Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa
File:                     3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          /uLspo5cWRWjp7HG4EH4KOolsRYX4aK2n8+eXt62CzM=
Subject key identifier:   62:03:AE:A0:DE:0F:68:79:00:56:52:0A:7D:DC:8E:B5:4C:96:63:83
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       7CAF7AE5B21E45B63584B3863200EF25B4E5EC12
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa
Signing time:             Fri 18 Feb 2022 16:08:51 +0000
ROA not before:           Fri 18 Feb 2022 16:03:51 +0000
ROA not after:            Fri 17 Feb 2023 16:08:51 +0000
asID:                     14618
IP address blocks:        216.122.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:af:7a:e5:b2:1e:45:b6:35:84:b3:86:32:00:ef:25:b4:e5:ec:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 18 16:03:51 2022 GMT
            Not After : Feb 17 16:08:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:13:f7:09:1f:89:54:6f:ae:6c:33:49:76:
                    98:dd:b1:1c:07:4d:81:fa:38:c6:81:16:90:da:2c:
                    bf:76:5d:ea:6a:81:97:32:1a:bc:f7:ed:d3:a6:49:
                    1e:8a:00:19:ff:f5:18:47:4f:c9:66:39:5e:c2:46:
                    81:29:37:fb:f5:fa:f9:f9:31:e4:b1:6e:4a:9e:e3:
                    58:59:15:05:99:c4:ef:75:28:08:0e:dd:b4:fb:ad:
                    62:89:e7:70:a2:8d:e7:cd:64:5b:8a:0d:39:9f:27:
                    6e:2f:c3:c7:79:c8:ca:7c:68:a1:e1:fd:56:4b:cc:
                    6d:f1:fe:68:cd:91:2b:04:1c:e1:c1:e3:69:90:53:
                    36:2b:47:15:50:09:7f:e4:1e:1e:fc:86:55:dd:d2:
                    87:90:45:a8:a7:b2:ef:76:81:f1:d2:30:26:bd:df:
                    aa:61:44:bb:30:1f:bd:42:60:63:b6:df:8c:9f:99:
                    8a:b3:42:31:38:89:94:26:fc:de:4a:44:67:6f:0c:
                    a0:f1:44:f5:ca:96:1f:37:fb:2c:cc:73:13:d5:ea:
                    58:f8:0c:9d:1d:93:d7:5e:aa:b8:29:41:19:f2:de:
                    0d:46:91:3a:de:5e:38:96:f1:53:8c:33:c7:87:23:
                    12:d3:bb:1e:68:92:9b:e8:4a:a7:7c:44:f7:05:96:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:AE:A0:DE:0F:68:79:00:56:52:0A:7D:DC:8E:B5:4C:96:63:83
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:3d:1b:8d:b5:2e:6c:d3:fc:3b:9c:e0:38:4e:38:5b:07:
         85:1a:e4:f5:a0:c5:1b:0c:43:55:e0:f9:9b:d8:eb:45:c6:43:
         17:26:0e:62:16:79:32:9b:76:4f:36:7f:b2:75:15:8d:98:4e:
         56:c7:7c:80:d9:32:da:17:8b:36:34:fb:f3:c3:70:6c:9c:d7:
         14:20:4d:c9:f0:39:0f:0d:b6:3b:0b:bb:0e:fa:30:39:be:dd:
         c9:0e:5f:64:e5:6c:61:05:8d:0d:4f:22:2d:07:cc:a8:37:10:
         c7:0f:10:29:58:d9:65:30:e6:aa:7a:43:58:59:8e:22:a3:1b:
         6b:cc:7b:a0:e5:dd:f8:50:f8:3f:24:56:05:eb:72:b7:45:1f:
         e8:ae:62:fa:56:e8:b9:ba:4a:2d:8c:0b:fd:c5:51:fb:2f:d7:
         d8:24:c5:cd:15:50:61:7b:0c:08:57:95:68:a9:30:1f:4c:5c:
         43:75:24:06:f0:ba:81:8e:d1:10:ab:0d:cb:ce:4f:00:de:b4:
         ce:a2:8d:55:cd:8f:ed:ba:62:29:b5:7d:b2:3c:b3:cc:67:d3:
         e3:1d:a1:0d:5b:e7:34:6e:9c:49:b3:0a:63:aa:75:4b:1a:c4:
         2d:51:df:12:c3:e4:4e:1c:59:02:f0:48:52:5a:ea:88:02:fb:
         eb:5d:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org