Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          tz/Xhj3GnyzWETGLqflNsSeCvRWUnX2uqUqnjMiTf+o=
Subject key identifier:   54:5A:61:56:2E:B2:21:42:E6:DC:B8:E5:0B:5A:15:49:4D:A8:FE:52
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       74D47354F58857601D91114C798B0C01F4D4806E
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     43260
IP address blocks:        181.41.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d4:73:54:f5:88:57:60:1d:91:11:4c:79:8b:0c:01:f4:d4:80:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:22:1f:94:25:e0:e1:8d:99:8b:90:3d:8f:
                    e6:70:3e:58:a1:31:64:8a:cb:80:23:4e:ed:4e:ed:
                    7b:30:2d:91:8c:bd:50:ac:85:64:fd:9e:79:88:9c:
                    ed:08:43:06:c6:c0:42:1b:97:84:ad:a7:0c:ea:54:
                    dd:98:d1:6c:0b:36:a3:bc:23:fb:e2:54:5e:bd:22:
                    86:d0:43:bd:22:b9:e6:91:1a:e1:90:34:87:09:af:
                    b1:b2:00:a0:95:0b:e3:d3:27:f2:21:c0:1f:32:d3:
                    1e:e6:96:09:b2:ec:d6:2c:d2:0b:c1:86:7f:b2:86:
                    c3:a1:0b:ec:bc:c4:9a:59:f1:c8:0e:ee:73:03:d2:
                    2b:d1:fd:c1:28:c8:a8:ea:fd:c0:52:4b:6e:69:12:
                    39:fe:cf:e8:f4:ee:65:05:39:b3:c4:b0:eb:ca:70:
                    a8:09:cf:0e:f2:a5:bb:8b:00:03:56:35:1a:ec:27:
                    60:b8:ea:42:06:b8:95:a8:f4:15:8f:93:c0:8e:27:
                    8a:af:22:ea:2c:86:9d:8a:05:33:0d:b7:9b:f1:0f:
                    92:94:d1:34:84:1b:bd:b2:28:df:9d:30:94:1a:91:
                    8e:7f:38:c1:1e:34:fa:77:31:a5:55:98:f9:b7:1f:
                    17:81:55:a1:47:70:6d:3d:a4:42:d0:e8:33:bd:aa:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5A:61:56:2E:B2:21:42:E6:DC:B8:E5:0B:5A:15:49:4D:A8:FE:52
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:8a:8c:9b:c5:6d:41:68:f7:d9:ae:32:0e:5c:4e:a5:cf:7a:
         b1:b8:64:09:b2:bb:43:40:28:e2:92:95:b9:a7:f7:fa:0a:f0:
         89:3d:7d:73:71:d0:91:10:ad:63:1e:ef:a8:41:ad:63:3d:0b:
         71:26:71:d0:06:15:a7:44:8e:a3:59:a9:18:fa:5d:f2:66:ab:
         c6:29:08:72:7e:7d:7b:7a:fa:7b:8f:e7:e7:22:c3:46:2f:d0:
         48:4d:66:13:fb:b7:ba:a3:fe:ac:3d:38:ec:43:ae:77:b2:bf:
         43:72:41:0e:3e:e8:66:ca:26:11:5e:41:24:ea:66:97:fd:0b:
         e6:25:7e:70:53:65:8e:b1:49:bd:5b:81:b3:7e:20:a2:a5:31:
         a5:bb:43:80:d6:e4:22:0b:b7:0c:45:ce:e3:b3:ba:67:02:36:
         5c:12:e2:36:ea:2b:36:65:0a:20:6c:4a:00:73:f4:0a:a2:0f:
         52:02:5d:c3:0c:71:62:b5:e7:8c:b2:7d:86:14:7b:0d:65:39:
         c8:79:5d:7e:97:6e:1f:92:72:9d:d4:55:24:a9:ce:a2:00:bd:
         48:8c:88:f2:f5:d6:7c:c1:13:36:df:aa:32:0a:aa:bc:a7:56:
         41:56:eb:fd:7d:85:c0:ce:27:d9:f6:09:63:28:72:33:c6:d3:
         60:4d:d9:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:25 2025 by rpki-client