Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          qJ1nUitpC1SdwDVOHoEySai/qgY1rM/EgACClEQ+Oxk=
Subject key identifier:   3F:48:12:F1:06:2A:2E:C7:B3:D6:BE:32:6D:3D:CA:5C:3C:07:C5:C0
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       68D44C4934FBECF4439202F8CB3EC5D2D55EAA01
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:09 +0000
ROA not before:           Mon 25 Oct 2021 08:27:09 +0000
ROA not after:            Mon 24 Oct 2022 08:32:09 +0000
asID:                     61317
IP address blocks:        181.41.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:4c:49:34:fb:ec:f4:43:92:02:f8:cb:3e:c5:d2:d5:5e:aa:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:09 2021 GMT
            Not After : Oct 24 08:32:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:fa:22:a2:ce:ef:0b:61:a1:97:29:fb:5b:
                    a2:ed:dd:fe:07:4a:ea:f8:e1:47:92:9c:29:96:53:
                    6c:dd:fb:da:50:bc:95:80:3a:02:b0:91:59:6f:b9:
                    ef:09:62:52:bd:3b:29:78:94:33:f6:3f:db:40:de:
                    62:3a:c7:79:1d:d0:3a:49:d6:5a:c2:51:b2:b7:7b:
                    9a:96:4d:1a:f7:db:23:12:ca:9d:12:a3:69:de:8a:
                    de:71:d4:c8:75:14:90:f8:df:88:f0:ea:e5:0a:b8:
                    3f:08:f7:fb:0a:c9:f2:0e:55:2b:cf:72:bb:ed:3d:
                    8b:35:06:5a:e0:8b:69:e6:56:9f:58:56:80:d8:f9:
                    ce:0b:84:2d:8b:25:d1:b2:47:dc:8c:bf:67:b6:b6:
                    6e:a0:ff:a4:5d:52:5f:5c:1b:93:20:63:98:a2:fd:
                    e1:76:7f:32:07:3d:e7:1e:e4:ef:79:43:a5:fc:d6:
                    d0:2c:1e:37:d8:a0:99:b2:db:9c:0c:46:b2:8a:f5:
                    63:18:92:2f:91:8f:b5:4a:e5:2b:b3:25:c2:a2:03:
                    4b:23:12:06:6d:7b:d4:5e:4f:f0:9a:ea:08:93:30:
                    ce:45:31:2f:e8:ad:7b:86:92:d1:35:64:4d:d1:07:
                    f3:a1:96:27:93:1e:ea:ba:b4:75:7f:77:64:2e:8d:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:12:F1:06:2A:2E:C7:B3:D6:BE:32:6D:3D:CA:5C:3C:07:C5:C0
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:8e:90:b8:ab:70:ce:0e:6c:d3:57:4c:f6:93:8b:ff:28:
         35:25:e7:70:73:3a:de:28:91:55:18:d9:2b:eb:28:14:4a:b3:
         d6:7b:3e:6d:1d:d9:a5:e3:31:1a:68:87:c4:6e:13:79:b9:19:
         15:de:2a:ac:fd:02:23:aa:8b:ef:31:4f:45:c5:8d:93:b7:2f:
         41:ce:fb:67:b6:53:21:9c:de:a5:99:18:72:73:56:ba:b9:40:
         1f:c8:64:22:35:92:94:ff:6d:27:5d:73:c2:50:11:c0:dd:65:
         93:68:55:2a:bf:1f:7d:01:20:43:d8:57:74:39:74:c5:a3:c1:
         d0:14:31:dd:85:5e:34:b7:93:2d:2c:75:12:a7:ed:fc:ca:bb:
         18:18:d4:20:bb:4c:29:10:98:81:83:bf:da:af:dd:2c:4f:09:
         5c:8f:fd:88:9e:32:ff:d3:65:2f:54:1b:20:e0:94:e7:0e:94:
         e5:a7:c3:cb:05:3f:bd:db:37:7b:6e:06:75:77:21:0a:71:a6:
         a8:4f:63:90:2b:f7:2d:4c:94:95:f1:52:d3:8e:be:e2:b8:06:
         f0:7d:87:73:17:4a:ff:e7:ed:f5:05:56:4a:db:3a:6b:d3:1a:
         6a:d4:e2:36:1e:e1:59:12:1f:20:71:af:2c:53:bd:d7:74:ab:
         cb:ec:75:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org