Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZygjSPZj6ffMGGGjbGgStkXEFX+G47udD96FOvD6+2c=
Subject key identifier:   FB:B9:80:D9:43:1F:75:26:34:20:1B:B2:32:F2:5E:5B:C9:5D:B3:0E
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       77AF4AB5E524022031D142F99A3A5D6B50F7DD7D
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:48 +0000
ROA not before:           Mon 25 Oct 2021 08:26:48 +0000
ROA not after:            Mon 24 Oct 2022 08:31:48 +0000
asID:                     61317
IP address blocks:        181.41.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:af:4a:b5:e5:24:02:20:31:d1:42:f9:9a:3a:5d:6b:50:f7:dd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:48 2021 GMT
            Not After : Oct 24 08:31:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:0f:55:de:a5:39:6e:41:1e:64:dc:a6:66:
                    61:aa:37:81:e2:5b:ca:93:bd:83:70:8b:60:32:28:
                    d8:c4:08:60:a8:fa:48:b1:b0:ee:f1:71:57:20:67:
                    a5:1a:a0:78:0c:5e:3e:39:5f:dc:ea:2c:69:4f:4f:
                    59:69:be:50:60:39:98:44:08:48:9d:7d:c2:23:86:
                    41:8a:5f:76:0c:f3:26:2d:bf:69:ba:1c:27:57:c3:
                    f2:ec:86:32:39:e5:49:09:7a:be:6a:76:48:08:9b:
                    37:6f:b7:9c:40:5e:60:39:16:43:ec:00:09:c7:e4:
                    15:81:26:fd:33:79:d7:2a:c6:85:76:61:f1:cb:a0:
                    99:34:c5:fe:47:e3:61:dd:3a:99:fc:6c:30:35:d2:
                    6b:71:fb:da:14:81:93:47:51:89:6f:35:71:b9:16:
                    ac:1b:50:61:a6:f0:69:29:32:4f:fe:4c:bd:6a:dc:
                    34:d7:7d:ee:ba:34:26:27:81:58:85:51:a3:5b:06:
                    03:34:6d:fc:36:a9:71:f7:48:67:53:de:d3:86:f0:
                    09:f1:a9:02:ff:00:b9:a5:85:74:8a:e9:95:4e:66:
                    d2:3b:c2:a2:dd:30:bb:da:9a:bc:5b:f3:10:04:ad:
                    f3:99:fd:d1:ff:bd:48:02:93:8a:a4:88:1b:d0:ee:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:80:D9:43:1F:75:26:34:20:1B:B2:32:F2:5E:5B:C9:5D:B3:0E
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3139372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:d9:b8:73:a1:0d:d8:9d:09:df:59:38:6b:8e:1b:89:a9:
         49:c4:6f:7a:be:26:a6:b7:e0:ae:f3:c5:5b:5d:e6:d8:29:03:
         e5:fc:8d:ce:4a:06:27:25:cf:62:59:6e:da:88:77:9f:b2:0c:
         4c:c4:43:d9:86:a1:77:34:8a:1c:cd:ea:f7:13:9e:8a:da:77:
         fc:8b:8a:6f:fc:af:3e:de:e0:5f:c0:4b:64:f3:81:3b:fe:9d:
         9c:50:6f:3e:dd:d6:55:b8:18:bc:6e:87:de:22:67:ac:fd:36:
         78:ec:f1:83:41:bd:60:12:5b:36:55:23:a1:74:a8:2f:36:ae:
         62:1c:8f:0a:53:a6:45:9c:4f:4d:89:82:d0:05:88:17:06:17:
         d5:2a:24:1a:d1:5a:52:a0:9a:d3:11:db:e4:37:14:50:65:d7:
         6f:a7:c5:89:c8:fb:60:21:25:3b:9c:aa:62:91:22:6a:ef:ae:
         45:37:16:43:35:bb:1c:80:df:42:ce:bf:ab:b9:bd:70:51:66:
         01:d3:d2:74:2d:90:8c:b3:fa:52:65:51:52:65:cc:bc:4f:c1:
         8b:07:8f:87:dd:10:3a:5e:39:30:a3:ae:8e:1a:f0:af:1d:09:
         7b:d2:00:aa:22:e6:36:e4:9d:35:9f:d6:fa:24:96:f5:42:29:
         39:74:a8:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org