Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203430363736.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          PO1/okmrSbdsBTSRm1y4EIYJ7DlN2WEIseoRIpar1NM=
Subject key identifier:   C3:57:85:AB:88:20:F7:67:A1:F0:9A:7D:DA:DE:F1:E0:96:4E:05:A1
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       76D4758167BD76E61790D7A085A699CD79A5BD56
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 04 Apr 2022 19:53:16 +0000
ROA not before:           Mon 04 Apr 2022 19:48:16 +0000
ROA not after:            Mon 03 Apr 2023 19:53:16 +0000
asID:                     40676
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:75:81:67:bd:76:e6:17:90:d7:a0:85:a6:99:cd:79:a5:bd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  4 19:48:16 2022 GMT
            Not After : Apr  3 19:53:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:ea:0f:4d:2c:73:60:4e:5c:03:ad:49:e3:
                    7f:35:9b:8e:a7:cb:1b:9e:f8:b7:bc:e0:96:27:80:
                    ae:df:c9:02:6f:6b:11:f7:14:87:71:cc:c1:5f:0c:
                    cb:e0:c1:c7:b3:d9:95:39:56:a6:a6:a3:30:31:5e:
                    0c:48:4a:f0:ec:df:21:46:f6:dc:a7:32:a6:3c:1b:
                    1e:cb:1a:ce:a8:cb:f8:fd:55:e4:a6:4b:4a:04:3e:
                    a1:de:81:15:43:64:72:c0:92:cb:8a:57:da:67:a3:
                    44:fd:c5:33:79:8a:e9:53:a0:5f:7e:ef:6a:8f:b9:
                    c0:2c:da:3e:1e:91:25:f2:de:a7:65:5e:e9:ff:33:
                    2f:3d:f3:9b:7d:26:24:d8:47:6a:95:8c:f1:65:2b:
                    d9:b4:5a:8f:1f:d1:3e:65:23:61:79:fd:4d:93:56:
                    03:aa:da:2c:3d:65:e6:7f:23:1b:4e:0c:95:ad:13:
                    ec:f4:4c:82:72:2d:04:2a:8f:b9:37:95:1c:03:fa:
                    86:d1:52:49:57:c8:ea:3b:0e:33:1d:0a:ab:ac:a9:
                    12:72:f0:51:aa:6f:86:35:5c:e0:6c:86:26:d0:ac:
                    8e:33:69:b3:13:4d:15:c8:33:c2:0c:54:e1:fb:eb:
                    4b:a9:22:7e:5f:c5:d1:37:6f:00:e3:7b:7f:0a:d1:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:85:AB:88:20:F7:67:A1:F0:9A:7D:DA:DE:F1:E0:96:4E:05:A1
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:93:a5:08:1c:80:62:9a:7a:29:d1:47:fa:a1:43:9c:ee:8c:
         0a:03:33:d4:2b:f5:ec:b1:d2:04:23:0b:b9:76:b8:2d:e6:15:
         d3:23:89:ec:df:55:82:14:56:04:37:b7:be:9a:d3:09:b8:46:
         af:2b:b6:b3:7e:58:64:0b:98:3a:7e:ca:8a:76:e1:fb:05:7b:
         a1:5e:6c:dd:e0:24:cf:fa:83:0d:0d:22:67:73:cd:db:8b:d2:
         a6:a3:d8:3b:a1:c9:a1:71:17:91:92:9c:39:cb:78:97:12:35:
         2b:da:b9:61:a5:5e:45:95:37:60:56:2d:b8:f6:fb:cf:22:d7:
         50:e8:ce:50:d2:2f:be:f1:0b:46:e4:b2:bc:4b:d8:89:96:b9:
         ce:01:1b:1e:dc:12:71:89:07:e6:d8:8d:e3:0f:7f:38:64:48:
         75:53:c5:f5:47:2b:2d:96:9d:1f:b7:5b:d1:fd:0d:ac:15:e5:
         d2:da:03:7b:ed:2a:d1:9d:56:0e:13:1a:fb:d1:fc:cd:e4:00:
         b3:55:a7:f6:93:d3:9c:b5:f0:e9:62:3a:a3:ca:4a:35:30:bb:
         c1:52:2e:86:ce:26:35:8f:38:50:a0:23:cf:73:4c:15:32:a2:
         01:8d:aa:2c:f1:b2:f7:2d:38:d4:b4:c8:28:9d:06:63:7e:70:
         c6:a1:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org