Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230322e302f32342d3234203d3e20313734.roa
File:                     3138312e34312e3230322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          wsY4Yv7dSHxwllBGsUE/3tEqAD5J6Z20U1G+yFZjl9s=
Subject key identifier:   0F:79:04:B7:09:B6:D5:4C:0C:38:82:9E:15:9D:B5:6B:0F:6F:87:A3
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       23E8126DBDDB172B22604F5BCD698F73E0D0F2B1
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230322e302f32342d3234203d3e20313734.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     174
IP address blocks:        181.41.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e8:12:6d:bd:db:17:2b:22:60:4f:5b:cd:69:8f:73:e0:d0:f2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:67:a3:bd:8c:8b:0d:a6:1f:00:e0:6c:f4:
                    0b:f8:c0:8a:9e:67:71:fd:df:82:45:bf:fb:c3:ee:
                    9b:a8:ea:84:3d:b3:13:06:be:62:6e:f9:7b:99:e4:
                    9e:89:29:99:35:e2:78:47:f5:51:4c:a3:79:5d:6c:
                    75:c6:53:79:1f:43:30:f1:c2:96:d5:05:85:56:04:
                    52:5d:12:3a:be:2b:f4:39:c3:eb:f1:e8:c7:7e:ed:
                    9f:d6:fb:b9:c1:88:a4:85:9f:39:70:71:8d:da:9a:
                    b0:d3:bb:c0:23:89:e3:42:be:e0:3b:b8:4b:7f:be:
                    76:25:fc:03:31:75:57:80:89:ab:d9:1e:f2:5f:be:
                    f4:ef:b1:7f:5a:e1:c6:f7:3b:2d:80:da:b3:d5:90:
                    60:46:46:15:fa:47:85:d2:a8:25:7b:6d:70:52:18:
                    8a:dc:f8:47:82:72:cb:e9:d2:25:1f:80:a9:d1:dc:
                    43:4e:3f:92:4c:1d:99:f0:44:84:ea:ba:37:f2:3e:
                    95:2d:89:fd:32:bb:a9:8c:0d:2d:28:db:27:bd:80:
                    05:59:de:38:25:0a:c4:2c:86:24:be:1c:c4:6e:42:
                    73:02:ba:2e:ef:9b:09:73:41:0d:3a:f9:0e:d8:0a:
                    b1:ec:e8:9d:b1:be:09:46:26:86:fe:78:2c:8a:d9:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:04:B7:09:B6:D5:4C:0C:38:82:9E:15:9D:B5:6B:0F:6F:87:A3
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230322e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:1f:35:7c:af:41:a7:94:bf:a1:c4:73:68:dd:8f:36:73:
         3f:f4:b0:47:ba:02:1e:bd:94:c0:fc:cc:ae:67:9e:bb:14:67:
         3f:b8:c0:99:5f:5a:aa:e2:ef:49:40:5e:e2:45:0c:1d:ec:8a:
         77:60:9c:72:e1:f8:4b:a1:15:bd:99:11:f8:7f:01:db:32:93:
         77:7b:54:85:c3:af:b1:d4:13:cf:60:8a:cb:56:72:ed:85:73:
         f0:2a:07:fd:86:b4:84:db:0c:4f:ca:35:c7:b3:1b:2a:58:01:
         57:b2:2e:f4:08:5c:02:c3:d4:d6:4b:47:91:b2:7d:ad:36:ae:
         eb:31:15:8a:2e:8a:1c:e2:f8:70:cd:b0:22:85:07:87:5e:47:
         ac:7a:fe:f8:78:a0:36:ea:21:f1:ec:5e:74:eb:60:7f:05:7f:
         81:6f:7b:50:8b:23:ac:d5:56:07:a7:2a:7b:0b:b9:30:bb:f2:
         95:cf:f3:06:39:fb:51:b7:0a:59:97:b7:3d:fb:ca:85:3e:0d:
         20:db:93:2b:e0:ad:24:59:d1:7a:e2:45:4d:88:e5:95:92:89:
         9c:c2:83:f8:a4:dd:b6:44:27:01:9e:cf:b5:0b:e7:12:d1:6b:
         8b:05:6a:e9:fe:31:9d:a3:71:db:a4:97:23:2b:68:7a:d7:99:
         09:7f:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org