Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier:          OsPCaDrnmI4vkziKZpF3vGzQJSpemMOUPnphv+kzG5k=
Subject key identifier:   46:E8:8C:9C:F5:09:A8:DB:D4:29:D7:4C:6F:26:52:5C:A1:8E:EA:B4
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       115843E02381BE6C3E175FDD40E444603B5A2D1D
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa
Signing time:             Mon 25 Oct 2021 08:31:11 +0000
ROA not before:           Mon 25 Oct 2021 08:26:11 +0000
ROA not after:            Mon 24 Oct 2022 08:31:11 +0000
asID:                     60458
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:58:43:e0:23:81:be:6c:3e:17:5f:dd:40:e4:44:60:3b:5a:2d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:11 2021 GMT
            Not After : Oct 24 08:31:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:1a:65:70:7b:79:b3:f6:d5:ff:63:10:0e:
                    7d:37:c6:f3:e0:44:69:79:d9:32:b3:a9:c0:9f:9a:
                    9c:04:8d:d3:a7:76:9b:1d:a3:72:71:94:73:8a:5c:
                    df:f6:14:33:72:89:0d:2a:95:46:78:05:ec:62:b8:
                    cf:53:de:58:2f:95:6f:60:37:e3:8f:be:d2:6d:c2:
                    d5:6d:62:c7:3c:8c:83:fd:5e:b3:24:f4:d4:90:ab:
                    e0:ef:7b:82:31:c2:72:ff:4c:5b:3b:ab:cf:46:e7:
                    83:6e:32:cd:59:13:97:2e:a1:a8:09:54:6d:c7:eb:
                    44:85:ce:e2:7c:bd:03:24:60:d0:d0:4b:f4:19:40:
                    fa:60:ab:c8:de:02:f1:3d:8e:22:22:34:c9:23:29:
                    f3:49:db:b5:f3:1e:24:97:1f:c8:a5:43:88:d8:15:
                    5f:db:1b:5d:41:18:46:ba:08:51:07:d3:6d:d9:a2:
                    23:27:bd:d3:c1:dd:75:89:93:d1:81:4e:26:38:18:
                    e0:e8:58:5d:b4:ce:d7:d2:2c:65:17:eb:d1:d6:54:
                    2e:5d:af:19:11:ac:11:3d:84:f6:51:7a:16:1a:e4:
                    c6:37:3e:b7:c4:40:39:15:2c:ff:cc:4e:79:00:85:
                    dc:80:92:a3:f1:51:b9:ca:dc:dc:a6:0b:a9:96:cb:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:8C:9C:F5:09:A8:DB:D4:29:D7:4C:6F:26:52:5C:A1:8E:EA:B4
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:f6:de:2a:06:e6:bd:59:18:08:bc:db:53:75:48:92:46:
         94:22:d3:69:a7:09:53:41:68:49:4f:76:08:24:f2:08:f7:8c:
         e7:3a:3e:d1:9e:ea:93:ec:dd:4a:03:12:9b:43:1e:6d:2e:ca:
         6a:40:65:81:9b:7d:b0:11:62:2e:c2:62:5c:c4:88:d0:b1:ac:
         ff:4d:98:78:b6:64:e9:1e:6f:f3:ed:36:16:d1:6f:8d:42:ee:
         e9:e5:0b:91:f5:20:c9:aa:39:78:fa:b9:7d:c1:2d:7b:3b:91:
         69:3c:fc:d6:f6:a1:3e:bb:0d:53:bf:97:67:e0:b6:ae:e1:dc:
         bf:39:8a:04:79:7f:f0:b3:4e:d5:e0:64:a7:36:53:72:24:5e:
         ff:ba:d7:26:6f:11:f3:94:12:ab:bd:1a:e0:3e:e3:ca:c0:0c:
         56:da:e4:c0:58:1b:ef:ef:a3:1b:5e:ad:68:88:35:f7:80:ca:
         72:dd:4d:34:ec:8b:96:f0:e6:2d:e0:25:c1:86:1e:68:ea:90:
         fc:d0:75:77:a6:e7:1e:34:60:c2:17:89:88:cd:11:65:f8:44:
         7a:05:9c:ca:22:6d:a6:42:9c:1a:d7:43:0d:71:96:92:8b:80:
         f0:76:c6:af:7b:54:93:9d:95:10:6f:66:2b:9a:76:0f:95:93:
         dc:09:95:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org