Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33362e302f32322d3232203d3e203631333137.roa
File:                     352e34352e33362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          3plGC4LPLWHKADw3deR4YW1MEOg3VCQH0p6pb0Fsy30=
Subject key identifier:   1E:53:FC:ED:1D:E7:99:19:12:F6:46:98:38:D0:BC:A7:97:B4:08:88
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       42CAE5A61C301A0432CBAA5FA69775A3B070B570
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33362e302f32322d3232203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:15 +0000
ROA not before:           Mon 25 Oct 2021 08:26:15 +0000
ROA not after:            Mon 24 Oct 2022 08:31:15 +0000
asID:                     61317
IP address blocks:        5.45.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ca:e5:a6:1c:30:1a:04:32:cb:aa:5f:a6:97:75:a3:b0:70:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:15 2021 GMT
            Not After : Oct 24 08:31:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:76:69:8d:93:9f:a7:24:cb:5c:05:38:dd:
                    2b:70:5b:8a:ac:51:6b:e3:2d:b9:ec:ff:f0:3d:8f:
                    e2:d3:4d:8d:2f:2a:10:ca:a3:55:43:de:43:34:0a:
                    35:36:56:fe:0d:89:37:a2:77:ed:fc:d3:70:e4:99:
                    b1:b1:8d:eb:48:43:88:69:60:33:19:99:49:38:f0:
                    4e:0e:eb:6c:8c:55:a0:e1:ec:af:19:d5:fe:fe:b1:
                    99:08:38:6e:bc:93:1c:7a:41:64:02:17:f5:0a:d2:
                    da:a6:5b:4d:8f:1e:be:b8:0d:92:2c:59:96:0d:e0:
                    80:5d:d4:d0:90:de:c9:b3:8b:67:9b:21:88:ab:98:
                    ec:3f:d6:76:2c:f3:43:d1:d0:76:d6:6e:1f:7e:12:
                    c9:76:41:11:3b:06:89:e8:1e:77:9a:40:b8:61:0a:
                    87:11:33:c5:e9:10:03:20:8d:e8:db:65:79:52:e6:
                    f3:45:64:3c:58:ba:11:66:63:2b:bd:f1:e9:ea:31:
                    29:d3:b0:fd:95:92:bb:f7:b4:90:ff:a2:91:37:70:
                    a2:ab:30:5e:24:5e:63:3d:8a:fb:b9:be:b2:b0:73:
                    02:11:e4:16:e4:7d:7c:ea:47:37:ce:9e:12:ae:09:
                    5d:42:10:04:a5:55:5e:18:dd:e3:5a:20:0b:15:1c:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:FC:ED:1D:E7:99:19:12:F6:46:98:38:D0:BC:A7:97:B4:08:88
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:86:c9:d1:64:74:0e:61:32:94:e7:41:7a:3d:78:9e:8e:
         bf:98:dd:51:2a:ca:b8:6e:a6:e8:20:8e:fd:a1:75:67:87:b2:
         b3:04:cc:0f:c5:77:20:56:98:04:f5:db:fb:d1:f2:cd:1b:69:
         68:52:46:14:aa:db:f5:ff:87:7a:42:63:60:c8:32:de:2a:79:
         41:66:c4:5b:87:11:37:51:19:24:b3:11:bf:35:24:67:d7:9a:
         bc:6f:84:94:59:04:10:90:d9:65:af:5d:56:85:fb:db:93:6a:
         c2:27:7f:58:29:03:45:45:6f:8d:ee:71:cd:8f:d7:e9:01:e1:
         72:aa:f6:9f:b7:47:63:a4:b3:45:6f:82:e0:32:e3:ac:2d:bc:
         ea:d0:ee:4a:14:bb:0e:78:b6:39:0f:b0:d6:f4:7c:6d:f0:9e:
         b2:94:33:b8:ff:07:b6:6a:41:bf:0f:82:b6:16:f6:c4:17:39:
         f7:2d:fb:72:cc:ec:b1:1b:c9:27:63:95:33:2f:ae:59:59:0a:
         aa:b1:f9:c2:9c:d5:e8:28:ae:8f:29:28:a1:b8:84:38:6f:4e:
         ce:99:42:4a:7b:db:da:81:c0:e4:a3:ab:92:95:28:8b:9a:49:
         35:ec:80:1a:88:3d:98:da:fb:90:02:05:72:ff:de:f8:15:c4:
         19:c1:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org