Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
File:                     3139352e37382e35362e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          aqILUyfld+0TpWW8he5EP5HK3bbNNzz86BvhFLAfYIo=
Subject key identifier:   86:AB:E5:58:86:CB:66:1A:10:29:02:5E:C3:DC:8B:25:00:DE:8D:7E
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       5F3971041DD6230EBDB490C4561AC4E6CF1979EC
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
Signing time:             Sun 03 Apr 2022 10:16:26 +0000
ROA not before:           Sun 03 Apr 2022 10:11:26 +0000
ROA not after:            Sun 02 Apr 2023 10:16:26 +0000
asID:                     6461
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:39:71:04:1d:d6:23:0e:bd:b4:90:c4:56:1a:c4:e6:cf:19:79:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  3 10:11:26 2022 GMT
            Not After : Apr  2 10:16:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:06:33:49:2b:46:eb:83:16:b2:f5:1c:c2:a8:
                    90:69:d6:da:33:d1:c5:05:53:02:48:70:b2:67:49:
                    5c:29:44:b3:de:fb:4b:1c:9e:35:70:a4:59:a0:65:
                    90:9f:b5:09:bf:07:a7:3b:70:78:02:f8:01:7e:c8:
                    86:73:20:7a:96:c9:66:e3:23:4c:be:17:dc:54:d3:
                    d2:d0:53:23:46:16:5e:cd:76:b1:ec:02:ea:5e:4b:
                    5f:2d:81:04:1d:00:a3:82:e2:53:3d:62:21:31:de:
                    6c:e9:51:a4:36:52:16:a0:5a:25:fc:f3:6d:eb:df:
                    d2:ec:28:20:0a:58:88:4d:ef:09:97:83:d2:e9:32:
                    21:d6:85:94:48:c6:94:81:c1:64:3d:be:67:58:c1:
                    5d:71:1d:c9:3c:81:18:e5:75:85:4c:a1:ea:9b:61:
                    f5:34:da:f5:ed:ba:e0:8f:03:89:38:df:ea:aa:8a:
                    9c:ea:cb:87:3d:63:3f:a9:08:4f:c2:43:0f:ed:4e:
                    be:7d:d6:ff:6e:d7:c1:74:48:62:4a:df:7b:48:88:
                    d0:cf:b9:be:00:99:8f:40:b1:bc:9d:27:9b:be:06:
                    b6:51:14:68:e0:29:3a:b9:12:05:83:9e:7e:fe:92:
                    d4:e1:e4:0b:f9:1d:30:ed:75:58:4d:16:39:f5:de:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:E5:58:86:CB:66:1A:10:29:02:5E:C3:DC:8B:25:00:DE:8D:7E
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139352e37382e35362e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:81:93:a8:83:2d:c2:61:8f:48:74:d9:9e:09:16:04:f3:a9:
         e3:90:64:c1:69:a7:d1:04:fa:1e:3d:b5:73:8f:66:1f:f1:5a:
         b6:92:e2:eb:02:94:63:9d:47:53:5c:44:0d:91:35:ac:3c:9c:
         8f:8f:a5:79:08:df:bc:4d:cd:10:16:50:61:19:00:0f:30:42:
         39:ec:4a:ec:3f:9e:e8:6c:df:a8:b0:c2:41:07:31:1c:78:74:
         f8:68:d5:4b:b0:60:67:58:1d:85:14:3d:97:af:0c:00:25:cd:
         92:49:eb:9e:92:b8:90:0a:7f:c0:6e:2e:fb:8b:2a:64:6a:48:
         60:b9:ca:25:08:8f:0f:9f:21:a7:09:c4:34:5f:6e:49:dc:19:
         d3:8e:06:a1:9b:8c:ec:55:31:68:9c:55:84:92:83:22:85:8d:
         24:74:74:4b:f4:74:9e:71:5c:9d:ac:06:2c:96:d3:88:b1:5f:
         f1:a1:2a:dc:03:09:d4:fa:ae:f6:84:e0:53:a3:bc:65:5c:35:
         86:1d:75:a0:1c:22:74:73:a6:33:ef:32:58:dd:b5:f6:6a:38:
         2f:30:16:3a:fe:e4:3c:80:1b:07:e3:7d:b9:d7:7f:99:17:0c:
         82:b6:18:88:96:43:5d:9a:61:9b:64:88:6d:ac:be:0d:43:1b:
         69:32:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org