Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3234302e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          IzkJHWklGMTJwDV28nXme5Lv3o7zgnwDam0p5Z9roj4=
Subject key identifier:   03:D0:61:9C:D2:4C:D1:E9:9B:40:F8:13:D0:3B:CA:EA:56:60:FA:8B
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       431FC9D63F8A9071966B4A469AD7B423F0D3E689
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa
Signing time:             Thu 18 Nov 2021 15:51:23 +0000
ROA not before:           Thu 18 Nov 2021 15:46:23 +0000
ROA not after:            Thu 17 Nov 2022 15:51:23 +0000
asID:                     7029
IP address blocks:        23.88.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1f:c9:d6:3f:8a:90:71:96:6b:4a:46:9a:d7:b4:23:f0:d3:e6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:46:23 2021 GMT
            Not After : Nov 17 15:51:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:79:3c:c6:88:74:de:26:2c:ee:d3:88:df:
                    3f:fa:21:1c:02:1f:3b:1f:9c:b6:cf:93:97:13:1a:
                    72:62:74:64:73:1c:be:48:da:dd:c0:ff:fc:cc:0e:
                    65:7d:3d:54:1c:e0:04:90:63:04:76:91:dc:ac:f1:
                    a2:bb:cf:70:b2:92:0e:fd:5c:3f:64:e5:1a:30:41:
                    b9:17:03:72:09:8f:92:a5:ee:7a:ef:0a:e3:f5:2b:
                    70:52:36:75:36:5a:50:1e:2d:87:60:c1:2b:b5:c1:
                    ff:69:b5:19:58:33:e7:e8:ef:e7:69:5a:cf:c0:56:
                    8d:97:67:04:38:00:51:de:7d:93:ce:9d:05:32:f6:
                    7b:36:b0:74:e2:71:35:3a:f5:7a:65:c0:25:6f:a9:
                    1a:98:b3:62:e9:5a:33:e2:53:55:7b:6b:15:e8:52:
                    fc:e4:68:ff:d1:91:79:87:27:8c:19:ba:12:2f:e3:
                    db:a8:d1:ef:cc:e6:6c:dd:14:1d:91:c5:3f:37:e8:
                    a6:f7:20:2b:06:ba:16:07:b5:67:fa:f1:ac:3e:f1:
                    02:e1:6e:78:0a:bb:c0:8e:c9:31:32:55:79:24:5f:
                    82:d8:0d:0c:ef:f4:95:52:77:fc:d7:9d:ce:d1:45:
                    51:2c:c0:63:57:8e:7b:89:89:e8:96:00:d0:f8:a4:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:61:9C:D2:4C:D1:E9:9B:40:F8:13:D0:3B:CA:EA:56:60:FA:8B
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:d5:fa:38:1c:5e:4f:f4:c1:29:72:1a:ce:bb:72:4c:84:
         7b:02:5e:9f:9c:be:db:6a:f3:81:4b:94:cb:02:a4:b9:2c:8e:
         78:ca:ba:26:df:21:04:73:0b:fe:a9:22:8e:fc:7a:17:a2:24:
         8c:73:cc:42:95:9d:7a:71:2a:c7:f1:b4:7c:4a:65:b2:28:e0:
         d5:7d:88:d1:28:9a:cc:02:c8:85:4a:1b:be:83:5a:e6:b0:81:
         33:df:07:21:62:ac:76:a8:e0:a3:e7:e9:ca:cf:b4:be:a3:c8:
         67:f4:93:87:dd:e7:47:05:6b:de:54:0a:03:a0:f6:24:fe:2c:
         6c:f0:6e:f7:b2:69:1a:0a:5f:82:a3:5c:55:25:79:56:53:97:
         29:5a:0d:51:36:85:24:44:bd:56:1e:45:2a:5e:94:a4:1e:42:
         57:72:7b:c5:54:d7:87:3e:bc:04:5f:c4:34:93:fc:2e:0b:ed:
         69:33:aa:ef:b4:ce:41:54:7b:dd:0c:04:70:e6:1b:b4:03:b9:
         de:32:3b:a4:5c:b2:db:28:f1:7e:ea:84:99:1c:66:f4:4e:f5:
         4a:41:78:e3:a5:0b:37:6e:49:a6:a5:4d:e0:e7:2a:28:ea:68:
         b4:f1:b0:4f:26:75:3c:c0:68:16:8a:54:78:e1:8a:92:43:f9:
         e3:c7:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org