Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa
File:                     3139352e37382e35362e302f32342d3234203d3e203131343236.roa (raw, json)
Hash identifier:          tFjfjtyVdDBt7AXHDvdsHr4W3NfqDSwURWwXxbhWss0=
Subject key identifier:   BA:1D:A0:61:DC:C9:97:84:4D:56:5D:96:EF:F3:EC:F2:ED:97:64:C2
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       5F46FA0AFD43044B4DF471FFA46305435959099A
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa
Signing time:             Sun 03 Apr 2022 10:16:42 +0000
ROA not before:           Sun 03 Apr 2022 10:11:42 +0000
ROA not after:            Sun 02 Apr 2023 10:16:42 +0000
asID:                     11426
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:46:fa:0a:fd:43:04:4b:4d:f4:71:ff:a4:63:05:43:59:59:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  3 10:11:42 2022 GMT
            Not After : Apr  2 10:16:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:34:21:1c:3d:4a:a0:57:f4:4c:b1:7e:fd:
                    de:b7:c0:11:b7:ff:fa:f1:b5:90:47:c9:51:cb:5a:
                    4a:46:05:b4:85:1d:e6:83:31:98:82:f7:b3:8c:b6:
                    2c:da:cc:2f:82:56:2a:8c:0c:c3:6e:4e:29:8d:0c:
                    70:1a:2f:d9:12:0c:f6:90:7d:9d:f8:5b:4e:7a:e6:
                    63:bc:7b:e2:f2:26:3d:3d:b4:b5:6c:8f:72:bf:e0:
                    50:e6:d3:a7:9e:e8:16:64:77:05:c1:72:8c:c6:e5:
                    c8:64:90:1b:17:91:8f:ce:33:20:be:5c:67:e8:1c:
                    4b:b7:03:2e:78:49:57:9e:a2:51:66:d0:61:34:87:
                    a1:0e:84:41:7c:5d:95:16:88:1a:93:a5:76:ac:07:
                    87:88:81:36:6d:55:cb:54:f3:ef:20:7d:ec:0d:ea:
                    a1:fe:f6:b7:46:81:fb:29:3e:da:02:59:98:4a:6f:
                    26:c8:f9:05:7a:3c:4f:c2:30:e0:7f:9d:3c:a5:96:
                    79:c0:63:b6:7e:16:3f:92:cc:10:9c:aa:1d:eb:88:
                    29:55:1b:29:67:a9:ee:30:23:5a:4b:7b:d6:71:e5:
                    47:11:18:2c:cc:b6:40:0a:81:70:a7:6e:1e:b7:ee:
                    e8:a2:b4:53:35:17:c8:53:c8:61:c0:e6:f3:ec:d9:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:A0:61:DC:C9:97:84:4D:56:5D:96:EF:F3:EC:F2:ED:97:64:C2
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e203131343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:9c:07:cc:40:8d:ba:ae:a3:57:70:69:24:41:8f:e7:6e:
         db:ae:3b:14:52:cd:24:35:8a:82:e2:9f:a8:e2:b5:85:cd:15:
         12:cd:14:42:36:4e:da:80:e8:46:78:ad:d2:44:74:6f:e2:4a:
         47:e2:af:11:62:54:a4:4e:1d:0d:86:32:9a:a7:e1:ae:07:9e:
         84:c2:20:22:f6:98:ff:7c:1c:dd:fa:dc:76:b5:76:28:0f:f1:
         c8:0c:f5:94:42:f7:da:21:fd:d5:9e:00:65:62:ba:87:55:07:
         6a:7b:d4:04:ae:90:87:d6:42:68:d2:69:3e:9e:61:9e:58:9e:
         96:ba:f3:8d:9c:42:80:29:c9:c3:e6:29:2a:60:8f:10:95:7b:
         a0:9f:c3:8f:1e:8e:15:65:08:69:3f:68:51:e6:7e:f5:9e:23:
         aa:2a:ff:26:97:3c:c4:16:43:fc:79:d8:1f:26:68:e2:0e:ba:
         8d:3f:57:21:51:28:fa:09:15:f2:b8:e4:3f:35:db:90:8d:ad:
         51:a6:a0:8a:a5:c3:f9:5a:43:70:b1:3c:1e:b2:ef:c1:04:dd:
         04:2a:c8:52:13:5f:4e:07:35:44:af:a8:83:9e:0d:81:34:e4:
         0f:ea:36:23:27:2f:9a:8d:bd:26:09:22:5f:ba:bf:37:5f:7d:
         2d:2c:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org