Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          GzOEUJqlxdHF2KlvAXIgOpTXA5kKBV6+OhuytWHt0e4=
Subject key identifier:   B6:AC:01:64:07:EC:6A:5A:E4:01:8E:B0:3E:01:F4:DC:55:39:AA:6C
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       0D38A8C8583918F22940356CD577E5206B57D7C1
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa
Signing time:             Fri 29 Apr 2022 20:58:30 +0000
ROA not before:           Fri 29 Apr 2022 20:53:30 +0000
ROA not after:            Fri 28 Apr 2023 20:58:30 +0000
asID:                     33696
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:38:a8:c8:58:39:18:f2:29:40:35:6c:d5:77:e5:20:6b:57:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr 29 20:53:30 2022 GMT
            Not After : Apr 28 20:58:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:82:fb:e1:27:cb:ac:e6:3d:5d:68:74:79:
                    ef:69:5c:16:7b:4a:76:86:06:87:7e:e5:ae:ae:0f:
                    ae:06:6c:db:6a:de:50:db:f1:ae:27:e4:a4:06:7f:
                    8b:6a:25:80:73:1f:67:ef:ff:c0:ff:d9:cd:b6:19:
                    17:f7:62:e7:79:6f:79:51:ac:9d:65:a7:e1:73:3f:
                    60:96:11:ba:c8:ac:5c:26:8f:4a:27:23:5b:cb:45:
                    8b:26:7c:21:0b:2c:17:a9:98:6f:4a:dd:69:4f:75:
                    7f:c4:81:88:2b:86:c0:23:f2:ad:c7:9a:ca:ea:d6:
                    cf:2c:e3:f6:70:6d:2d:64:11:ac:a4:16:e3:e6:19:
                    a1:78:56:c9:ee:99:c4:2d:6f:b9:40:94:45:a6:fb:
                    30:29:7b:81:bd:e6:84:db:0a:40:da:0e:33:8c:4f:
                    24:26:83:20:63:f9:8b:a1:c3:8f:4c:1c:f3:db:d4:
                    31:52:2b:32:04:ad:a3:bc:f8:b4:88:07:47:f6:5b:
                    29:86:96:45:1f:aa:92:dc:89:76:3b:88:28:bf:8d:
                    4f:94:19:b4:a0:5c:8f:7e:57:d6:31:f8:54:4f:77:
                    4e:bd:be:7e:ea:0b:d9:d8:30:14:32:84:5f:95:37:
                    97:9c:11:68:23:8c:0b:83:ef:dd:b3:b3:78:63:36:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:01:64:07:EC:6A:5A:E4:01:8E:B0:3E:01:F4:DC:55:39:AA:6C
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:ca:a5:3c:ec:85:d7:5d:df:e5:ff:b1:90:de:43:37:51:
         41:2c:08:87:a3:84:d2:e4:99:0a:68:0e:69:88:4d:a9:2f:11:
         f3:06:8f:be:dd:47:b2:d8:8c:6e:0e:44:ea:f8:27:ad:8b:4e:
         ea:da:61:24:02:a3:30:e5:f0:34:eb:db:a7:22:2e:3b:66:63:
         2a:7d:3a:3a:dd:d1:64:60:b0:28:94:f0:0c:ce:4d:2e:2f:c6:
         38:93:12:39:4f:a0:9f:55:c2:61:f2:39:31:17:21:03:04:38:
         43:14:ee:2d:8f:75:ff:48:f0:3c:41:bc:78:85:f3:0c:70:b0:
         9c:c8:64:af:f3:95:b4:6f:98:36:cc:87:37:79:eb:61:4d:00:
         fb:fc:d7:e9:0a:b8:4b:93:e4:b3:73:c8:01:03:ff:a1:67:49:
         22:00:0f:f6:cd:ec:c0:81:65:f9:89:4d:49:f5:7d:51:84:ef:
         4f:33:c8:b5:d0:b4:f0:68:a5:fc:5d:13:ea:8a:55:e0:9d:f1:
         53:4e:89:a9:bf:e8:5b:2a:b9:2b:81:5c:3e:ce:11:72:97:45:
         2d:88:2c:4c:4a:ec:9a:c9:1f:29:f4:e6:9b:82:96:8b:39:3c:
         82:3e:ad:41:c4:ac:03:6e:3d:05:e6:0a:8b:86:5e:e5:b6:5a:
         1c:35:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org