Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          CKcpxCFkPywSAG73h86/ZBvwxXbldlQ3uHyI8MkeG8Q=
Subject key identifier:   C6:A2:6F:C6:FD:15:2C:BA:FD:A5:28:31:4E:CD:1E:12:8A:40:80:B8
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       3BE2E12A411756C48519CE354D9B06266A75BD32
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     61317
IP address blocks:        181.41.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:e1:2a:41:17:56:c4:85:19:ce:35:4d:9b:06:26:6a:75:bd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:0b:98:6d:2b:08:cd:16:53:8c:bb:8d:42:
                    13:b7:7f:b0:1f:f5:b2:6c:f6:84:20:2f:46:4d:13:
                    51:13:a6:de:eb:23:eb:6a:6b:03:72:5b:77:77:76:
                    73:88:63:4c:d6:37:34:f7:61:5b:98:d3:5f:d9:24:
                    12:9a:63:a8:3c:41:4c:3d:4b:a3:48:a9:d9:69:8a:
                    24:d8:52:55:e9:42:85:a3:ff:ff:fc:bd:91:0d:bd:
                    63:05:d7:14:ed:05:7c:93:9e:bb:17:a4:48:ea:fd:
                    2b:a4:96:58:08:52:ee:f6:05:49:d0:4b:11:27:fe:
                    0a:fc:ef:d1:81:6b:54:97:1e:8f:6e:0b:bf:9d:e6:
                    ad:05:3c:68:2c:aa:05:8e:6f:7e:91:c6:68:e1:0b:
                    c0:31:77:68:f5:50:a3:5d:df:e1:c1:35:d6:dc:91:
                    b7:26:e6:1b:ce:8b:bf:0e:a9:08:67:d9:60:72:87:
                    9d:ec:e6:c8:23:b0:ea:9d:db:01:12:c7:44:aa:7c:
                    dc:1e:a8:1e:63:fd:ab:32:2e:29:19:e9:12:4e:62:
                    d0:25:2f:48:37:cd:2e:1f:d1:23:db:43:05:e5:72:
                    d1:be:1a:30:87:69:17:79:1e:7b:f5:fa:d8:19:bb:
                    54:7d:18:88:1f:e7:0f:a4:6f:f6:98:f9:75:8a:30:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:6F:C6:FD:15:2C:BA:FD:A5:28:31:4E:CD:1E:12:8A:40:80:B8
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:0a:5b:44:69:5a:4c:a0:64:89:f0:6c:50:78:be:5d:b0:
         06:57:01:ba:2b:0d:af:33:97:80:b5:b5:a2:9c:f3:01:dc:d5:
         48:b2:55:f0:33:f7:b0:3b:b2:37:8b:c4:eb:48:70:dc:32:97:
         38:d6:97:10:33:c5:b2:bd:f1:ff:19:9b:40:38:84:de:39:1e:
         8d:3c:fd:f3:40:25:46:0d:d7:bb:3a:f3:e3:16:d5:dd:dc:82:
         1a:6f:ab:9c:85:db:95:05:92:1e:13:a1:65:c1:3e:cc:b6:0e:
         67:d4:2c:bb:af:41:29:29:15:b9:fc:5f:06:ee:50:bf:ca:cb:
         61:71:29:da:66:89:f5:fe:21:60:8d:a9:2c:ee:ba:3e:53:7f:
         75:4e:cc:5d:db:e3:99:73:b7:55:16:35:af:ad:11:98:26:6d:
         81:c1:1f:b4:25:86:f7:6f:d3:14:03:a5:5e:02:cc:af:ff:50:
         aa:82:23:90:dd:21:dc:18:e2:b4:19:5c:37:ac:a1:3d:f3:c2:
         7d:da:08:27:93:b6:38:7a:1e:f5:88:b0:18:fc:cd:01:50:b2:
         f1:be:87:b5:c1:63:c4:fc:f1:2b:ee:62:48:bc:63:fd:17:69:
         e6:25:13:0b:a2:89:f8:96:a0:5d:f7:ad:5c:ba:8a:cd:c5:6d:
         51:da:2b:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org