Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e20313335333735.roa
File:                     3139352e37382e35362e302f32342d3234203d3e20313335333735.roa (raw, json)
Hash identifier:          f4q3/OBIzogQeNLQ6tVtA3b/+jJVwzTMCFtkwrxKTXE=
Subject key identifier:   3A:FB:7B:F2:9F:91:98:7D:E1:A7:BE:8F:45:9B:59:CC:04:AF:3B:46
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       0FA5789AFC1D6A9EA58BAE331034D66911AE49BF
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e20313335333735.roa
Signing time:             Thu 31 Mar 2022 13:06:10 +0000
ROA not before:           Thu 31 Mar 2022 13:01:10 +0000
ROA not after:            Thu 30 Mar 2023 13:06:10 +0000
asID:                     135375
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:78:9a:fc:1d:6a:9e:a5:8b:ae:33:10:34:d6:69:11:ae:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Mar 31 13:01:10 2022 GMT
            Not After : Mar 30 13:06:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:85:60:59:f4:dc:d8:77:d9:7d:f0:4d:21:
                    27:22:01:b9:a8:bf:d2:ef:3e:7b:4e:03:47:a1:eb:
                    31:6e:fe:05:c6:2a:f6:12:72:d1:51:08:8a:78:26:
                    e2:62:14:8d:16:7d:bd:e2:f8:c7:ab:56:a2:8c:8c:
                    cd:3b:5b:40:db:49:8f:33:29:ea:51:a2:80:29:75:
                    0e:d5:29:6d:e0:84:e4:d4:61:01:1c:be:6a:85:34:
                    33:18:fc:bb:44:01:f8:52:33:33:ee:28:f8:3d:2b:
                    fa:15:2e:31:61:34:aa:31:67:4d:75:49:1c:f6:de:
                    2d:86:79:87:85:5e:03:6d:cd:a6:29:6e:74:78:31:
                    28:27:ea:a3:a1:e7:6c:7b:c0:21:a9:e8:5e:87:14:
                    b7:24:7b:7c:9b:31:89:1e:88:f8:7d:e9:fa:c8:96:
                    2c:b5:43:e7:a4:4e:b3:83:4d:ab:e1:af:c7:38:af:
                    0e:51:b6:24:83:59:ad:c9:91:9b:e1:0c:9b:3d:5d:
                    8d:32:90:d5:a2:e6:56:d4:7d:89:4f:56:4e:54:fb:
                    98:c6:16:4a:f4:da:fc:19:e3:fb:3c:85:df:e1:19:
                    e6:c9:63:70:6a:7d:87:bc:2b:c5:83:eb:0e:5e:9e:
                    c7:06:17:cf:e9:0f:b1:0a:fe:c9:64:20:b3:0f:80:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:7B:F2:9F:91:98:7D:E1:A7:BE:8F:45:9B:59:CC:04:AF:3B:46
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e20313335333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:f1:22:43:d0:0b:46:58:fa:89:8d:de:35:23:fa:93:69:
         e0:7b:0b:d7:7b:a0:e6:b3:0c:92:3b:ee:df:d3:bb:3a:78:de:
         51:1b:09:c9:e1:b7:e1:aa:75:5f:b1:c7:53:a7:e9:74:47:5d:
         35:6f:f0:1c:28:2d:b5:e2:c4:10:bb:eb:6a:68:b1:b2:16:99:
         64:bf:53:6f:29:0d:e7:c7:d3:86:61:76:af:dd:d5:af:d6:80:
         5f:70:25:5b:1c:15:a3:c7:83:cf:42:40:2d:d8:ee:24:3b:c5:
         59:3a:a4:cf:58:1b:2b:c6:ca:8a:f6:66:26:b1:c5:3a:df:bf:
         14:56:aa:90:90:95:d1:56:37:39:15:5e:12:04:80:52:b9:45:
         8b:f6:15:f4:fc:da:88:3d:13:ee:e9:f8:34:21:19:2b:86:5f:
         a2:25:a5:a0:2e:23:2f:d8:6c:34:bf:83:c6:ce:c6:d5:83:b2:
         1c:94:d2:32:2c:54:e0:0f:d1:f4:fb:5f:02:4a:2a:90:0a:25:
         9a:c9:a9:a1:7b:0c:d4:40:64:78:b2:2c:e2:d0:ff:a5:61:35:
         e3:73:d7:30:75:9b:ee:ea:47:3a:5c:f7:5f:c1:00:fc:b5:4d:
         f1:df:e4:98:25:27:8c:96:72:04:dc:cb:98:ed:5e:85:52:c4:
         98:bb:28:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org