Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231322e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          cHNsH0A7CVEKuAJ/Wg3bRaF9/xhqzydKn7dAPBcageo=
Subject key identifier:   01:DB:0E:23:E8:B8:DB:9F:B5:D6:D8:42:C3:71:A1:8D:EE:3A:5C:C8
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1EBF4A8BF6C37EA5374FBD03340683AE0C046664
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231322e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     61317
IP address blocks:        181.41.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bf:4a:8b:f6:c3:7e:a5:37:4f:bd:03:34:06:83:ae:0c:04:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:97:cb:52:43:24:ba:20:4c:66:9d:a3:15:
                    d9:59:63:82:84:4e:f8:86:32:f2:94:d2:7c:28:11:
                    64:05:5a:fb:fb:8d:66:ff:01:da:30:c9:aa:9b:8f:
                    00:ef:6b:55:91:cf:fe:00:d3:f5:5a:60:e7:28:fb:
                    cc:05:e6:0b:49:ed:00:f6:42:ac:50:20:de:ed:74:
                    79:1f:2e:61:f7:3e:ca:1b:78:0f:7b:81:b2:57:59:
                    18:b4:c0:21:6e:a2:ea:18:00:1f:8e:af:c7:c3:da:
                    e5:24:5b:3d:ef:5b:81:a1:4f:fd:7d:69:90:df:e7:
                    9a:bb:f1:56:20:ff:88:73:cd:ef:e1:18:18:3d:41:
                    18:a1:bf:78:e0:b1:ec:40:e6:55:b1:ef:c2:ff:11:
                    ca:c6:c5:f1:99:5e:be:2b:9f:b7:07:cf:1b:45:f7:
                    26:79:d3:dc:17:05:85:dc:d7:2e:4d:35:08:b9:14:
                    a0:b9:96:73:0b:95:e8:b6:a1:b8:82:e6:86:cb:9b:
                    47:b5:ff:9d:b8:b6:2f:8d:bb:05:7c:c7:a3:c8:c7:
                    40:0b:71:91:72:fe:2b:29:2d:61:af:52:89:9d:06:
                    21:5d:90:f5:e8:a2:27:50:2a:87:b8:34:25:61:76:
                    ad:d2:98:85:14:bc:6b:29:07:82:24:eb:0a:1e:19:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DB:0E:23:E8:B8:DB:9F:B5:D6:D8:42:C3:71:A1:8D:EE:3A:5C:C8
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:85:26:c5:fe:4d:18:e6:fb:23:36:3e:da:67:cf:0b:9d:
         45:f4:ab:54:f7:f1:a4:13:bb:3a:b3:9f:ef:2c:b9:42:e7:6d:
         55:48:88:70:62:be:76:9b:51:a5:59:73:d9:87:39:8e:13:1c:
         55:d2:c5:51:86:be:25:b8:01:e8:5a:ed:e3:e8:10:b2:5a:f4:
         13:64:a3:4e:0a:14:74:54:bc:81:17:c7:c3:bb:7f:46:60:53:
         f2:49:37:68:ae:23:32:33:6a:1d:ed:3f:b5:1e:1a:ca:4e:a6:
         e6:77:30:76:8d:1e:b4:59:86:3b:5a:69:24:25:3c:e1:70:c9:
         08:01:8a:8e:f4:ec:f7:78:67:f1:11:33:45:d6:5b:9c:f2:25:
         11:9d:da:22:31:be:1f:69:f2:2e:de:e7:09:66:fb:7b:96:ce:
         03:2b:cf:18:f0:78:8c:f8:7a:7a:d9:fa:2f:0a:35:b8:bf:e0:
         d9:00:90:15:57:f9:d6:db:4e:bb:bc:d8:3b:76:f0:76:5f:1e:
         4c:27:4c:a5:90:68:6d:03:cf:c2:9c:ed:c5:cb:e4:30:00:5e:
         1e:87:47:a4:13:90:0b:73:22:0a:34:bc:5c:0e:d0:c9:d3:f3:
         14:10:54:db:7b:7f:f5:87:e7:fb:31:75:cb:43:51:05:c2:eb:
         b1:cb:4d:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org