Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jwQFVQ6bet40agH0chf4fSrXvRsWyJAMxtmWGazIGM0=
Subject key identifier:   A1:90:9A:5C:B3:D8:8F:F9:94:26:5E:25:C6:8C:47:F3:4E:50:0C:BE
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       7B011B1A17C4991ACB2609617E50F2E2479E8E59
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:53 +0000
ROA not before:           Mon 25 Oct 2021 08:26:53 +0000
ROA not after:            Mon 24 Oct 2022 08:31:53 +0000
asID:                     61317
IP address blocks:        181.41.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:01:1b:1a:17:c4:99:1a:cb:26:09:61:7e:50:f2:e2:47:9e:8e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:53 2021 GMT
            Not After : Oct 24 08:31:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:ce:ef:a4:35:d1:d3:c6:9e:8a:a7:ff:47:
                    5c:96:fd:26:14:6a:9c:96:ed:d1:05:d4:76:b8:a0:
                    87:d5:bd:6d:f4:33:96:ad:6a:18:bd:78:d9:7d:d9:
                    27:77:4b:3f:d4:21:c9:9c:cd:1d:46:08:59:b2:b5:
                    d2:ea:ae:53:f5:5e:41:fe:36:cd:4d:cb:d3:5e:3d:
                    7f:60:4d:0f:66:49:02:66:15:74:45:da:32:14:c0:
                    2a:53:d7:c5:cd:ab:04:34:57:8a:3a:0a:49:46:9c:
                    4f:a7:8d:16:c3:ec:ea:c6:5b:7a:60:7e:53:18:81:
                    bd:97:58:b0:95:e0:ad:27:c8:c1:c2:18:00:a3:11:
                    b5:56:56:1a:6d:6e:b7:86:a6:7c:0c:1a:a7:93:3e:
                    d5:a1:57:b3:18:44:ea:70:04:26:ee:99:0c:09:9d:
                    05:f5:ed:77:3f:ff:20:a2:1d:7e:26:dd:a7:4b:7e:
                    9a:be:42:75:dc:cf:3a:56:53:c2:14:55:fb:d0:a5:
                    0b:9a:a7:77:a5:12:21:9d:ef:40:80:49:d9:82:ee:
                    e2:46:f6:04:b7:51:8b:1a:51:cf:8f:2b:1c:cf:18:
                    6d:1b:bc:52:6b:16:fc:b2:69:bb:58:95:e7:4e:a5:
                    85:9f:57:b1:9d:5c:39:5c:96:1e:2e:6c:c8:98:6d:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:9A:5C:B3:D8:8F:F9:94:26:5E:25:C6:8C:47:F3:4E:50:0C:BE
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:f4:6e:ad:36:fe:ed:c8:40:8f:40:f2:50:01:de:fe:71:
         c6:b0:db:76:41:f2:fb:a3:8b:70:c4:9c:11:28:4f:7c:f4:3e:
         37:15:39:74:79:e1:2a:7a:30:64:a8:a0:53:61:98:1c:04:5c:
         c6:cf:a6:f7:75:90:f2:db:50:09:54:90:d5:a4:d6:8c:ee:cd:
         d4:7e:62:e5:3c:6d:ab:a4:f9:f0:0c:58:60:1b:df:83:74:e1:
         4a:db:fb:61:5a:12:6a:05:8b:ab:3e:41:15:72:5a:b9:86:70:
         9f:41:9a:0b:9d:d5:8e:68:fa:e1:02:05:24:1f:bd:9d:50:3b:
         98:91:55:60:7e:22:71:a2:40:2e:41:fa:4c:27:82:df:56:ac:
         06:1e:2b:9d:8d:3a:08:4d:44:7a:4b:4e:c4:7b:93:a8:e0:4f:
         6d:2f:bf:84:ac:ad:fa:97:26:e2:83:cf:54:b1:3d:58:3f:b8:
         24:c6:d0:b5:0e:a5:ba:b4:a5:a1:03:85:93:bd:59:e0:0e:fa:
         9b:09:76:c5:df:e3:35:fa:4b:52:6c:94:e5:61:50:b5:fa:91:
         2f:0c:5d:03:7f:6e:a9:26:e7:64:77:82:d1:42:22:b7:c4:4e:
         90:3e:b4:a9:74:09:41:54:25:e8:7b:1f:af:26:39:08:ac:1e:
         32:14:55:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org