Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          as3JMCcKIZ66JXrY2TrBTXEF6gmIrbqnXYXZitETJ+s=
Subject key identifier:   07:9E:F7:9B:61:66:D3:5D:4D:54:F2:0C:B6:63:62:46:5A:80:41:7B
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       453F5DB8D57AFF0E4A7F3614423EA3858C15F2CA
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa
Signing time:             Tue 31 Dec 2024 12:53:48 +0000
ROA not before:           Tue 31 Dec 2024 12:48:48 +0000
ROA not after:            Tue 30 Dec 2025 12:53:48 +0000
asID:                     8100
IP address blocks:        86.38.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3f:5d:b8:d5:7a:ff:0e:4a:7f:36:14:42:3e:a3:85:8c:15:f2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 31 12:48:48 2024 GMT
            Not After : Dec 30 12:53:48 2025 GMT
        Subject: CN=079EF79B6166D35D4D54F20CB66362465A80417B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:de:e5:e3:71:a0:43:37:cd:63:ec:5d:0e:
                    1d:34:4b:8a:6a:8d:32:e1:00:7a:b5:df:06:f9:af:
                    ec:67:d7:3d:e0:76:20:85:f0:1d:f1:6b:4c:64:0b:
                    05:b4:e3:ab:ec:ac:5d:bc:ad:12:40:e0:65:5b:9f:
                    cd:dc:13:8c:e5:f8:fe:8d:48:cc:cc:f5:78:26:07:
                    d1:18:14:7a:19:2a:90:3d:0c:6a:43:fd:e0:56:79:
                    43:00:da:2e:06:e7:5c:9b:9c:a1:52:5d:27:23:14:
                    b9:1d:dd:11:65:d1:e3:3c:e3:9c:37:42:17:26:f7:
                    63:4e:0d:11:10:42:6f:17:ce:ba:68:65:11:aa:17:
                    0d:5a:16:bc:91:2e:9c:cc:bd:dd:4a:8b:64:b6:69:
                    0a:31:ce:d6:a5:50:26:2d:79:b2:ce:b3:4f:a4:25:
                    47:b3:ac:f6:1d:98:59:98:cc:10:9c:56:68:2b:c8:
                    e8:74:d4:ac:02:71:e8:a4:96:2d:01:1c:53:26:73:
                    b8:1c:8e:a0:a3:be:87:44:26:e1:f9:12:03:46:fd:
                    a2:6a:6d:42:6e:9e:a7:e8:f3:9f:66:88:ed:b9:85:
                    66:a3:b2:57:08:3a:d3:8f:e9:32:11:ef:5a:e3:44:
                    62:1a:cd:4e:6c:f5:80:50:b3:08:6e:93:e4:af:fb:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:F7:9B:61:66:D3:5D:4D:54:F2:0C:B6:63:62:46:5A:80:41:7B
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d9:77:ce:10:26:e5:3c:88:c8:9d:eb:90:72:db:96:99:7e:
         42:7a:cb:df:f8:15:d8:54:71:e0:5a:d0:ad:92:c7:00:a2:b5:
         d1:57:ee:b6:2d:8b:a8:03:4f:57:d3:24:d9:95:eb:62:41:16:
         22:50:93:10:ee:aa:a6:22:e2:dc:b3:8f:d9:b0:fe:d6:eb:7a:
         a5:2a:da:fd:9e:9d:16:66:2a:a4:b3:6e:fb:2c:f0:2e:53:be:
         30:44:21:99:4c:8e:f3:cc:91:76:ff:18:fc:1e:ee:26:de:12:
         b8:64:2c:4c:61:bd:5b:db:a5:6b:ce:4c:2f:e3:99:6e:07:a6:
         f2:88:6f:1e:ee:0e:f4:92:e0:da:bd:cf:02:ae:e8:a0:f4:b2:
         9e:5d:08:75:15:2b:19:b7:1b:da:54:3a:9b:bd:74:4e:d7:e1:
         28:cc:a9:4f:4b:8b:d3:0e:01:54:1d:62:41:b6:bf:a2:be:0d:
         0e:2d:34:90:b1:2f:3e:3a:1e:dc:b0:47:a4:b4:2b:15:b7:d5:
         7a:6a:1c:a7:62:f8:b1:ea:5b:50:ce:08:c9:4f:19:1d:47:ae:
         42:42:e0:ea:89:4c:bd:6f:b7:81:7a:80:e1:98:db:30:b3:75:
         9f:04:eb:0f:c7:5f:9a:dd:3c:1e:2c:5e:ff:34:46:f1:19:43:
         25:42:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:56 2025 by rpki-client