Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          s7IGwDf1taEtStiwv3EmkoIFVVZRSm0no78hlwYobzU=
Subject key identifier:   42:EA:1F:77:ED:ED:E5:2E:02:D7:B8:F5:06:B7:A5:89:01:3B:F5:C1
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       519E2D56D750498F4416E75ED89B588079CB6980
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e20313734.roa
Signing time:             Mon 25 Oct 2021 08:30:53 +0000
ROA not before:           Mon 25 Oct 2021 08:25:53 +0000
ROA not after:            Mon 24 Oct 2022 08:30:53 +0000
asID:                     174
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:2d:56:d7:50:49:8f:44:16:e7:5e:d8:9b:58:80:79:cb:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:25:53 2021 GMT
            Not After : Oct 24 08:30:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:44:2f:31:a0:46:b7:7c:e1:e6:5c:19:a7:
                    5b:b6:1f:8c:38:eb:4b:4f:f6:e3:da:42:79:6c:ac:
                    93:40:db:7f:ca:7d:21:e2:72:0a:ed:98:1d:ea:a3:
                    a7:d3:96:2e:76:64:62:92:ad:2f:61:5b:7f:6d:74:
                    35:04:4f:bf:a1:f8:97:ed:48:f5:f3:ef:22:61:11:
                    55:ed:9c:36:a1:d6:97:c6:9f:71:2d:23:a0:9f:6f:
                    6e:6b:05:4b:72:91:c5:71:7d:fb:70:d0:82:3d:6a:
                    cd:7f:8d:36:6c:e0:7f:2f:66:cd:c9:95:4f:d0:26:
                    7c:70:e6:d8:4d:b9:43:0c:19:fd:17:58:21:51:16:
                    96:23:9c:0c:eb:96:87:5a:52:52:dc:f3:91:6e:da:
                    f0:13:21:bf:b3:7b:df:1c:86:64:fc:f4:74:10:cb:
                    45:b6:54:a7:84:7f:d1:e3:98:1b:93:2e:08:06:86:
                    5e:16:ff:d8:67:44:e8:03:c4:ba:1b:2d:b8:8d:88:
                    26:59:65:66:be:ee:45:09:52:8d:65:ae:5a:10:9d:
                    a2:2c:d0:a2:ad:11:b7:89:60:7b:94:04:bc:8f:ce:
                    84:ba:90:84:22:c9:bd:a0:8c:bd:73:b1:2f:ed:51:
                    cd:2c:ce:cc:90:cd:90:b2:c6:bf:08:19:e0:a2:3f:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:1F:77:ED:ED:E5:2E:02:D7:B8:F5:06:B7:A5:89:01:3B:F5:C1
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:93:53:b8:b3:f3:15:5d:ad:65:22:2c:35:3a:fc:8a:5e:
         b7:99:2f:a3:14:bf:7a:f1:3a:a1:98:cc:88:9e:1f:6f:91:43:
         9b:17:32:89:93:af:4e:eb:c8:70:74:5a:c2:19:90:09:ee:7b:
         82:49:08:20:c5:02:63:5a:30:e7:65:90:df:2c:1b:85:b5:04:
         4f:ba:17:a8:39:eb:3b:6d:57:69:03:cf:a6:70:ff:5c:53:03:
         27:71:64:18:21:76:68:11:e5:1b:a2:a6:76:0a:7e:35:5a:58:
         63:32:26:c2:ea:7c:1e:13:34:21:01:e6:21:63:f7:c5:b2:3d:
         20:5c:ee:32:62:96:2a:e6:33:12:10:dd:20:e5:61:31:4c:92:
         5f:92:a3:5b:fb:8e:fc:14:cd:ac:4a:80:14:84:5d:95:12:cc:
         43:80:b4:d1:b0:08:24:42:1a:c7:0c:97:a7:fa:60:47:f1:cb:
         09:c0:0c:a1:66:28:a6:d4:55:9b:a6:ba:36:95:8f:82:a1:48:
         e2:43:c3:33:ab:f3:b2:a9:aa:44:27:d3:c6:ed:0c:dc:01:3b:
         9a:10:6e:18:ff:f0:8e:ff:6e:17:cf:be:ec:16:5a:44:37:47:
         bb:3e:0d:ad:05:9a:f6:e4:9e:5c:a7:54:6c:ac:2d:32:19:dd:
         af:ee:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org