Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3233362e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          kjTOpW33QUyq7jrD/PHsowOEnB9nKNZyDWRvkPqd7Pg=
Subject key identifier:   A8:4A:F5:D7:FD:AE:84:3D:8D:C9:6C:67:05:AC:88:18:52:F5:34:33
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       3DD4E730246E175AADF2FB7D8BE63CD5B7C7C4A4
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:57:10 +0000
ROA not before:           Mon 25 Oct 2021 12:52:10 +0000
ROA not after:            Mon 24 Oct 2022 12:57:10 +0000
asID:                     1239
IP address blocks:        216.97.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:e7:30:24:6e:17:5a:ad:f2:fb:7d:8b:e6:3c:d5:b7:c7:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:10 2021 GMT
            Not After : Oct 24 12:57:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:fd:9c:c2:a6:1b:d4:fc:e5:3f:3e:b7:c1:
                    dc:99:cd:e9:53:1a:5e:1e:d0:40:2d:08:9f:ab:97:
                    3d:96:a9:56:c6:72:b9:c3:a2:43:f7:1c:a9:c9:34:
                    26:93:f9:46:2f:b4:5a:f1:1a:03:0d:a6:fe:e1:df:
                    05:39:d1:cd:df:d9:aa:1d:41:8a:4d:c8:54:cf:e7:
                    32:b5:ae:72:50:ce:77:33:43:c5:4b:98:46:bc:e6:
                    80:ce:76:23:90:65:f0:1f:9f:40:c0:c9:1f:71:db:
                    7f:3b:ef:f2:88:5e:47:41:84:15:45:5c:76:81:28:
                    43:24:ad:29:82:b9:4e:9f:2f:a0:de:d0:c1:b1:08:
                    54:7a:8a:28:d5:9c:16:49:2a:1b:1b:8f:8b:d5:da:
                    1e:ad:cb:0f:22:65:64:9a:93:3c:fe:85:87:43:50:
                    a6:94:ac:20:76:0d:00:f9:74:ee:9b:b3:f3:e0:55:
                    ec:6f:00:d1:4a:04:40:d6:fa:ea:59:63:33:1e:49:
                    7d:96:1f:b3:8a:fa:3a:74:3e:d6:7a:1e:b7:6e:8b:
                    3b:e1:56:dc:e3:75:ae:47:c9:06:09:1b:67:67:ff:
                    c3:54:2a:00:02:c0:0f:c1:b2:f5:87:fe:3c:84:fb:
                    9e:c8:56:3b:5d:95:51:62:d9:d4:63:b5:35:4a:c8:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:F5:D7:FD:AE:84:3D:8D:C9:6C:67:05:AC:88:18:52:F5:34:33
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233362e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:5c:0c:60:f2:c4:42:38:d4:78:d9:df:28:26:8e:b8:05:
         e1:6b:b3:62:62:80:b2:3b:9b:fa:34:a9:6a:34:11:89:38:46:
         5f:b1:f2:f4:83:b1:a4:66:77:1d:10:ee:0d:d1:5c:68:0d:ab:
         83:61:f4:2c:64:62:ad:30:46:5b:3c:23:c2:52:bc:43:b9:d6:
         68:18:08:43:d8:cf:d8:18:06:48:0e:8b:d3:8b:d0:66:ba:8d:
         53:8b:9c:e2:02:45:cc:dc:b6:39:17:1f:a1:9a:30:32:b0:da:
         5e:d7:eb:d0:66:f0:69:a5:c9:34:29:3f:86:72:15:b0:4a:f4:
         cc:82:77:6e:39:47:9b:42:a9:e3:6c:81:20:42:a4:15:62:9e:
         be:22:72:72:b2:32:40:82:bc:52:52:8d:4f:0f:16:d2:c1:ca:
         de:54:bd:7a:df:ee:85:17:05:e5:48:63:3a:96:8b:ad:61:1c:
         f5:ed:40:aa:98:ce:08:67:7d:b1:16:9a:e8:61:24:e4:4c:f1:
         ea:af:75:ba:5e:2f:2b:db:c1:56:e1:93:08:ba:5b:d3:dc:06:
         c5:e0:88:12:c3:e6:fc:31:18:52:b8:45:08:c1:65:ad:c9:68:
         e9:e8:7f:92:01:9e:9c:f1:03:bb:7c:81:68:a5:3a:c5:0e:40:
         2f:b9:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org