Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3132302e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          /zYLRlyu3sl3kl0bMSOP4r9jM57KK061Cc0YUTQtVS0=
Subject key identifier:   0C:5E:01:E6:AB:2E:86:77:0C:C5:65:63:40:1A:80:17:F7:D1:43:6E
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       58D6398D2E753AF04CEA8EA120C029AC5BF9A71A
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
Signing time:             Thu 18 Nov 2021 15:52:05 +0000
ROA not before:           Thu 18 Nov 2021 15:47:05 +0000
ROA not after:            Thu 17 Nov 2022 15:52:05 +0000
asID:                     17216
IP address blocks:        198.37.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:39:8d:2e:75:3a:f0:4c:ea:8e:a1:20:c0:29:ac:5b:f9:a7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:47:05 2021 GMT
            Not After : Nov 17 15:52:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:89:f7:11:a7:7a:64:94:2f:0d:17:b1:b3:
                    9e:1a:ec:1c:fe:67:b8:4b:0d:55:7c:a7:2e:90:69:
                    93:7c:70:94:b1:c7:18:34:55:ae:0d:78:d9:6e:55:
                    2d:0e:c0:b1:50:c7:9c:a9:6b:fd:5c:78:c6:41:58:
                    47:4b:14:72:6c:cc:23:80:35:79:9b:52:b2:73:ff:
                    5b:59:ad:67:99:2b:fa:92:7f:2a:bb:3d:91:18:8f:
                    b7:6f:c9:c2:80:3c:f2:e9:32:36:9a:74:03:a1:57:
                    cc:8a:44:27:0c:74:3b:9c:b5:ab:70:66:07:fb:26:
                    0c:88:7c:5a:5b:09:14:35:30:d2:fa:be:ae:af:11:
                    83:6d:ef:7c:3c:10:13:2a:57:86:90:d4:22:12:6c:
                    74:63:10:04:d3:13:26:1b:29:72:fa:2b:c5:13:30:
                    ad:3e:c6:c4:50:a9:88:80:43:dc:27:91:28:38:ac:
                    a6:aa:a1:33:7f:d6:8a:0f:58:07:3c:20:98:e0:ae:
                    83:fa:b6:95:59:73:69:3b:9c:d3:cd:2f:fc:26:c8:
                    d6:a9:c5:fb:d7:43:eb:15:34:7e:3a:d8:db:54:cf:
                    ed:bb:2f:6d:1b:b5:94:82:ef:6f:55:63:8a:bc:64:
                    a6:dd:4b:49:3e:41:81:03:81:bc:a7:68:66:80:21:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:01:E6:AB:2E:86:77:0C:C5:65:63:40:1A:80:17:F7:D1:43:6E
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:81:3d:e8:5e:19:03:3a:e5:21:04:91:a2:00:15:15:30:
         c5:74:e7:25:c4:db:a6:32:03:ed:dc:4a:34:52:e7:24:0d:56:
         d2:81:f8:27:91:8f:8b:aa:8d:09:b6:76:7a:a3:83:3e:c7:2c:
         b2:71:bf:95:fd:19:80:0b:20:12:d6:9b:8b:19:92:8a:1f:02:
         2e:43:80:ad:a0:1e:ea:7d:ca:5b:fd:e9:02:a6:23:94:f5:91:
         40:d9:eb:29:ad:e1:df:8f:fe:2e:96:01:1b:bf:84:51:2b:6d:
         e8:74:20:15:0f:e5:6c:e9:17:d8:75:15:0c:aa:59:ca:2f:10:
         d8:8d:54:cc:fa:af:c3:61:85:2e:fb:16:fb:dd:03:95:56:69:
         8d:c5:c7:9b:47:3c:b1:68:28:c5:63:64:39:cb:3b:d4:f9:26:
         d1:55:e8:63:5a:de:97:a3:0f:97:9a:28:15:1e:2e:4e:5a:3a:
         3a:6b:ae:1f:40:5f:cc:76:cd:59:de:46:ae:60:c3:cb:0f:cd:
         9b:fc:8f:75:bb:27:08:16:a4:25:00:43:db:88:35:ba:5e:ec:
         e6:2e:e5:73:6d:4f:6d:5b:42:49:d8:60:21:c2:aa:d3:06:9b:
         c2:8a:60:98:b6:9d:3f:bc:11:e7:9e:c0:37:d6:ce:08:cd:6b:
         00:3f:1d:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org