Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
File:                     3139332e382e3230332e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          b/OFBa6UzEfAicp46h500txXeyg+T2NPpGJfSGSqdVs=
Subject key identifier:   45:62:64:D7:AE:E8:CF:45:E1:60:D8:0A:CC:E9:4E:DE:CB:C0:AD:2C
Certificate issuer:       /CN=8b87b7b91897f34dad5a01509c429789cb20ebff
Certificate serial:       163FB42ACB059E96AE2B71E764A67D460AC7A29F
Authority key identifier: 8B:87:B7:B9:18:97:F3:4D:AD:5A:01:50:9C:42:97:89:CB:20:EB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4e3uRiX802tWgFQnEKXicsg6_8.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
Signing time:             Fri 28 Oct 2022 05:18:04 +0000
ROA not before:           Fri 28 Oct 2022 05:13:04 +0000
ROA not after:            Fri 27 Oct 2023 05:18:04 +0000
asID:                     211585
IP address blocks:        193.8.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:b4:2a:cb:05:9e:96:ae:2b:71:e7:64:a6:7d:46:0a:c7:a2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b87b7b91897f34dad5a01509c429789cb20ebff
        Validity
            Not Before: Oct 28 05:13:04 2022 GMT
            Not After : Oct 27 05:18:04 2023 GMT
        Subject: CN=456264D7AEE8CF45E160D80ACCE94EDECBC0AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:f8:69:cd:68:9b:13:87:78:a0:38:c2:cb:
                    e2:44:89:94:74:3c:e3:55:0b:ca:b0:41:2f:67:53:
                    5e:40:3b:e8:73:d0:e1:cd:11:8e:e1:a5:4a:9f:a3:
                    e1:36:57:78:56:97:d0:4a:25:d0:5a:d4:87:02:36:
                    cb:b9:65:c5:99:8c:f2:f6:3e:29:ed:40:5a:f6:dc:
                    13:7d:b8:92:db:57:07:91:90:8b:a6:be:94:85:46:
                    1c:b3:98:e5:e8:a6:6e:33:88:01:52:2c:74:e3:ad:
                    72:2e:43:93:c1:05:bd:39:c5:8e:13:43:c0:8d:28:
                    af:b7:f6:9c:ba:be:32:b2:6c:3b:fc:ed:e3:cf:da:
                    e9:a4:ee:a7:83:65:5a:1d:9b:ea:ec:c2:1c:9d:ae:
                    8b:c2:b2:5c:9c:46:de:cb:25:4e:03:7e:c4:c2:e9:
                    fc:18:bf:35:5f:d7:c0:f4:45:7b:f3:69:58:d4:71:
                    6c:d6:b5:a2:9c:45:0d:c8:4e:83:f6:dd:14:fa:81:
                    19:7b:a2:f1:d6:5b:0a:19:e4:a8:49:0a:6f:69:09:
                    3e:9b:85:a3:f9:6a:94:45:51:f1:08:60:e1:29:52:
                    95:c7:48:ec:bf:8b:e7:e7:9e:0a:c4:ab:aa:e5:e4:
                    1d:fb:71:3b:c4:82:ed:26:dd:8d:0b:ff:46:5c:4a:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:64:D7:AE:E8:CF:45:E1:60:D8:0A:CC:E9:4E:DE:CB:C0:AD:2C
            X509v3 Authority Key Identifier:
                keyid:8B:87:B7:B9:18:97:F3:4D:AD:5A:01:50:9C:42:97:89:CB:20:EB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/8B87B7B91897F34DAD5A01509C429789CB20EBFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4e3uRiX802tWgFQnEKXicsg6_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:50:24:8e:d4:f1:66:78:69:16:4e:f0:f3:bc:e0:97:a5:
         96:0a:b5:cb:56:e3:69:59:e9:aa:07:12:dd:c9:77:7f:0e:fb:
         9a:b7:ef:ba:76:15:07:09:55:8b:3c:01:bc:37:ca:ae:21:fd:
         72:bf:a1:f3:f3:8c:46:d4:ab:d2:3f:5b:e3:ee:d7:cf:cd:e0:
         47:0e:10:3e:d7:d0:b7:9c:6b:e5:a1:fe:cd:77:a7:b6:d6:48:
         08:bb:a5:98:8a:de:d9:f7:b8:c4:b2:c4:6f:de:21:1f:bb:62:
         a3:d7:0c:47:fe:83:e2:0c:1f:1c:d0:cb:24:b5:e3:dd:67:a9:
         91:5e:6a:b7:0a:60:80:14:7d:a2:26:b9:03:55:d3:27:5d:9d:
         39:ad:0b:8f:67:7a:60:3d:1b:f4:20:35:98:9f:16:88:1a:6e:
         7f:2d:14:de:e0:68:53:01:8d:13:ca:83:26:3e:58:e3:38:8f:
         71:09:45:b3:0d:14:c0:29:22:f3:ae:31:5f:e5:0f:7a:36:95:
         7b:cf:9f:d2:17:a8:2f:6f:b1:e7:bf:df:07:d5:69:36:5b:1c:
         7b:cc:01:a4:2d:7e:0a:b0:18:2a:88:72:54:96:f7:23:75:7e:
         26:63:6d:1b:e9:68:fa:63:6f:3f:89:aa:f9:af:f5:62:c8:cd:
         07:c2:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org