Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          i9amgaUCqR2bydeAUGRFIy7mBL9aWTJdGEZBEjUMI6A=
Subject key identifier:   05:C4:9C:4C:3F:79:6F:EB:76:70:22:4C:BC:AA:71:A3:19:B6:0A:E3
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       7780DB71FDF2402D11A26D3EA37577EC72F083F0
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:58 +0000
ROA not before:           Mon 25 Oct 2021 08:26:58 +0000
ROA not after:            Mon 24 Oct 2022 08:31:58 +0000
asID:                     61317
IP address blocks:        181.41.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:db:71:fd:f2:40:2d:11:a2:6d:3e:a3:75:77:ec:72:f0:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:58 2021 GMT
            Not After : Oct 24 08:31:58 2022 GMT
        Subject: CN=3082010A02820101009F83C5D5FA5025E6D41A148F140FCCA1BFA26790D1FA5F80EED97EB5343FEBAB362EB159C21880A4C787A2A8F387F14B4E7A3A10B5C751B39913B59936C2BDC316602D2B04EC2859E299B2EB41B962F5D0E2C003F3815361A999FC9E4DC04D26D0FC7E84469ABED8703837F751B197701AF049EF50FE367DC824D0B4A4768AA1268821D549E955B410736587DBBB1BE0BC90D3C790DFD1ADD9AF5DC45B5B12747FCF20537237A362E679748B592FEF06B705E0C427B585E7A6D15513C95D7FCB8980DC24F2090800BCFBB566D58B15BFF11C80E2A5AF4CF1DE6EC9FAEB75A69E8149F6C8870DB266C9052E95857D43940DBD4415F3A8D4D988A1F6EA27DB4F5B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:c5:d5:fa:50:25:e6:d4:1a:14:8f:14:0f:
                    cc:a1:bf:a2:67:90:d1:fa:5f:80:ee:d9:7e:b5:34:
                    3f:eb:ab:36:2e:b1:59:c2:18:80:a4:c7:87:a2:a8:
                    f3:87:f1:4b:4e:7a:3a:10:b5:c7:51:b3:99:13:b5:
                    99:36:c2:bd:c3:16:60:2d:2b:04:ec:28:59:e2:99:
                    b2:eb:41:b9:62:f5:d0:e2:c0:03:f3:81:53:61:a9:
                    99:fc:9e:4d:c0:4d:26:d0:fc:7e:84:46:9a:be:d8:
                    70:38:37:f7:51:b1:97:70:1a:f0:49:ef:50:fe:36:
                    7d:c8:24:d0:b4:a4:76:8a:a1:26:88:21:d5:49:e9:
                    55:b4:10:73:65:87:db:bb:1b:e0:bc:90:d3:c7:90:
                    df:d1:ad:d9:af:5d:c4:5b:5b:12:74:7f:cf:20:53:
                    72:37:a3:62:e6:79:74:8b:59:2f:ef:06:b7:05:e0:
                    c4:27:b5:85:e7:a6:d1:55:13:c9:5d:7f:cb:89:80:
                    dc:24:f2:09:08:00:bc:fb:b5:66:d5:8b:15:bf:f1:
                    1c:80:e2:a5:af:4c:f1:de:6e:c9:fa:eb:75:a6:9e:
                    81:49:f6:c8:87:0d:b2:66:c9:05:2e:95:85:7d:43:
                    94:0d:bd:44:15:f3:a8:d4:d9:88:a1:f6:ea:27:db:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:9C:4C:3F:79:6F:EB:76:70:22:4C:BC:AA:71:A3:19:B6:0A:E3
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:00:26:9f:87:72:db:8f:26:ac:0d:4e:ab:18:7a:99:08:
         e7:bd:c4:91:79:21:da:bd:6c:84:41:bb:9f:e8:96:6b:12:89:
         bb:fa:2c:c4:96:89:77:fa:f9:f3:19:ad:b8:b6:ea:a4:88:88:
         bd:56:78:a4:11:88:27:fd:75:9d:e5:82:02:9e:c2:47:d9:4c:
         66:8e:f1:62:c9:6e:a1:80:50:2a:14:ac:97:56:d2:ea:63:1d:
         46:f9:1a:75:59:c5:86:c6:b7:71:b7:4f:8b:7c:5e:5f:9b:07:
         c9:01:4e:ee:a6:0b:e0:c9:26:d5:3f:49:7f:ab:f9:aa:55:e2:
         fa:4a:5d:0c:4f:6d:10:df:97:44:1b:25:b8:df:48:4b:e2:bb:
         f1:1c:34:ab:94:b8:4e:d5:32:bc:b9:7f:38:b7:55:6c:2c:dc:
         74:fb:64:eb:86:ca:62:3c:f5:ce:b9:23:48:95:c6:05:a3:fd:
         74:27:45:cd:a9:49:83:10:91:3f:0f:2b:44:84:f2:19:fc:4c:
         63:ba:05:53:7d:11:91:89:4f:d0:50:db:cd:31:96:f6:73:38:
         a5:34:57:cd:a2:68:66:bd:0c:e6:d9:e1:95:85:a2:32:0c:6b:
         de:4b:6d:41:57:4d:12:d0:73:19:8a:53:1b:22:96:53:f3:0c:
         84:69:e8:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org