Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233302e302f32332d3234203d3e2037303239.roa
File:                     3231362e39372e3233302e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          RZHlp8mRzKTGDH7NjYFnfh+k6HxnX7V0BGPSFyK/vu8=
Subject key identifier:   82:92:6F:7E:EC:4E:5B:4D:E8:3F:B1:CD:0E:EA:A4:C4:A0:E4:99:8A
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       2018A50C30CC4220838DA0EE736C17E40322C9CD
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233302e302f32332d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:33 +0000
ROA not before:           Mon 25 Oct 2021 12:52:33 +0000
ROA not after:            Mon 24 Oct 2022 12:57:33 +0000
asID:                     7029
IP address blocks:        216.97.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:a5:0c:30:cc:42:20:83:8d:a0:ee:73:6c:17:e4:03:22:c9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:33 2021 GMT
            Not After : Oct 24 12:57:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:1b:81:6a:ee:16:4c:a9:99:28:71:36:af:
                    89:88:ae:41:be:7c:e7:ff:09:14:f8:46:f6:37:bd:
                    a0:59:79:de:97:60:a9:2b:70:b8:b4:76:34:dd:b1:
                    f3:5f:25:57:f6:4c:38:62:f0:27:00:59:38:34:5d:
                    e1:93:9a:86:14:aa:93:12:18:05:92:9c:78:40:9c:
                    c6:14:77:ab:0b:83:76:df:33:1e:ab:b7:35:49:03:
                    0c:36:16:b2:6c:72:16:07:a4:df:e5:89:19:23:d7:
                    9a:8f:d0:93:42:ba:fa:43:04:1c:7b:c5:62:bf:aa:
                    aa:54:96:21:68:0f:36:3f:68:00:80:7c:88:15:bc:
                    5e:27:df:fc:f2:80:82:60:7d:85:7b:b1:fd:78:0a:
                    47:6e:e2:f5:50:3f:dd:fe:9f:93:56:38:91:2b:e2:
                    2a:1d:49:e6:3a:63:be:96:f4:2c:1b:11:44:d7:70:
                    90:41:3c:8a:50:09:39:66:7f:9c:1c:f6:83:16:17:
                    20:d3:c8:88:f8:68:40:2c:b0:7d:c4:22:96:43:70:
                    6b:49:1e:a6:40:52:5f:cb:c6:85:9e:84:8f:0d:97:
                    15:ef:a9:5c:11:5d:91:9d:64:20:81:ed:4e:65:ca:
                    ae:22:30:28:ec:3a:e7:44:a6:d2:c9:05:94:1e:d6:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:6F:7E:EC:4E:5B:4D:E8:3F:B1:CD:0E:EA:A4:C4:A0:E4:99:8A
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233302e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:0e:fb:4b:f6:19:1c:35:bc:1d:7e:8c:38:77:18:dd:3f:
         2a:d7:ed:b0:60:17:5c:0d:00:cb:25:b7:23:57:15:bb:93:15:
         65:62:dc:a8:02:8d:0e:76:e3:af:73:bd:a9:cd:93:06:3e:74:
         a7:4f:b7:32:7e:0d:01:32:37:b1:09:40:90:01:89:fc:76:0c:
         4c:c2:27:ad:34:27:6a:bc:2d:fc:63:ae:16:a0:d3:6e:80:54:
         98:3a:ef:48:0f:87:de:8e:ba:d9:d2:97:ac:24:db:19:e5:aa:
         21:53:a1:48:62:51:7f:6c:9c:9d:a5:69:45:c9:e6:f1:9b:43:
         fe:20:4a:4d:33:50:86:5c:02:f3:eb:bd:fa:51:e2:95:75:e1:
         22:15:8a:3f:63:52:8d:3a:29:0d:7d:0b:b3:d9:dd:04:63:4e:
         18:e4:e3:2e:e2:ab:ce:17:55:0f:c6:27:b5:a0:aa:2a:a4:35:
         a3:8e:71:88:60:80:03:31:59:31:67:7f:84:db:a6:ea:49:ba:
         5e:dd:47:8a:3f:82:e9:2b:4a:30:20:17:81:5f:62:a7:9a:a2:
         ac:3c:9f:c4:d3:2d:c6:58:36:8a:b8:34:e1:34:b8:aa:0b:b8:
         74:30:84:dc:11:f6:63:eb:ce:59:9c:62:1f:e1:e6:f9:f5:0e:
         b7:ac:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org