Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa
File:                     3231362e39372e3233382e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          tOk6gY/1rCm52PomtiMEzPKf9DbmVx7udkh1Y7eQcfA=
Subject key identifier:   3B:0A:99:99:8D:30:45:03:B8:52:00:93:96:52:8A:4D:6C:85:1B:6A
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       201BF4D9F346DB0F842A8901E13874E03B1A3A34
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:56:27 +0000
ROA not before:           Mon 25 Oct 2021 12:51:27 +0000
ROA not after:            Mon 24 Oct 2022 12:56:27 +0000
asID:                     7029
IP address blocks:        216.97.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1b:f4:d9:f3:46:db:0f:84:2a:89:01:e1:38:74:e0:3b:1a:3a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:51:27 2021 GMT
            Not After : Oct 24 12:56:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f0:46:6d:1b:9e:6c:48:dc:af:d3:01:1f:76:
                    41:3f:3a:f0:1e:34:7d:ff:fc:9b:77:1b:a3:89:70:
                    27:a0:f9:5f:06:6b:12:06:a4:5f:bd:72:95:ff:a2:
                    b3:da:c1:66:d6:eb:57:de:58:eb:ce:7c:65:05:27:
                    98:a0:7b:08:64:cf:c5:d0:c3:bc:95:11:c2:36:1b:
                    fe:5f:05:e1:2c:72:55:d1:53:d9:c8:16:d7:68:8b:
                    20:4d:92:71:c9:72:8d:5f:e5:1d:ab:16:2b:49:ef:
                    7b:c2:91:8b:f2:c5:94:23:05:9a:dc:4a:da:16:80:
                    f2:82:5c:39:55:98:a9:04:9b:17:5c:73:60:39:d0:
                    ef:6a:ef:08:a1:1c:11:78:23:85:51:23:66:0b:42:
                    81:67:d7:c1:66:c4:73:71:a0:0c:dd:4a:67:8a:dc:
                    ae:17:72:35:b2:6e:b1:98:bb:19:6a:ac:aa:9c:0a:
                    f6:ed:3a:6e:9e:f2:5b:2d:eb:31:ed:e6:c1:3e:8e:
                    5f:5c:95:d7:57:4b:b7:58:6b:ec:75:0c:8c:60:d4:
                    d1:30:d1:53:48:22:8a:5a:41:45:03:f1:42:0e:1d:
                    7a:8b:da:a1:67:1d:f0:9b:29:e1:89:f8:c0:9e:54:
                    48:d3:47:ca:cb:64:71:05:41:3b:85:b6:72:79:66:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0A:99:99:8D:30:45:03:B8:52:00:93:96:52:8A:4D:6C:85:1B:6A
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233382e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:a1:ed:51:f0:b1:a6:45:bc:41:33:b2:bc:37:22:4d:80:
         01:a3:cd:8e:79:d5:6a:42:9a:ee:01:a9:85:94:88:28:9c:33:
         db:04:ae:2b:b4:83:7e:18:53:2d:73:84:cf:93:73:5d:c5:28:
         4f:4b:e6:12:87:6c:46:06:78:8b:41:a5:1a:6d:5d:da:e4:20:
         ba:be:23:41:58:ae:dd:7f:d0:9c:2a:7a:0a:52:88:3e:46:5f:
         e7:18:93:6f:48:fd:45:16:74:26:a6:21:0b:38:ad:86:f8:17:
         c3:a7:41:4f:98:7d:85:39:21:9c:2b:18:5c:65:2d:ad:15:a9:
         8e:82:c2:f7:8c:4d:3e:a7:30:1f:84:67:07:3f:53:f0:09:ea:
         5a:f3:21:45:17:a9:06:62:71:d4:36:34:4c:90:96:e2:3a:ce:
         5a:f4:ad:cd:aa:cf:5b:c0:e7:42:52:7a:23:db:de:19:fd:de:
         fe:58:9d:07:0c:aa:b1:e0:e2:d7:f3:f0:51:c5:8a:48:31:3e:
         7d:46:2e:e6:b7:a5:68:57:34:a5:3c:4c:27:33:ea:9b:f9:44:
         54:c6:41:00:ff:cb:73:95:89:4d:bb:f1:d5:94:a2:8a:92:78:
         d7:96:8d:f0:75:fc:cb:73:1a:63:9e:7c:9a:be:06:1b:f9:d8:
         d4:2c:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org