Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa
File:                     3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          wxKIg8948rzlX8gDtNoGY1OLwdAfjSARwPneKF/yReg=
Subject key identifier:   EB:66:15:C2:A8:73:4E:2B:7A:25:04:61:0F:40:0B:04:B4:15:FD:14
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       3BBA80A4384530AC60C2039ED1AA82DBFCD787D2
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     270564
IP address blocks:        181.41.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ba:80:a4:38:45:30:ac:60:c2:03:9e:d1:aa:82:db:fc:d7:87:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:b5:f9:88:6b:7a:ae:c5:13:05:61:af:5f:
                    38:f0:7a:c9:cc:e8:56:97:1a:7b:ba:18:70:fa:0e:
                    10:3e:b0:d1:35:ed:d2:fe:d7:db:42:6c:6a:8b:16:
                    2d:08:e4:be:ad:ec:63:56:20:b3:4a:94:a8:6e:74:
                    bf:32:2b:38:2f:d6:52:c2:7c:43:c2:af:37:d3:e6:
                    f1:aa:f1:89:1c:cd:cc:10:3b:b6:6c:e5:cd:fa:9b:
                    c9:d1:44:d1:26:cf:c4:05:2d:37:c7:d1:35:d4:5b:
                    60:27:58:e6:74:42:ad:4e:c3:93:2b:97:12:a4:81:
                    94:be:bb:5b:98:13:35:f3:f9:af:c6:56:78:a9:e8:
                    db:e2:45:1e:6e:82:7a:a2:d6:d1:d6:ae:a9:26:ba:
                    66:c1:8d:7f:23:ec:68:fc:69:fc:32:51:97:9b:3b:
                    b4:05:51:db:fc:5d:21:d1:e8:6e:86:50:7d:96:59:
                    f7:4a:ae:c0:4a:aa:94:d1:1e:f4:d1:d0:f2:51:53:
                    81:0c:8d:14:a9:e7:77:81:de:b5:18:45:19:85:31:
                    39:24:c0:e9:cf:c2:24:41:87:cb:34:71:ca:a4:ca:
                    bd:a3:03:95:5d:39:1e:9f:0b:4c:54:d1:c3:3e:ee:
                    1d:1d:0b:8b:2e:91:df:f4:ed:ed:1e:17:05:74:15:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:15:C2:A8:73:4E:2B:7A:25:04:61:0F:40:0B:04:B4:15:FD:14
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230302e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:a5:21:81:c0:89:64:c8:df:da:cd:d2:ee:4d:0d:5c:7a:
         d4:03:ee:86:24:d2:6e:11:56:12:d8:43:b8:24:79:1a:82:d9:
         f5:6c:3e:b5:a9:55:29:87:63:19:6b:01:05:00:ba:34:20:d6:
         74:3b:da:56:c3:e8:83:9c:3a:56:dd:65:3b:2a:20:e1:0d:15:
         7b:be:0c:27:d3:af:fb:6c:e8:72:2e:5d:22:ce:3b:1f:01:39:
         d1:dd:71:91:7c:ad:d1:fc:2d:68:fc:5e:3b:02:7b:48:f7:59:
         00:a4:e9:b3:f8:da:46:98:a1:82:f6:96:1e:a1:f7:d7:96:8f:
         85:44:43:6f:9b:e6:fc:df:7f:c1:9d:e5:64:5c:fd:51:fe:0b:
         1d:a4:43:51:f2:dd:07:d8:96:9c:45:4c:0b:a9:c3:d4:73:d8:
         de:00:53:05:0c:94:8c:64:4e:0d:34:e6:be:09:36:4c:e6:88:
         c6:3e:d7:3a:18:96:ac:08:01:59:8e:a0:68:5e:39:20:2d:a9:
         f1:3e:bf:38:43:e9:38:e7:2c:64:c3:2b:f2:a6:69:49:f4:9e:
         ad:49:c9:03:05:46:4d:49:5e:99:39:00:75:7e:66:c5:6b:2b:
         75:c8:76:6c:18:ed:c1:32:0c:22:a3:c2:19:5b:c7:42:3c:c1:
         2d:d0:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org