Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3233203d3e2037303138.roa
File:                     3231362e3132322e3138322e302f32332d3233203d3e2037303138.roa (raw, json)
Hash identifier:          oF0hS6bj4cZ+bwkxtU+j91dJ0CjBIReV7qAamJ1/9As=
Subject key identifier:   5E:30:A6:8A:9E:29:DA:F9:EA:8C:55:5C:F2:52:9E:DB:78:61:2D:35
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       15A02BDBA1A8FA40A687C7E386B20AB2E97FB0F7
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3233203d3e2037303138.roa
Signing time:             Tue 10 May 2022 05:57:47 +0000
ROA not before:           Tue 10 May 2022 05:52:47 +0000
ROA not after:            Tue 09 May 2023 05:57:47 +0000
asID:                     7018
IP address blocks:        216.122.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a0:2b:db:a1:a8:fa:40:a6:87:c7:e3:86:b2:0a:b2:e9:7f:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 10 05:52:47 2022 GMT
            Not After : May  9 05:57:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:ba:97:d4:35:db:0d:0b:8d:9b:03:8e:51:
                    b6:c4:61:bc:70:e9:70:a8:dd:8a:c8:5a:2c:03:a8:
                    11:ba:ca:64:c1:d2:2d:28:a9:7a:0e:f3:79:73:ae:
                    f6:85:ff:c6:fd:15:f7:17:39:4a:b6:a0:f7:69:5e:
                    72:b6:11:06:77:97:ac:a3:5b:87:87:85:cd:0a:5c:
                    72:ed:71:d9:5f:05:6a:0d:9d:24:f4:59:3b:b9:e3:
                    f1:4f:42:d7:63:ef:16:84:35:9b:f0:65:65:57:00:
                    a2:9a:a2:77:e3:1c:95:42:ff:58:77:0c:97:43:69:
                    32:ea:b7:0c:d3:d2:9e:55:8a:b1:b0:89:96:36:18:
                    87:78:a6:26:d6:ae:b4:02:fa:bc:df:07:f3:93:82:
                    4f:bc:7b:f4:35:25:92:67:0c:42:b7:bf:ad:cf:2b:
                    9d:04:d7:d9:e2:a3:b1:d4:0b:2d:75:78:3c:56:1d:
                    83:02:74:a1:e1:ee:f2:1b:81:d1:67:d6:8c:e8:70:
                    69:1d:9e:c3:9a:f9:64:6d:c8:62:c2:f8:22:af:ce:
                    db:f2:23:35:11:58:dc:10:e1:85:cb:f6:1e:3c:52:
                    cf:39:d3:83:61:54:3f:8a:df:97:fd:83:f0:08:34:
                    44:56:a1:6e:21:b6:a1:7e:1a:51:f9:ca:ff:3f:ab:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:30:A6:8A:9E:29:DA:F9:EA:8C:55:5C:F2:52:9E:DB:78:61:2D:35
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3233203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:53:22:61:55:d3:c8:d6:2e:de:c5:c0:ee:7a:72:62:09:f3:
         3c:c2:8d:c1:2f:aa:1f:61:02:d0:f6:6b:04:63:97:82:f3:d3:
         43:9e:60:f7:cc:62:a7:38:65:0e:a1:dd:97:2c:66:f7:e4:97:
         5a:6b:99:b7:eb:0e:1a:2b:1e:b6:b2:ae:05:b9:94:2b:dd:91:
         d7:e8:07:a8:cb:5f:51:08:45:fc:a7:88:f3:7a:33:16:8a:46:
         4a:f7:92:1a:06:21:91:a2:40:0e:09:48:2c:ba:de:86:4e:76:
         24:76:56:28:0c:77:ab:6f:2b:b7:45:e2:49:78:df:bd:0c:74:
         33:ac:dc:a9:e0:d8:20:0a:be:e9:13:a1:c5:02:c4:91:ba:4f:
         44:79:7a:6d:58:eb:04:dc:26:f7:e6:33:69:67:2f:2d:9a:ba:
         5b:87:cf:05:ca:e4:da:3b:83:2c:60:42:21:56:ce:f6:07:15:
         dc:2b:e6:89:b0:64:ec:2d:79:e8:f5:5e:11:26:44:86:e2:d9:
         f9:f1:08:bb:bd:9c:d5:09:5e:7c:2a:72:94:3a:36:ed:9a:b9:
         97:d5:8d:0c:c3:89:9a:09:3d:a1:94:6e:ae:32:5c:f3:a6:0b:
         69:80:82:8d:11:ce:3e:e0:eb:18:72:de:c0:4a:76:e5:19:16:
         15:23:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org