Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa
File:                     3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          PQOSFWLtuZMtg6ZTvj0KgvsSCz4U1lucUGtQ5gEi5kI=
Subject key identifier:   9D:70:35:CD:86:E0:F1:15:48:1B:4D:95:9E:3B:58:48:0C:14:5F:54
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       3F200BBEF0AC1BEB5F153D813B4885AF6729B480
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa
Signing time:             Wed 11 May 2022 20:53:30 +0000
ROA not before:           Wed 11 May 2022 20:48:30 +0000
ROA not after:            Wed 10 May 2023 20:53:30 +0000
asID:                     8100
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:20:0b:be:f0:ac:1b:eb:5f:15:3d:81:3b:48:85:af:67:29:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 11 20:48:30 2022 GMT
            Not After : May 10 20:53:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:36:d2:f6:85:7e:2e:a7:d8:44:fc:99:45:
                    bf:63:2d:63:c0:78:83:2c:e5:a2:03:b5:61:26:20:
                    42:89:a6:ea:cc:2c:cb:ce:97:55:83:2d:a0:da:2b:
                    66:4f:cf:c3:9e:97:97:e6:89:fd:d1:22:c4:d1:96:
                    b6:88:26:72:86:52:40:7c:f2:bf:40:bc:a4:7e:29:
                    35:55:48:66:c2:10:4d:ae:67:dd:00:dd:df:fa:e7:
                    b3:41:2e:ee:d7:22:34:8d:20:2a:4e:29:7a:35:41:
                    c7:bc:3b:69:14:7d:09:6b:ca:2f:d6:8c:76:0c:30:
                    13:f1:81:95:20:34:50:c0:33:bc:91:35:10:e6:61:
                    45:f2:2a:20:93:34:8e:0d:79:b4:fc:5f:b1:e7:a2:
                    a9:d9:f7:9d:30:3a:0b:2b:56:96:fe:86:c0:5c:87:
                    b8:30:00:02:36:86:3a:fd:1e:bd:60:35:35:88:11:
                    72:1e:8a:5c:83:47:8d:7f:e6:71:c9:a1:17:2d:94:
                    c7:20:4d:15:d9:d2:eb:18:b3:87:9f:a6:89:a2:56:
                    ff:c3:49:b7:2a:33:12:32:2d:18:5f:19:5d:71:fd:
                    a8:a3:33:e0:66:17:a8:26:1f:68:96:20:61:62:9f:
                    16:a3:9b:6c:e4:a2:c1:da:2e:cf:81:e3:94:78:6d:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:70:35:CD:86:E0:F1:15:48:1B:4D:95:9E:3B:58:48:0C:14:5F:54
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:04:60:bc:a6:37:da:bd:b9:6b:0d:57:6f:0b:7a:3c:2d:c4:
         e4:3c:1c:45:d0:59:d8:30:db:95:31:b7:f4:55:52:a1:84:ac:
         6c:ba:25:13:ec:83:34:9d:1e:11:e3:43:4e:54:d2:fa:43:0a:
         a0:fb:4d:ea:1c:d9:f7:d1:92:8f:60:42:ca:a9:61:f8:18:ea:
         a7:bd:94:24:ab:07:bb:93:bc:d5:7a:a7:9e:cd:6d:47:cb:c8:
         4d:af:75:c2:30:38:f0:b2:12:c7:b1:e2:9b:a0:b1:d8:20:3e:
         1a:95:45:7e:9a:3c:27:59:3f:c1:eb:de:35:1e:f2:01:2a:43:
         3b:22:53:a0:a4:aa:f1:4b:92:44:a5:74:fe:77:2c:ec:3a:d2:
         fe:d0:47:3b:25:f0:8b:b9:bc:99:cc:71:e5:9b:58:b5:ed:18:
         cd:06:47:33:57:ea:26:46:43:57:c4:0e:5b:41:41:65:4e:b0:
         8b:c7:24:72:d9:94:07:50:7a:9f:8f:6e:e6:41:65:76:2a:d6:
         a0:e3:03:43:6a:57:64:7a:a4:60:e0:dc:92:c4:2c:e6:5d:b1:
         8b:74:bc:23:ac:6c:b8:40:92:26:bb:f7:2b:40:2e:33:05:16:
         5f:d8:19:d8:12:0a:e9:ae:de:cc:53:01:c3:f4:27:b8:31:65:
         ef:3e:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org