Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ivevtrtojbUsSxBtgwCUA97K7CwNgd4HoKWHMTpXCE8=
Subject key identifier:   03:9B:2B:26:14:FE:52:74:4A:32:02:2A:26:64:39:36:6A:CD:29:CE
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       1932C219DDF9FF1782C9240BE8D24EBD31158D69
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:32:c2:19:dd:f9:ff:17:82:c9:24:0b:e8:d2:4e:bd:31:15:8d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:b9:2c:f8:f8:1f:b0:4f:19:66:c3:38:ac:
                    3b:58:58:20:0c:ac:5d:e7:9e:87:25:d1:48:da:59:
                    f6:f7:aa:7f:b2:bc:37:4a:b7:42:e3:d9:17:7d:7a:
                    e0:1b:34:a6:64:18:16:bc:f5:01:b5:b9:1e:48:77:
                    d2:57:fa:7e:90:03:7a:0f:09:43:4a:3e:45:24:0e:
                    78:8c:00:23:75:e2:75:8e:30:c8:85:fd:79:fd:e5:
                    1c:0e:0a:b5:68:76:d5:3a:51:57:e2:b8:a4:8a:c7:
                    25:f8:b0:fc:94:71:66:7d:7a:7f:0f:b9:9c:e5:1f:
                    49:21:f9:67:80:e5:ae:90:0d:8e:94:e3:9d:8d:45:
                    fc:1b:35:22:87:71:89:b5:dd:22:14:9b:10:58:c0:
                    42:6c:50:11:32:bc:e5:39:cf:13:37:9f:9a:7e:d3:
                    bb:65:72:2b:07:b4:4a:96:7b:2e:e4:ed:e8:e9:1f:
                    5a:6a:7b:70:20:62:af:a6:cb:cf:26:a3:de:da:c8:
                    2d:c9:dc:9e:63:98:b4:d5:bc:78:6b:f5:2d:b2:a6:
                    2a:38:e6:3d:53:2e:37:fd:d9:a4:36:7a:51:95:fa:
                    2b:3b:91:06:56:a5:c5:5f:e2:85:12:fd:d4:4f:b1:
                    57:66:28:61:24:75:50:b2:fd:74:26:14:57:c7:be:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:2B:26:14:FE:52:74:4A:32:02:2A:26:64:39:36:6A:CD:29:CE
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:93:c3:32:cb:b2:72:53:32:36:26:fa:7e:df:9d:90:63:
         e5:24:6c:85:7c:25:8f:0e:03:95:be:c7:b1:27:58:19:f6:d1:
         58:77:51:5a:b0:ca:0d:f0:25:cf:aa:f1:df:37:da:3c:bb:51:
         dd:74:10:39:6d:ee:c3:df:70:97:ea:64:7b:e3:9d:65:c8:74:
         12:2a:a4:b8:15:97:61:44:8e:59:00:b8:23:3a:00:c5:55:5f:
         f6:03:81:48:03:76:43:76:45:3c:fc:96:03:f4:b5:b1:66:31:
         66:5b:b8:85:43:18:e2:6d:d8:5d:68:cb:c8:68:5b:78:91:48:
         e2:fa:00:5e:7d:15:54:5c:8b:81:da:64:22:2b:ec:61:52:ce:
         5c:82:da:9a:00:db:ca:89:37:b0:9d:c5:02:45:a2:c6:34:49:
         e2:ed:6f:15:76:09:4d:d2:8f:67:fc:09:c6:fb:0b:86:d5:d4:
         56:da:ce:25:2d:3f:0d:9f:99:fb:f4:c8:18:a2:92:fd:82:15:
         2b:ac:5f:dd:cd:84:54:65:60:14:6e:64:4b:71:04:68:4c:05:
         40:5a:d0:22:4b:a2:7d:62:c9:77:4d:2a:46:91:e4:ce:48:0a:
         f9:5a:80:c6:d6:3f:d0:91:3a:df:0f:ed:3d:32:1b:40:71:83:
         ae:4f:86:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:33:54 2025 by rpki-client