Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
File:                     AS23161.roa (raw, json)
Hash identifier:          GazuaiiZmWjVdpeOy0hkLLxvxcj9zUuOy07FkP+wZWw=
Subject key identifier:   EB:26:E1:65:7F:DF:A8:4E:92:4C:F6:89:5E:39:25:20:1A:B9:7B:6E
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       142FED98F446B0F3322F51A5D7D95E41133D1212
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
Signing time:             Fri 13 Dec 2024 17:53:48 +0000
ROA not before:           Fri 13 Dec 2024 17:48:48 +0000
ROA not after:            Fri 12 Dec 2025 17:53:48 +0000
asID:                     23161
IP address blocks:        89.117.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2f:ed:98:f4:46:b0:f3:32:2f:51:a5:d7:d9:5e:41:13:3d:12:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 13 17:48:48 2024 GMT
            Not After : Dec 12 17:53:48 2025 GMT
        Subject: CN=EB26E1657FDFA84E924CF6895E3925201AB97B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:6a:e7:4e:fb:b8:4a:ad:89:dd:2f:3b:8f:
                    19:51:c4:25:06:aa:67:e6:a3:a3:fd:d8:68:50:f9:
                    b7:a2:6b:90:40:ce:02:17:46:79:8a:68:12:3d:82:
                    86:4a:33:76:72:be:30:06:20:f7:40:e0:f0:53:e1:
                    3c:50:57:2a:28:e3:a1:f1:ae:ac:af:bc:53:d4:1b:
                    49:0f:8e:57:d8:41:3d:5c:4c:cb:ac:ac:60:75:36:
                    5a:c7:90:81:4a:8a:5b:5b:3a:e6:44:ab:07:ea:ea:
                    6b:20:fd:6e:66:44:3f:86:ba:5e:a1:b0:84:63:cb:
                    bf:85:92:de:2d:43:6a:3a:d4:77:6d:d6:d6:31:bb:
                    a5:ca:5c:01:90:c8:85:72:96:fe:95:14:b1:95:3f:
                    db:dc:c4:45:ad:84:b9:67:c1:cf:52:d9:0e:63:d7:
                    54:07:2c:66:9e:c6:b3:10:a1:67:f8:03:70:46:be:
                    1e:39:45:2c:fe:32:76:14:66:aa:be:c9:9f:be:f1:
                    c6:da:07:e7:36:92:df:de:15:5e:31:63:98:9a:06:
                    b8:a9:2b:d1:5d:8e:34:cd:f3:10:3f:a4:3c:0b:36:
                    69:0d:bc:11:49:b4:b3:9b:28:71:99:66:a6:74:7f:
                    ee:77:73:e4:c3:d8:bb:d8:bb:7a:8d:43:36:bc:69:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:E1:65:7F:DF:A8:4E:92:4C:F6:89:5E:39:25:20:1A:B9:7B:6E
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:58:8a:4c:5e:b7:df:77:74:35:8c:74:6c:fc:50:3c:a8:c0:
         75:0c:49:7f:2a:5d:4f:2a:85:59:e4:3a:9e:6a:3a:f3:06:80:
         6f:cf:95:f6:62:65:6d:13:df:97:77:f1:b7:f7:ba:f5:ff:47:
         60:51:18:fc:7a:fc:c3:31:62:a5:1c:6e:2f:e4:8a:f3:fe:52:
         6a:7d:40:2c:e5:bc:77:6f:1b:fd:f0:c2:56:04:4a:ee:d0:88:
         55:e6:1b:9a:12:6c:e7:ce:a1:5e:3b:eb:c0:ac:08:8d:8d:0a:
         8b:04:42:77:63:25:67:8b:6e:76:5d:6e:36:6b:48:21:fb:2e:
         06:45:bc:6e:2c:e3:fc:52:ce:36:16:e9:a4:dd:96:a1:98:08:
         6f:f4:d6:d8:a0:ae:b9:8d:96:6e:d0:43:4b:06:aa:38:23:a7:
         1b:81:9a:ed:64:1c:d4:f4:1a:9f:4f:6f:43:f5:ad:6b:a7:8f:
         e6:fc:99:3c:df:db:e8:7f:a8:b2:2e:4d:db:9a:7a:ab:a4:b5:
         39:e1:9f:80:46:b9:fa:af:7d:76:af:ba:67:0e:59:76:3a:50:
         91:09:45:ea:45:4e:1d:6f:c5:e9:f3:85:9d:b9:6c:d7:00:d5:
         02:30:f6:1f:a4:7c:f7:23:54:d3:b5:e6:2c:4b:17:74:7d:ec:
         c3:7b:4e:83
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUFC/tmPRGsPMyL1Gl19leQRM9EhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDEyMTMxNzQ4NDhaFw0yNTEyMTIxNzUzNDhaMDMxMTAvBgNV
BAMTKEVCMjZFMTY1N0ZERkE4NEU5MjRDRjY4OTVFMzkyNTIwMUFCOTdCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZemrnTvu4Sq2J3S87jxlRxCUG
qmfmo6P92GhQ+beia5BAzgIXRnmKaBI9goZKM3ZyvjAGIPdA4PBT4TxQVyoo46Hx
rqyvvFPUG0kPjlfYQT1cTMusrGB1NlrHkIFKiltbOuZEqwfq6msg/W5mRD+Gul6h
sIRjy7+Fkt4tQ2o61Hdt1tYxu6XKXAGQyIVylv6VFLGVP9vcxEWthLlnwc9S2Q5j
11QHLGaexrMQoWf4A3BGvh45RSz+MnYUZqq+yZ++8cbaB+c2kt/eFV4xY5iaBrip
K9FdjjTN8xA/pDwLNmkNvBFJtLObKHGZZqZ0f+53c+TD2LvYu3qNQza8aQGjAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU6ybhZX/fqE6STPaJXjklIBq5e24wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIzMTYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXUfMA0GCSqGSIb3DQEB
CwUAA4IBAQDBWIpMXrffd3Q1jHRs/FA8qMB1DEl/Kl1PKoVZ5DqeajrzBoBvz5X2
YmVtE9+Xd/G397r1/0dgURj8evzDMWKlHG4v5Irz/lJqfUAs5bx3bxv98MJWBEru
0IhV5huaEmznzqFeO+vArAiNjQqLBEJ3YyVni252XW42a0gh+y4GRbxuLOP8Us42
Fumk3ZahmAhv9NbYoK65jZZu0ENLBqo4I6cbgZrtZBzU9BqfT29D9a1rp4/m/Jk8
39vof6iyLk3bmnqrpLU54Z+ARrn6r312r7pnDll2OlCRCUXqRU4db8Xp84WduWzX
ANUCMPYfpHz3I1TTteYsSxd0fezDe06D
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:09 2025 by rpki-client