0/24 maxlen: 24
                          191.101.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:10:86:66:e5:6d:3f:21:b0:a4:85:2e:c8:62:dc:11:d7:4a:6a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:39 2022 GMT
            Not After : Mar  8 13:37:39 2023 GMT
        Subject: CN=3082010A0282010100EF3A434D4DE58F580F105D38C858C1FA0A9C5CFBF9A718EC01FD625EC1C9FB6A211433189695E1D7458A563EF5A5F3F27D23BFB3D657EEFFDA78EF1D9ED7ABD02E46E576362C873E64F8B1544286B097CD54245D8113A33614FE8E602E62A8D71D2EA3493247B91CDFB513E3A76E53551CF28281A3AFFDC65F8BA0B38803A17F274604D22AC8F454AC6FD77F038FE68C13489440DE97E03FC5A0FFED089E923210EDA05C83D169066D7B04FA223DD89E666AEC50BFA97A156CC6056270FB0DB364EBBEB31A659C0C564DFC2985F784A414B476A5214DECD46BB2572D3A541D269BE6D4443630913D06AD1FC3CB4F16CFDD5A8B3A497790C00E243D34FBDD53130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3a:43:4d:4d:e5:8f:58:0f:10:5d:38:c8:58:
                    c1:fa:0a:9c:5c:fb:f9:a7:18:ec:01:fd:62:5e:c1:
                    c9:fb:6a:21:14:33:18:96:95:e1:d7:45:8a:56:3e:
                    f5:a5:f3:f2:7d:23:bf:b3:d6:57:ee:ff:da:78:ef:
                    1d:9e:d7:ab:d0:2e:46:e5:76:36:2c:87:3e:64:f8:
                    b1:54:42:86:b0:97:cd:54:24:5d:81:13:a3:36:14:
                    fe:8e:60:2e:62:a8:d7:1d:2e:a3:49:32:47:b9:1c:
                    df:b5:13:e3:a7:6e:53:55:1c:f2:82:81:a3:af:fd:
                    c6:5f:8b:a0:b3:88:03:a1:7f:27:46:04:d2:2a:c8:
                    f4:54:ac:6f:d7:7f:03:8f:e6:8c:13:48:94:40:de:
                    97:e0:3f:c5:a0:ff:ed:08:9e:92:32:10:ed:a0:5c:
                    83:d1:69:06:6d:7b:04:fa:22:3d:d8:9e:66:6a:ec:
                    50:bf:a9:7a:15:6c:c6:05:62:70:fb:0d:b3:64:eb:
                    be:b3:1a:65:9c:0c:56:4d:fc:29:85:f7:84:a4:14:
                    b4:76:a5:21:4d:ec:d4:6b:b2:57:2d:3a:54:1d:26:
                    9b:e6:d4:44:36:30:91:3d:06:ad:1f:c3:cb:4f:16:
                    cf:dd:5a:8b:3a:49:77:90:c0:0e:24:3d:34:fb:dd:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:A0:12:19:42:0F:7B:3A:2D:66:6D:A1:B0:B8:FC:BF:52:CB:31
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS46337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.137.0/24
                  179.61.192.0/24
                  179.61.232.0/24
                  181.214.31.0/24
                  181.214.83.0/24
                  181.214.142.0/24
                  181.214.156.0/24
                  181.215.55.0/24
                  191.96.133.0/24
                  191.96.151.0/24
                  191.96.165.0/24
                  191.101.33.0/24
                  191.101.50.0/24
                  191.101.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:29:49:6d:55:57:a6:dd:c4:1a:76:0d:53:f9:95:f8:3c:
         11:bf:50:95:5a:5c:af:36:d5:5c:8f:d1:3f:75:67:90:d1:d7:
         b6:8d:97:67:32:fd:a5:8f:34:94:f9:f5:1f:8f:d9:fc:07:29:
         16:ad:f5:14:7e:a7:8f:56:7f:64:49:8b:22:b7:4c:3a:ee:a0:
         b9:c9:ad:80:fb:e1:d9:91:2d:b0:9f:66:a3:67:1f:f0:36:e3:
         69:24:44:f7:4c:8c:6b:34:73:74:50:28:9f:28:11:9c:86:f5:
         78:3f:9c:ca:96:e0:9d:8f:b8:c1:4b:b1:ca:7a:aa:3e:07:ad:
         b8:68:11:78:52:88:6a:89:35:a2:78:90:4a:7b:05:39:12:be:
         ac:f3:9c:f2:cc:35:67:2f:0b:f8:16:16:5a:c7:75:fb:e1:50:
         ef:a5:48:df:54:ea:4e:3f:67:b5:bd:13:0b:5b:a8:c1:b2:55:
         20:6a:cb:f5:aa:40:00:64:44:68:c0:6d:b1:63:2d:35:8d:1e:
         5a:ab:53:b5:d4:f5:d2:97:ab:13:e9:77:5b:b2:7a:30:56:da:
         e7:b6:37:c4:ad:41:68:54:c2:ba:7f:01:8e:a4:7e:98:59:c8:
         a0:e3:e3:97:4f:0d:cc:12:01:cd:fc:57:04:3d:bc:65:dd:73:
         8e:4f:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org