Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa
File:                     3138312e34312e3139342e302f32332d3233203d3e203630363032.roa (raw, json)
Hash identifier:          tGZV7WLKV20G2cwDxyEXgNMghjBP3JNACBAIL5aREYw=
Subject key identifier:   47:58:A1:A4:16:8C:29:FD:98:24:50:EA:83:BB:2F:D7:94:1C:96:79
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       23B2AAB5FB1211B0CAA486D40F18FCCF5C208285
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     60602
IP address blocks:        181.41.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:aa:b5:fb:12:11:b0:ca:a4:86:d4:0f:18:fc:cf:5c:20:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:22:ee:ab:16:99:3d:13:21:7d:a3:ed:be:
                    37:43:4c:b2:29:18:00:d8:36:d2:ef:8d:91:c5:7c:
                    33:30:f6:0d:66:65:b7:f8:b3:86:63:d9:df:31:d2:
                    ab:d4:7c:f2:4d:6b:08:24:3f:9e:3c:40:51:08:db:
                    12:1c:05:9d:eb:95:bb:dd:7f:bf:21:3f:68:c2:48:
                    e8:5a:89:03:c5:ed:1a:c8:5f:4a:94:83:3c:14:23:
                    23:c2:a9:17:48:8a:ab:9a:8c:6c:3d:6a:4f:e2:91:
                    0d:97:ca:7e:8a:7d:77:8b:f5:83:d2:d2:e8:b9:6d:
                    a0:b1:02:5a:44:c1:24:e6:20:65:a0:0e:cc:fa:cc:
                    5e:24:d6:f6:b8:58:c7:96:b4:7e:16:43:59:45:7f:
                    1d:0e:cc:ba:63:77:34:ea:6d:36:7b:c8:27:50:79:
                    8f:e6:ff:f8:25:07:3a:8b:4f:55:a9:96:2d:9d:e3:
                    2a:12:8f:b3:54:ed:6a:74:05:c9:b0:0a:ab:18:f0:
                    5f:e7:d7:90:3c:06:76:50:81:eb:ff:e2:3b:24:b2:
                    c0:11:67:85:ff:c3:be:0f:cb:af:7a:57:69:9c:87:
                    b4:b6:ef:a2:f8:b2:96:84:b4:a3:1e:a6:09:e6:1b:
                    4e:be:4d:f8:51:5c:24:0f:80:99:bc:11:ec:13:5f:
                    72:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:58:A1:A4:16:8C:29:FD:98:24:50:EA:83:BB:2F:D7:94:1C:96:79
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:51:5b:34:ea:0c:87:c2:a1:6f:d2:78:0b:08:7e:3d:c4:
         82:3c:fd:f2:0b:6f:fc:a1:16:07:de:9d:a6:9c:c8:5f:44:4c:
         70:36:0f:d5:6f:64:b1:aa:92:71:ba:0c:e1:09:16:d9:d9:39:
         88:d4:26:2b:51:14:be:e0:30:78:c5:40:44:87:18:45:70:98:
         0d:4e:d8:12:08:3e:6b:6f:ef:37:00:e6:ed:77:1e:e3:2e:f1:
         d0:bf:aa:ac:a8:ca:4e:9a:99:36:92:34:5f:d4:60:a0:74:03:
         50:e9:12:2a:12:ba:09:aa:af:ba:76:bd:61:df:2e:e9:3d:d7:
         f0:a9:62:53:5c:cc:8c:b8:a6:fd:a0:74:62:ce:3e:63:44:db:
         2a:5a:a3:7e:f3:8c:2b:09:ab:91:8b:be:bd:f7:16:98:08:c5:
         7d:22:29:12:92:09:7d:c0:01:ef:67:fc:12:43:7a:6e:ac:a1:
         14:8a:4d:0f:19:53:fe:de:c3:68:51:50:64:cc:83:5b:55:82:
         3f:a7:48:8a:96:26:f8:95:bf:6e:75:8c:67:ed:9c:e8:94:c3:
         1f:1d:dc:38:7c:44:e0:ca:91:22:33:3f:50:72:5d:61:8d:a8:
         78:c7:03:0b:0b:ee:cb:25:bd:35:70:71:93:c3:9a:e4:2b:9f:
         db:92:c2:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org