Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa
File:                     38392e33352e39342e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          6/T8Otf7zMzjYQroAiPCKmzRCjbCk/54h8fq1WgfLPc=
Subject key identifier:   97:EC:A9:FC:9D:06:15:B3:D7:5C:82:41:42:93:08:39:EF:60:AD:1A
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       56581072CBD41916D7023D3B9CDF9C9FF04CA62F
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa
Signing time:             Wed 15 Jun 2022 23:17:45 +0000
ROA not before:           Wed 15 Jun 2022 23:12:45 +0000
ROA not after:            Wed 14 Jun 2023 23:17:45 +0000
asID:                     1239
IP address blocks:        89.35.94.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:10:72:cb:d4:19:16:d7:02:3d:3b:9c:df:9c:9f:f0:4c:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 15 23:12:45 2022 GMT
            Not After : Jun 14 23:17:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:f4:2c:ab:b8:bb:89:83:d4:94:c3:fb:6d:
                    bd:a2:cd:70:ef:2e:29:6b:56:9c:c2:85:bc:03:32:
                    a5:54:7a:b4:27:e6:d8:df:50:27:83:89:18:18:2a:
                    cb:7f:a2:49:c4:5f:64:7c:75:fb:0c:e0:34:41:50:
                    b8:d1:13:9b:be:7b:2b:e0:6b:f2:67:40:2f:7d:df:
                    8f:45:68:40:9e:ad:d9:8e:97:1a:dc:a5:14:85:2b:
                    20:41:97:8b:91:07:68:a0:8c:a8:b8:56:2c:13:0d:
                    8b:f6:43:de:1b:a7:ed:97:4a:3e:38:f5:aa:16:d8:
                    10:a5:58:8c:ca:0e:38:a1:09:40:e9:e0:a3:c9:3d:
                    98:05:24:f4:92:98:2c:d5:a6:6e:c3:23:3f:74:5d:
                    df:93:76:53:fc:6b:83:ba:af:64:16:22:1b:db:be:
                    ca:56:bf:49:cc:db:a8:f2:1b:51:6e:9a:fb:ea:d2:
                    de:23:0a:70:84:d0:23:99:5a:8f:1a:47:aa:4a:70:
                    b6:9b:6e:3e:a9:3a:70:66:46:5f:9d:fa:ad:b0:b4:
                    cd:f4:3f:c3:19:49:cf:c5:5b:c9:0f:ea:a7:3a:6f:
                    2d:cd:2a:6a:38:e3:dc:21:0e:f9:28:cd:69:39:e1:
                    d2:cc:23:4b:49:43:4d:ff:52:93:d9:ef:b8:0c:61:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:A9:FC:9D:06:15:B3:D7:5C:82:41:42:93:08:39:EF:60:AD:1A
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39342e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:20:5e:ef:1a:e2:8d:28:81:5d:5b:c2:67:a6:db:35:bf:
         48:af:fd:a6:07:98:61:2d:53:6d:d6:81:e6:8b:73:c8:5d:28:
         85:95:22:d0:b5:0e:b4:5c:f0:01:48:d8:5a:73:ce:da:ce:e7:
         c1:af:f3:bf:e8:35:5a:9c:b7:d1:d1:39:66:f3:7e:96:ac:11:
         2b:53:ac:27:1a:d7:d2:d0:42:70:8b:ba:ce:43:cf:51:f3:56:
         c4:72:63:5b:03:8f:f7:fd:9b:3e:e0:1a:51:c9:95:89:37:47:
         7c:a7:37:35:4c:7c:5f:3a:ca:6a:59:eb:58:4e:d9:40:61:ae:
         39:00:af:4c:bd:84:cc:75:e2:99:6b:bc:65:7c:7f:f0:49:40:
         36:80:19:33:e3:17:f2:08:91:ae:7b:6a:f0:c1:b9:4b:b8:c0:
         1b:09:63:88:e9:9a:6c:2b:19:74:3c:91:d6:03:d4:b1:6c:e1:
         d4:49:f7:4d:a3:87:59:59:84:ce:24:93:1b:a6:e3:b4:fe:43:
         a6:91:5a:5a:58:25:c6:47:ed:6d:95:af:a2:05:ff:b8:4b:93:
         dd:08:fb:d9:bb:d3:99:8b:43:0a:35:8c:d7:0d:11:67:a8:25:
         17:79:ee:e9:08:f5:57:c6:df:3e:c8:cf:c6:60:5b:58:d2:ae:
         63:b2:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org