Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230392e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0tHvU6ypd+RAyiPTJUMORe2AHlBsxdnAjJG3xNsgIHk=
Subject key identifier:   12:3D:21:D6:DA:E3:7E:D7:74:75:F4:FD:70:0D:69:D6:B9:AB:86:0C
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       34B6D1DE11718ED7940E06D8D40D54EA3D3618C5
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230392e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:12 +0000
ROA not before:           Mon 25 Oct 2021 08:27:12 +0000
ROA not after:            Mon 24 Oct 2022 08:32:12 +0000
asID:                     61317
IP address blocks:        181.41.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b6:d1:de:11:71:8e:d7:94:0e:06:d8:d4:0d:54:ea:3d:36:18:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:12 2021 GMT
            Not After : Oct 24 08:32:12 2022 GMT
        Subject: CN=3082010A0282010100E7E3728CBE8C0A5B50EC3975F7EF4C79BB726BAF92665C62EA1F6B00847E40F539BDDF805A1D269D65E530E9072F8D6B5BB278C095E90BDF629112CD8F9D76FED1996826A121D21052E324CC5BB337FD2E97F29958ACA385A19D9F4335F86A12EEBE0CFCEE38B5411333B5EA5B745A0F83285BC9109641ED2CD25F6E8B2F3038C080A107F6B51D82BB51187191444D2195CBB267B5D1BBF436E83F4D2195A3A87ADFD3CE76BBCF92565912C612CF9A192769119C77DFA321FC47881AB2D3D45E6620BF342B5F48AD9B8C6A09C41562EB2FC3313AF82BFD500E9D13A43F6F7ADE64811DF1CCE0461F7BD503544B526DA1D031D2B5A7621FE9470986D0F02DBA7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:72:8c:be:8c:0a:5b:50:ec:39:75:f7:ef:
                    4c:79:bb:72:6b:af:92:66:5c:62:ea:1f:6b:00:84:
                    7e:40:f5:39:bd:df:80:5a:1d:26:9d:65:e5:30:e9:
                    07:2f:8d:6b:5b:b2:78:c0:95:e9:0b:df:62:91:12:
                    cd:8f:9d:76:fe:d1:99:68:26:a1:21:d2:10:52:e3:
                    24:cc:5b:b3:37:fd:2e:97:f2:99:58:ac:a3:85:a1:
                    9d:9f:43:35:f8:6a:12:ee:be:0c:fc:ee:38:b5:41:
                    13:33:b5:ea:5b:74:5a:0f:83:28:5b:c9:10:96:41:
                    ed:2c:d2:5f:6e:8b:2f:30:38:c0:80:a1:07:f6:b5:
                    1d:82:bb:51:18:71:91:44:4d:21:95:cb:b2:67:b5:
                    d1:bb:f4:36:e8:3f:4d:21:95:a3:a8:7a:df:d3:ce:
                    76:bb:cf:92:56:59:12:c6:12:cf:9a:19:27:69:11:
                    9c:77:df:a3:21:fc:47:88:1a:b2:d3:d4:5e:66:20:
                    bf:34:2b:5f:48:ad:9b:8c:6a:09:c4:15:62:eb:2f:
                    c3:31:3a:f8:2b:fd:50:0e:9d:13:a4:3f:6f:7a:de:
                    64:81:1d:f1:cc:e0:46:1f:7b:d5:03:54:4b:52:6d:
                    a1:d0:31:d2:b5:a7:62:1f:e9:47:09:86:d0:f0:2d:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:21:D6:DA:E3:7E:D7:74:75:F4:FD:70:0D:69:D6:B9:AB:86:0C
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:32:bf:d8:0f:1f:2b:3b:b4:a2:56:d7:21:37:ac:2a:2f:
         53:a1:de:2d:a4:1a:87:e8:2a:a7:03:06:2f:c7:0f:9b:e6:1f:
         e9:98:20:fc:ee:f7:c5:0d:c9:67:37:4a:a9:bc:3d:1a:09:38:
         ca:97:7d:bc:2e:66:66:75:5d:aa:31:1c:0e:9e:b0:b9:fd:b6:
         ac:c4:b0:5e:b4:72:4e:71:ff:3e:24:d8:48:6b:c8:d2:da:9c:
         6b:0b:47:ce:e0:8a:01:9e:8a:ac:96:7b:ee:37:7d:cc:19:d6:
         23:4a:6e:c3:89:3c:ce:18:be:fc:3c:d3:db:80:1b:6f:2d:98:
         50:c8:bd:a0:ba:a7:7b:5e:6f:38:7c:95:24:80:43:c7:e1:66:
         d2:8f:c6:99:87:35:8c:c6:5f:20:ce:22:90:d3:ac:2a:67:cc:
         52:0b:d0:20:cd:3a:c6:c2:56:36:60:a4:fc:45:3b:31:d2:e1:
         82:bd:85:42:a8:91:46:54:fc:df:dd:84:d2:21:88:18:9c:d0:
         86:aa:78:8c:da:4e:75:55:63:99:02:78:9d:7c:90:3a:99:6c:
         b1:6b:20:98:80:2a:ec:e0:50:6d:5c:f8:78:36:22:33:9c:15:
         f1:e8:60:5b:cb:78:f8:94:33:41:24:05:3a:c8:c7:d4:da:bb:
         e9:af:a5:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org