Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e36362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          lVRRib3SNT4UKKTb9ta+N1LuOe2KEbuuGYDeycpI/Ko=
Subject key identifier:   66:C0:24:A7:43:65:5C:30:E3:D7:AF:1E:01:D2:27:EA:89:BB:1E:76
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       017B704D486D6A2AACE8055DDABB750F887EA397
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:52:48 +0000
ROA not before:           Wed 06 Jul 2022 10:47:48 +0000
ROA not after:            Wed 05 Jul 2023 10:52:48 +0000
asID:                     7018
IP address blocks:        206.206.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:70:4d:48:6d:6a:2a:ac:e8:05:5d:da:bb:75:0f:88:7e:a3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:47:48 2022 GMT
            Not After : Jul  5 10:52:48 2023 GMT
        Subject: CN=3082010A0282010100ED4E4143BB6DE9704BBC97471E85AE5FC6E65150C4BA39D7F147C5E5034CABD5D59A934F71180E4A4E98528FD49695275FEAC592D1E7A17CFB6AB167252A6857DE7780AAF8624EFD6CEFD4066D5DD974435766D78D75AF908DB1CC838435F2312076CF05281D46F4F7C9A27A42545DD6FAFB1877CED70B9E9318624D06C2F8CD34AE344F1FCE2215A7F5E1536BD7A972F4625D45BA564057D2484DD5ACDADC80D722ECA841F4F5F3F2AEFD1742FB56C161CB0716A621338BAD5D568BBF5F844F7DFB4E24C597F097D557579D3EEE95334F8853F83DDD62D755D2B4EA3E26F0D9FB0F394C18053A5FF82736C09CAB42665FE1491C858C8FC4AE9298085E4E34FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4e:41:43:bb:6d:e9:70:4b:bc:97:47:1e:85:
                    ae:5f:c6:e6:51:50:c4:ba:39:d7:f1:47:c5:e5:03:
                    4c:ab:d5:d5:9a:93:4f:71:18:0e:4a:4e:98:52:8f:
                    d4:96:95:27:5f:ea:c5:92:d1:e7:a1:7c:fb:6a:b1:
                    67:25:2a:68:57:de:77:80:aa:f8:62:4e:fd:6c:ef:
                    d4:06:6d:5d:d9:74:43:57:66:d7:8d:75:af:90:8d:
                    b1:cc:83:84:35:f2:31:20:76:cf:05:28:1d:46:f4:
                    f7:c9:a2:7a:42:54:5d:d6:fa:fb:18:77:ce:d7:0b:
                    9e:93:18:62:4d:06:c2:f8:cd:34:ae:34:4f:1f:ce:
                    22:15:a7:f5:e1:53:6b:d7:a9:72:f4:62:5d:45:ba:
                    56:40:57:d2:48:4d:d5:ac:da:dc:80:d7:22:ec:a8:
                    41:f4:f5:f3:f2:ae:fd:17:42:fb:56:c1:61:cb:07:
                    16:a6:21:33:8b:ad:5d:56:8b:bf:5f:84:4f:7d:fb:
                    4e:24:c5:97:f0:97:d5:57:57:9d:3e:ee:95:33:4f:
                    88:53:f8:3d:dd:62:d7:55:d2:b4:ea:3e:26:f0:d9:
                    fb:0f:39:4c:18:05:3a:5f:f8:27:36:c0:9c:ab:42:
                    66:5f:e1:49:1c:85:8c:8f:c4:ae:92:98:08:5e:4e:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:24:A7:43:65:5C:30:E3:D7:AF:1E:01:D2:27:EA:89:BB:1E:76
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:35:84:82:e1:30:23:c8:c2:5f:9f:10:04:3d:ef:09:73:1f:
         c2:0b:3b:b0:a9:b0:a7:d5:e6:dc:c7:74:ab:5f:35:7b:ac:1b:
         18:cd:5e:44:9f:be:b3:9a:91:4f:38:70:d5:49:ea:b8:7c:08:
         36:95:6e:64:9a:e3:10:15:d4:43:2a:f9:42:77:7c:7d:91:19:
         2f:3a:e9:9e:cd:51:a8:05:a0:fb:2f:5c:92:ea:11:b6:2c:e5:
         09:a8:e2:ef:d1:09:9c:ac:7e:fe:c5:92:50:2d:5f:d5:24:7a:
         1c:b9:39:3f:22:15:61:db:a5:20:cd:28:e7:02:95:b5:64:f4:
         ee:73:6a:7b:2a:4f:1c:5a:17:ea:c4:c8:19:4d:b0:af:c9:27:
         a4:41:7b:32:6f:4a:db:68:90:e4:14:3c:82:36:bb:5c:be:94:
         88:6a:26:85:45:1c:26:df:d0:55:39:20:ae:dd:d0:14:c7:9e:
         45:e6:13:7f:67:61:4e:2e:10:9d:40:35:96:de:a8:4a:78:96:
         f1:51:a5:ad:59:24:29:e9:d5:f0:25:5a:f0:71:01:a2:cc:58:
         42:dd:ce:2e:c5:23:b7:74:80:77:55:ca:99:0e:6b:eb:75:fb:
         f8:ba:92:b6:2b:b7:8e:0f:72:7b:43:fe:0d:81:2a:37:40:dc:
         2b:5d:5f:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org