Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XjjuWrVUsMVQYkfLlLSEVaCwBLNDqfrKd0U7KmMkuiQ=
Subject key identifier:   7F:52:D7:DD:26:F0:B6:AB:DC:9F:E8:21:51:73:F2:9A:69:D3:6A:95
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       6A6E56F0CD7CE683227094BC85730130989E4961
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     61317
IP address blocks:        181.41.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6e:56:f0:cd:7c:e6:83:22:70:94:bc:85:73:01:30:98:9e:49:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:58:88:eb:7d:19:57:60:7e:b2:26:be:c9:
                    d5:ee:fd:e0:93:f5:52:b1:9c:b7:72:56:e3:50:1e:
                    52:0d:48:ea:f6:e6:c1:24:6a:df:39:a7:ad:d6:c9:
                    fa:c1:99:47:fe:89:29:f9:f9:ba:f9:6b:7c:5e:ee:
                    34:d9:ad:3d:0b:bf:72:9f:33:f2:c4:a6:1b:f8:4e:
                    40:f9:c5:ba:2c:df:92:4b:89:8e:92:be:93:b8:c6:
                    ff:d3:b2:34:3b:2b:79:2c:e6:73:be:d2:0b:82:67:
                    04:bb:17:93:85:d7:ae:a4:56:ed:76:65:9d:2c:92:
                    03:d3:6d:43:5c:0f:58:f0:c9:23:1a:9b:e9:54:52:
                    67:75:d7:10:78:65:65:73:55:c5:c1:f0:76:d7:7c:
                    3d:1f:f8:5c:76:bb:f2:8a:e0:ba:a9:1f:e2:c4:e8:
                    b5:48:a3:97:7d:0c:d4:b5:f8:99:8d:90:40:ea:fe:
                    0a:f2:2b:f1:36:03:ce:b9:66:0f:8b:ef:6c:19:eb:
                    e0:a3:9f:70:7e:e0:5b:2a:1c:ec:00:00:9d:f7:eb:
                    71:39:83:97:4f:b8:47:f9:bf:33:78:1e:2a:79:1c:
                    5e:34:72:15:f3:b9:82:90:9f:cd:56:a4:e7:54:35:
                    35:81:a3:21:71:41:e9:41:d1:3f:07:97:d8:38:df:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:52:D7:DD:26:F0:B6:AB:DC:9F:E8:21:51:73:F2:9A:69:D3:6A:95
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:49:fa:c5:a1:b6:4b:81:cd:06:c0:1c:66:24:8e:59:ce:43:
         cc:5a:10:c5:c0:72:4e:16:b0:0b:cf:78:ac:0c:f7:ba:94:b0:
         31:1e:c8:fc:bc:56:2d:24:b0:b6:c9:e8:f8:c5:94:03:c9:e1:
         34:88:ec:84:07:c9:6f:c1:32:78:dd:b9:cb:5b:9f:06:1c:05:
         3b:f7:ef:1f:31:7f:f8:10:23:a2:c5:98:06:92:34:72:ab:52:
         63:da:6f:2e:90:f6:12:ec:f4:0a:dd:13:f2:10:aa:d4:06:3b:
         d4:e7:74:aa:ef:d8:d3:c6:23:e7:de:22:d7:33:ea:57:e2:e8:
         4e:09:e8:b4:72:62:30:37:70:90:4d:eb:47:92:71:81:5e:34:
         fe:e7:67:1d:c4:01:b2:6a:e9:57:85:a1:1f:f6:8d:d4:b5:7f:
         93:e0:49:5a:6d:d0:cc:10:3f:3e:49:80:e2:5d:10:c7:0e:51:
         55:c4:e8:28:e4:a7:1a:5e:4c:71:dd:99:0f:42:1e:91:04:e4:
         57:dd:6f:9c:60:e5:6e:67:69:66:bc:08:0c:0c:86:28:70:8b:
         f7:de:c5:80:08:2f:42:50:8d:29:2f:8f:66:b2:cc:1e:b4:2b:
         01:16:b2:fc:7d:ac:14:57:7c:d4:a7:87:99:db:96:51:d0:68:
         46:15:8f:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org