Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          nMLja/P/YjAGzwqTKgFavidcpzArdLTdctr99t4OELE=
Subject key identifier:   1A:58:04:85:70:E5:FE:1D:9F:7D:6B:98:5D:05:15:16:7B:E7:0B:91
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       3BA5C2A12F92B1052F332F88FB27C88ADD386245
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
Signing time:             Mon 03 Jan 2022 07:18:32 +0000
ROA not before:           Mon 03 Jan 2022 07:13:32 +0000
ROA not after:            Mon 02 Jan 2023 07:18:32 +0000
asID:                     19437
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a5:c2:a1:2f:92:b1:05:2f:33:2f:88:fb:27:c8:8a:dd:38:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Jan  3 07:13:32 2022 GMT
            Not After : Jan  2 07:18:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:1e:cd:fa:95:c0:10:3b:5f:2f:49:28:31:
                    64:e7:48:91:0e:4f:ae:a6:48:8f:a0:df:0d:ff:1e:
                    e9:94:4a:96:ff:b5:f2:58:1d:ac:67:c1:a9:04:ee:
                    17:c2:17:74:fc:24:dd:ec:42:8a:87:fa:38:e2:e6:
                    29:b4:14:8d:fb:3c:d5:68:03:44:02:77:67:25:cc:
                    ba:67:74:f9:88:b7:47:ed:af:53:59:a0:85:d4:ac:
                    5b:31:e7:e5:bf:97:e8:6b:77:01:f9:d9:f3:ec:28:
                    18:30:ea:b6:5d:e4:cd:68:d7:e9:52:96:c9:e2:39:
                    72:d8:17:a0:04:01:97:f3:76:a3:91:e3:29:0b:83:
                    1c:76:7d:00:64:48:a4:c4:b6:ff:bb:72:f8:b1:1e:
                    ce:d3:bb:2b:ba:04:43:2e:8e:e7:c5:2e:d6:68:fc:
                    4c:18:a4:ba:e4:c7:71:b5:79:3d:7a:87:3d:77:13:
                    43:ea:8a:ba:21:01:b7:1e:3f:37:25:2c:38:4b:da:
                    fa:e8:21:7a:f9:64:81:da:58:42:9b:09:33:51:61:
                    5a:24:0b:47:92:bc:d6:df:70:d3:bf:ee:28:5e:62:
                    ba:f8:99:30:93:f4:e1:e8:06:46:85:fe:7b:d7:5e:
                    5e:1a:21:0b:3e:10:d9:6f:32:61:f7:62:69:d0:44:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:04:85:70:E5:FE:1D:9F:7D:6B:98:5D:05:15:16:7B:E7:0B:91
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:ca:02:4c:4b:80:d3:a1:46:c1:74:a0:67:a9:7d:82:19:
         eb:03:f8:af:01:d1:35:29:6b:67:c1:c9:68:ad:2d:a7:03:65:
         1a:ec:3b:7d:03:26:43:c1:fc:c5:90:be:d9:e0:65:a9:b1:cd:
         fe:e6:8d:dc:a0:33:7b:1e:69:54:c9:75:b0:dd:c5:17:d6:00:
         23:76:6a:3a:10:5b:fc:16:c6:00:21:3a:36:54:4c:61:48:5e:
         5a:74:fb:13:3b:0e:d7:af:6c:57:5f:80:71:6d:05:d1:3e:fe:
         b5:3e:ca:62:d1:88:6d:a9:85:c0:ab:a5:4e:d7:ed:3a:14:01:
         fb:c3:3b:cb:eb:69:cb:cc:69:a4:43:77:5b:3b:23:5f:b7:9b:
         8c:80:63:4a:0c:5b:8a:31:39:04:8d:68:a8:29:ac:ef:f6:bf:
         b3:b3:39:2b:70:e3:b0:97:80:d1:32:38:3a:e8:59:d1:6a:0f:
         17:cd:36:ab:5b:f8:25:68:dc:12:5b:ca:be:1f:ab:eb:bc:8f:
         ec:91:aa:f6:91:ed:89:f9:bb:03:58:9d:22:25:43:e3:d1:dd:
         57:55:1f:5a:15:2b:4d:69:bf:91:b2:4b:cf:9c:ff:ee:33:43:
         99:08:b2:d8:7b:18:69:44:4b:4f:ad:3c:16:f0:5c:e6:57:4c:
         dd:b5:30:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org