Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32332d3234203d3e20313430383132.roa
File:                     3138312e34312e3230362e302f32332d3234203d3e20313430383132.roa (raw, json)
Hash identifier:          lRBhV4Oo+uGNXai6uctc40ePR1m0ug4lYEspX2lxNCA=
Subject key identifier:   8B:B2:85:74:B6:D2:4A:E5:34:6F:6B:30:A0:09:0A:6D:F8:22:D2:E0
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       6FCA3ADC4D03C13F52D312FAF7CD8FBF6A30FC98
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32332d3234203d3e20313430383132.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     140812
IP address blocks:        181.41.206.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ca:3a:dc:4d:03:c1:3f:52:d3:12:fa:f7:cd:8f:bf:6a:30:fc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:78:d4:2f:de:07:5b:17:db:7c:c3:77:66:
                    00:ba:5d:f0:ab:f3:48:92:7d:7d:ee:74:8f:49:9a:
                    b4:80:de:1f:dc:01:e2:b1:83:78:e3:2e:0f:e8:73:
                    36:b2:61:b7:1c:84:b8:ab:8a:46:9c:08:6e:56:78:
                    9d:03:4e:bf:f7:cc:c0:c3:ff:72:9a:27:9c:97:73:
                    34:e0:dc:f4:8c:fd:05:4d:af:74:c0:89:24:14:59:
                    0a:99:e3:ed:09:23:15:f4:78:75:0c:20:48:16:bb:
                    eb:8c:47:35:f9:79:11:96:19:9c:73:74:02:ea:92:
                    51:ed:b4:a7:05:50:98:78:62:96:40:55:51:48:99:
                    bd:ef:7a:22:e5:4d:25:cd:da:db:4d:d2:9b:90:03:
                    b1:6d:02:cd:6e:b7:b5:a2:af:42:45:2e:1c:03:cb:
                    9f:f1:5b:ed:03:2d:38:ea:9e:64:64:d9:e4:83:c1:
                    17:bd:1c:35:c7:39:4b:70:39:16:b1:ed:e9:fd:5f:
                    a4:0e:23:7b:d5:3d:0f:18:3c:1f:82:91:fc:22:b5:
                    c9:ad:3c:76:2d:fb:84:77:d4:a9:cd:b9:25:5e:0b:
                    99:77:65:c0:71:d1:8c:99:ab:75:90:c9:96:8e:99:
                    06:8b:97:fa:a8:73:f9:dc:1a:34:4c:43:14:96:d4:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:85:74:B6:D2:4A:E5:34:6F:6B:30:A0:09:0A:6D:F8:22:D2:E0
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32332d3234203d3e20313430383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:09:c6:3c:ca:9e:12:7e:c9:19:a4:d0:0f:03:c5:a4:bc:
         46:26:ce:a4:00:e3:e3:07:86:55:bf:28:d8:11:8e:9c:ac:67:
         ba:17:d5:47:4a:e7:9a:21:89:e8:6d:a0:34:98:fe:70:42:d8:
         6a:9e:5f:08:23:d8:67:77:6b:34:a9:a8:ab:1c:25:aa:32:be:
         4b:c4:44:e0:f6:90:e6:30:90:6a:b2:20:7b:18:0d:13:ef:0c:
         34:9b:0f:87:f5:cd:9a:b7:c1:45:0c:49:58:ab:17:de:4b:67:
         66:ed:41:6c:b2:e1:9a:91:2b:21:6a:c4:1c:a6:fc:7a:3a:73:
         a7:7f:4d:14:b9:f7:88:45:36:6e:33:34:96:6f:54:4a:a2:dd:
         b4:4a:3a:b2:fb:61:67:22:a8:b8:9e:39:66:51:f6:bd:66:11:
         b5:84:90:bf:49:cb:8f:cd:fa:79:d6:2a:55:05:b1:a9:ad:5a:
         62:ed:96:33:50:d4:d0:4b:ea:cd:c9:60:d1:f7:ba:0b:43:f0:
         87:66:94:6a:88:c5:06:78:4e:0d:53:eb:4e:b0:45:18:5b:7a:
         81:e5:d8:61:89:96:bf:e7:e4:cd:37:b0:27:26:e8:89:4f:c6:
         20:84:ad:24:84:9d:c9:dd:27:09:5d:48:0d:9a:37:ab:f4:30:
         1d:24:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:09:32 2025 by rpki-client