Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa
File:                     3138312e34312e3232302e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          HkyfBVj+RBtOzYy/u9RDi0Gm9tbnYaOb2UB74SZVB/E=
Subject key identifier:   E3:AF:4A:5E:5C:C4:82:81:B1:BE:8C:4B:0D:D8:11:1E:68:88:68:FA
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       2DC5F425CDDB25DA3EEE22C2C1FD7F7A8BA922B5
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        181.41.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:f4:25:cd:db:25:da:3e:ee:22:c2:c1:fd:7f:7a:8b:a9:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:44:db:8e:dc:19:f0:bf:56:c2:45:9e:20:
                    b2:77:bb:7e:fd:a8:6c:0a:04:1b:76:0c:a2:d0:4b:
                    7f:70:c4:13:59:f4:12:81:dd:a4:29:14:eb:ff:3c:
                    73:ac:14:02:52:3c:86:2c:a6:86:e7:16:b9:7f:c5:
                    2e:e9:87:c2:94:d7:79:53:4b:04:89:4a:1f:9a:ec:
                    5c:ba:ae:a7:27:02:77:70:7c:53:55:d9:ee:82:a7:
                    f9:c4:e2:dc:dc:5c:c9:39:84:37:d8:a2:74:73:f2:
                    56:f0:81:ff:1f:1d:1c:c3:80:10:3c:03:3b:df:6e:
                    10:06:4d:cb:ca:df:58:a6:51:59:dc:29:a4:c5:fe:
                    9f:cb:2a:d2:9b:3c:39:b9:6e:34:1c:47:c0:3d:3c:
                    04:bb:5c:26:0a:b5:6b:4e:ee:08:ee:00:ac:ff:26:
                    5e:ae:d9:84:79:8d:1d:b5:09:38:0c:c6:84:84:e6:
                    37:af:0b:d8:0f:7b:5e:dd:a1:35:a9:a4:c0:c6:d0:
                    62:92:15:26:72:e2:5f:08:d1:58:19:a9:40:aa:89:
                    79:39:d7:86:a1:4c:d8:14:b9:e5:b3:51:76:dc:26:
                    ea:7a:e9:d7:07:4a:9b:81:9d:50:99:e0:07:1b:9c:
                    9b:4b:19:ae:9d:23:49:e2:24:e5:74:50:ee:f9:82:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:4A:5E:5C:C4:82:81:B1:BE:8C:4B:0D:D8:11:1E:68:88:68:FA
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:bf:14:8b:20:96:d4:47:31:f3:1c:d7:17:c5:93:1c:a5:
         b2:63:90:71:f8:c9:0d:1b:c9:45:4f:30:3c:4e:5e:dc:5d:9f:
         15:93:36:c5:08:34:ae:51:6e:bf:f7:84:2e:c7:17:37:67:2a:
         59:f9:4d:9b:0d:5a:8e:3b:29:a5:e8:e9:c6:51:94:3c:b4:d8:
         f8:37:35:cd:d7:c5:fe:fc:61:db:4c:e3:67:fd:51:6b:13:dd:
         0d:06:5a:ee:ca:21:9c:c5:61:5b:03:8b:66:9e:dd:89:9c:b5:
         51:a1:a2:c5:d7:65:c3:7c:98:c7:9a:2c:3a:16:47:a3:2f:2e:
         c5:f3:99:31:11:82:12:77:00:e5:5b:7a:74:6a:28:94:bf:17:
         ac:2b:ba:4f:f7:cf:b7:3b:8f:63:f7:d1:d7:37:1f:01:cb:0a:
         44:11:49:e5:f5:bc:1f:26:ce:8d:1f:0f:e1:ae:01:4a:70:c0:
         85:11:7d:62:33:c5:59:a5:c1:35:eb:4c:cc:31:5c:19:ef:76:
         72:b0:97:f6:f7:50:56:46:0d:35:1e:e7:aa:7a:c6:97:26:59:
         d6:3d:6f:5d:fb:0f:23:99:af:65:78:a9:66:83:7e:db:38:96:
         ed:9f:bf:b0:b3:b9:6f:4c:73:5a:7b:e0:d0:5a:d9:60:2c:7e:
         da:33:8c:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:35 2025 by rpki-client