Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137312e302f32342d3234203d3e203631343430.roa
File:                     3231362e3132322e3137312e302f32342d3234203d3e203631343430.roa (raw, json)
Hash identifier:          6b3YFvx7dqixy8cjeSPIqPEj0UEHRy7ywwiSHu4Vhy4=
Subject key identifier:   ED:70:C0:00:11:FA:40:25:89:41:52:6C:51:8D:67:E7:62:75:FF:D8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       2E1C20185F850B3AE7B9A8CFBDC71AA130A8AA46
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137312e302f32342d3234203d3e203631343430.roa
Signing time:             Mon 24 Jan 2022 07:37:08 +0000
ROA not before:           Mon 24 Jan 2022 07:32:08 +0000
ROA not after:            Mon 23 Jan 2023 07:37:08 +0000
asID:                     61440
IP address blocks:        216.122.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1c:20:18:5f:85:0b:3a:e7:b9:a8:cf:bd:c7:1a:a1:30:a8:aa:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jan 24 07:32:08 2022 GMT
            Not After : Jan 23 07:37:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:ee:40:a3:f1:4e:47:68:60:58:31:85:b4:
                    54:40:2a:b4:09:be:61:4b:87:68:31:15:d3:68:a9:
                    69:62:db:69:a1:15:d1:31:b2:0a:81:42:8f:58:67:
                    bb:93:02:85:e3:e4:0a:25:20:0d:10:77:60:d3:b7:
                    e6:60:ea:f0:2a:91:1e:f5:d8:e1:d3:07:f4:51:d8:
                    f9:35:fe:47:98:34:79:8f:a8:50:47:19:23:8a:5f:
                    26:10:4c:a4:8a:af:66:e6:d8:ec:ee:c6:d5:b5:56:
                    1d:a7:f3:d3:75:21:1a:73:a7:0a:26:e3:72:80:54:
                    65:21:af:fe:bc:20:71:a1:c8:ba:dd:4f:1c:c8:99:
                    d4:ed:5b:74:9a:0e:f9:49:ab:b1:3b:b2:8a:b5:12:
                    0f:af:96:25:60:1e:4b:38:98:73:0b:17:0e:6e:9f:
                    3e:22:6a:24:53:d7:30:22:d6:52:1b:00:45:2d:be:
                    01:bb:87:e1:10:80:7d:50:48:0e:d4:da:c5:da:16:
                    9b:7d:a6:26:9a:21:70:ff:66:1d:e4:27:61:ba:28:
                    a2:1c:19:e6:27:02:ce:55:78:54:48:dd:86:a2:cc:
                    4b:f9:33:41:d4:87:78:29:51:21:31:0b:51:d7:a9:
                    bc:b7:f1:a9:5d:c7:ac:47:a7:c4:bb:09:d6:e5:6f:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:C0:00:11:FA:40:25:89:41:52:6C:51:8D:67:E7:62:75:FF:D8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137312e302f32342d3234203d3e203631343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:11:4b:1a:f5:8f:30:b5:48:d4:e0:5f:ea:77:78:48:79:
         e2:d1:e8:6e:94:9a:0b:2c:5e:4b:3e:b0:9c:fd:79:15:45:6c:
         d8:73:37:34:03:85:39:be:4d:4d:a8:56:40:e6:e8:a9:a8:cd:
         48:c4:b1:03:e7:ed:91:4b:11:85:53:08:d0:d0:91:72:e6:c9:
         3f:a1:20:65:f3:de:dc:00:3b:4b:51:86:b3:f0:3d:ca:15:6f:
         b4:79:7d:36:c9:b4:aa:ab:4e:63:c8:52:e0:50:2f:1a:87:ad:
         90:36:24:50:f6:6c:cc:94:5c:f2:d0:84:78:cd:35:f6:9f:40:
         59:7f:97:cc:cd:b8:84:31:3f:01:b7:30:16:f1:f5:d6:1d:02:
         dc:03:4b:c2:a4:0e:5f:8f:4e:4b:de:2e:76:42:03:66:3f:68:
         3e:9a:ad:a6:c4:4b:a5:30:16:bb:db:d5:ca:cd:86:4d:71:ea:
         a2:12:b7:1e:ed:44:8c:cf:4b:de:5c:ab:25:dc:59:0d:2e:35:
         03:65:f5:f8:cc:34:dc:b3:d7:6b:44:f2:0d:b5:c2:4b:51:32:
         5c:2b:ff:e4:ef:ee:55:93:0e:e7:bf:1b:3f:7d:02:bc:21:bb:
         2b:f7:b9:b0:ed:e8:8f:86:0a:ff:93:2b:84:dd:51:84:4d:d4:
         2f:5c:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org