Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
File:                     3139352e37382e35352e302f32342d3234203d3e203131343236.roa (raw, json)
Hash identifier:          ZBASiLGDpLtdlwTvB9EdLvyfWfd81m6wNiPUxN0Dy3o=
Subject key identifier:   BD:A0:AA:88:A7:E9:C3:47:98:36:41:7F:1F:0B:4B:ED:F1:83:77:07
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       50092B55DD51E6D722EB8592FDD4C0B8000FD7F4
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
Signing time:             Sun 03 Apr 2022 21:26:00 +0000
ROA not before:           Sun 03 Apr 2022 21:21:00 +0000
ROA not after:            Sun 02 Apr 2023 21:26:00 +0000
asID:                     11426
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:09:2b:55:dd:51:e6:d7:22:eb:85:92:fd:d4:c0:b8:00:0f:d7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  3 21:21:00 2022 GMT
            Not After : Apr  2 21:26:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:e9:8b:70:36:b7:4a:7e:b9:9c:52:01:d6:
                    27:c6:e5:3b:5b:36:13:88:b5:fd:c1:33:5f:8a:42:
                    d6:c6:49:ec:50:7e:25:33:cd:26:f4:fe:7e:f0:ee:
                    b5:90:ef:80:d1:d6:61:b8:dc:a6:0c:04:73:68:5f:
                    7d:20:57:c1:aa:7f:1f:55:a3:bc:9a:d6:4f:b5:f4:
                    e0:2b:b3:5f:fb:93:57:d3:14:ce:e1:a8:92:ff:df:
                    00:2a:33:25:a6:eb:5a:8c:28:4a:3f:76:a5:02:f8:
                    bd:5f:a7:c2:18:d9:70:8b:01:3b:ec:e3:c0:13:96:
                    98:1b:a6:7f:a4:ec:f9:85:1a:14:59:19:b5:ac:d3:
                    69:7b:4b:e0:b9:01:fa:f1:b4:06:57:85:ed:18:3e:
                    08:c3:b8:35:a3:35:e5:12:71:94:e1:f4:5e:c3:1a:
                    ad:07:3d:6a:e0:51:50:87:9c:a8:f4:0d:41:fc:22:
                    0b:57:0e:6d:c1:ec:1b:98:00:1e:87:e7:96:f5:4a:
                    3c:ea:64:33:4e:66:21:a1:78:1f:a9:01:45:69:cf:
                    5d:fc:2b:ce:69:d4:e1:cc:26:f7:51:6d:ad:bc:87:
                    7a:8a:46:8d:2e:f1:5d:51:c4:35:57:c0:39:6a:51:
                    51:e0:13:f1:fe:bb:66:84:f5:01:7b:5e:a6:86:b9:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:AA:88:A7:E9:C3:47:98:36:41:7F:1F:0B:4B:ED:F1:83:77:07
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35352e302f32342d3234203d3e203131343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:a5:65:ca:37:63:10:f1:ba:e0:b4:7c:f6:a1:ee:90:12:
         5d:9a:24:e3:03:3a:0e:cc:dd:2a:c3:a6:b2:f6:f5:93:54:c5:
         7b:5b:53:6d:d3:66:ff:db:8c:9d:95:3d:11:47:c7:21:2e:ba:
         70:16:b4:1d:8e:0f:d5:ef:74:ab:f5:62:3e:4e:42:5e:a9:7c:
         6b:a8:7e:b8:91:cb:06:2c:ed:a6:0b:e0:61:dc:fd:cf:34:36:
         38:03:f2:b0:51:a9:6a:9f:a8:47:38:4b:9b:6b:2d:92:90:1d:
         37:6f:2e:65:c1:46:06:86:c8:69:86:db:dd:f9:8f:4f:a5:8c:
         02:4b:69:fc:88:3f:4f:e9:b1:bf:b3:80:31:8a:5f:dd:61:b8:
         b8:de:56:b5:b7:6b:e1:2c:49:8f:7f:a1:0a:6c:6f:35:52:51:
         fc:66:16:e0:f5:2e:4d:95:95:b2:80:9a:3f:b7:93:7f:90:a8:
         49:5e:e6:95:5e:82:89:d9:96:69:ed:70:08:1f:43:e0:bd:4f:
         d0:a0:53:d8:2e:98:4a:46:b4:bc:16:6c:f0:cb:de:4b:12:ba:
         c6:36:f6:7c:21:97:d5:e1:a9:92:51:45:c9:08:f7:6a:8f:c8:
         5d:d0:95:41:a1:2a:d2:29:6e:c6:10:54:60:08:4f:50:ce:1b:
         1c:a5:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org