Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa
File:                     3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          a5eyiJghEELzl8g+xwkbBgC6fMdIAFmgz95gUCUi+iU=
Subject key identifier:   E3:23:0A:A3:B2:D4:5E:DA:FF:53:8D:B5:C0:0B:01:FD:CD:25:67:FC
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       080CD1A5FF6672FFA18888DDAFF038201FE15676
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa
Signing time:             Thu 10 Feb 2022 18:50:25 +0000
ROA not before:           Thu 10 Feb 2022 18:45:25 +0000
ROA not after:            Thu 09 Feb 2023 18:50:25 +0000
asID:                     49999
IP address blocks:        216.122.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:d1:a5:ff:66:72:ff:a1:88:88:dd:af:f0:38:20:1f:e1:56:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 10 18:45:25 2022 GMT
            Not After : Feb  9 18:50:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:0d:2d:6e:2a:73:a2:53:30:55:5f:90:4d:
                    56:7e:a9:55:54:4e:d5:15:79:1e:b8:25:34:a5:1d:
                    94:fe:65:02:bc:07:64:f3:f3:d8:44:f1:0e:4e:50:
                    de:03:47:d8:46:64:2b:e5:6e:26:61:44:5f:f3:bf:
                    cc:5c:e7:12:59:5e:35:c8:09:a0:a2:43:f6:da:32:
                    51:83:a8:2f:55:8b:c5:45:ab:d8:17:1c:4d:b3:6d:
                    f5:1e:de:a6:9e:e1:12:ad:8c:a1:53:8e:1c:4e:53:
                    74:1f:bb:63:36:c7:40:7b:2f:0d:0b:bf:07:5a:b7:
                    33:ea:af:bc:6f:65:3b:9d:3a:f1:eb:ad:8e:9c:64:
                    2f:b3:13:cc:d9:d1:28:f3:0b:2a:27:bd:9a:ea:03:
                    16:c6:3c:13:e1:86:30:5c:af:c8:9f:f5:63:b1:72:
                    2e:f4:3f:b6:49:0c:06:ac:ca:fe:6d:0c:ed:f6:37:
                    0f:f3:2d:1a:17:ca:7d:4e:f0:31:25:d8:dd:0a:8e:
                    1d:e5:dd:b4:ec:b2:ec:b5:e9:e6:5c:76:46:d8:cb:
                    e4:75:dc:22:b7:fb:89:09:38:4a:4a:25:d6:44:3e:
                    0e:7b:49:30:de:6a:81:e1:8f:62:68:b2:af:5b:3b:
                    35:43:3a:cc:66:df:29:06:1f:e0:2f:38:bc:a4:2c:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:0A:A3:B2:D4:5E:DA:FF:53:8D:B5:C0:0B:01:FD:CD:25:67:FC
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:96:65:d9:96:9c:95:29:c0:ad:08:7a:9e:d6:dc:53:38:
         41:2d:28:40:4e:4b:12:2c:39:08:46:d0:b4:b8:ff:19:03:85:
         a9:30:af:60:c6:6f:ab:21:5a:ac:17:cd:de:65:7f:61:a7:ef:
         5e:e4:a6:77:67:18:88:55:8f:8b:72:f7:90:11:45:54:e0:d0:
         5b:7c:9b:d0:34:fa:ac:27:76:05:61:74:15:a7:fb:cc:17:f6:
         95:fa:bb:e6:f4:87:33:4c:4d:63:4f:d8:a8:5d:3e:5d:b0:8b:
         02:3d:17:26:da:83:92:df:f1:60:54:7d:40:7f:d3:ab:97:d8:
         f9:3d:4a:0f:d7:c8:7b:7d:2e:22:99:f5:fb:4d:77:4f:3b:24:
         92:2c:db:7c:2a:21:4f:6f:f3:80:70:fe:b2:63:c2:71:fa:b1:
         ec:54:d6:a5:42:99:df:80:66:29:9d:c0:c8:d2:c5:be:55:e7:
         c9:33:d3:c2:9c:0b:8e:fb:71:a7:e6:f3:b1:0b:59:68:03:4d:
         84:e5:58:ed:db:43:30:72:3c:ea:57:33:9c:a0:df:99:5f:0d:
         32:e6:70:72:6a:fe:cb:04:13:93:19:2a:f5:de:85:bd:c9:fd:
         ea:31:bd:30:6a:35:98:8a:ba:5b:aa:7c:a2:e0:19:8a:6f:83:
         92:e3:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org