Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          xAyltPIE+j1Gb0vVdfVXWN8+bJqjoWcoQFHw10GHCGI=
Subject key identifier:   43:A7:6D:43:38:67:A5:17:96:C2:44:9B:B5:83:92:9E:D6:8D:36:48
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       27F077A0342C62EBAD6A394CE734CE194A6CA63D
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     22773
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:77:a0:34:2c:62:eb:ad:6a:39:4c:e7:34:ce:19:4a:6c:a6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:1b:f4:12:0f:f6:d1:b4:f2:4a:cf:1d:1a:
                    84:f0:79:59:e7:0b:a2:0a:74:84:60:0c:95:b2:56:
                    e4:7c:50:22:8a:54:64:5e:6b:6f:59:2c:2e:55:2b:
                    6e:d2:f7:dc:60:d8:b6:ea:d3:57:94:e4:62:74:89:
                    1d:16:f7:e4:ad:58:6b:59:e6:83:cd:91:f4:f2:f0:
                    45:51:60:f6:f3:05:d2:4e:67:13:90:ee:a0:99:05:
                    0e:fa:44:51:7a:63:e5:3f:ac:75:51:03:c9:1d:0d:
                    94:09:a9:f6:65:ad:47:62:d9:ef:c8:e4:9f:f5:82:
                    3a:c9:f4:f3:66:52:57:df:24:9b:3b:ca:c7:10:7e:
                    a6:4f:1f:77:8d:32:59:b4:e5:32:85:9a:ad:cb:52:
                    1b:bb:07:70:db:af:de:71:42:cf:85:59:e8:47:b5:
                    35:f5:8b:80:f7:a5:d8:e9:4f:36:73:77:e2:1e:45:
                    c8:c0:79:66:68:93:56:c4:48:73:79:27:62:8b:22:
                    1e:f7:ff:25:10:a0:0a:2b:f4:a9:8e:e2:97:98:0a:
                    b1:d0:82:ec:27:7c:64:ed:56:05:a6:c0:54:a1:d8:
                    58:b5:23:b3:35:48:03:88:4f:61:74:8d:06:a0:b9:
                    ac:4d:71:62:9a:c1:91:94:ea:8f:93:f1:77:35:5d:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:6D:43:38:67:A5:17:96:C2:44:9B:B5:83:92:9E:D6:8D:36:48
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:25:0e:9a:13:e9:96:9e:1b:53:cf:6c:ea:09:3b:e9:7b:
         cd:9f:13:c7:ae:c8:0e:74:29:b6:26:e7:99:d9:2a:d1:c5:5c:
         8d:aa:95:38:e6:99:96:cb:55:f2:e8:a0:43:88:67:62:fe:62:
         b8:63:3e:96:57:37:b5:40:48:4c:9f:e3:ea:0f:13:b9:c4:80:
         0d:5c:9d:dd:b4:5f:96:31:37:37:f8:d9:48:2d:46:74:58:e9:
         4b:d2:55:8d:23:4e:50:4c:1f:38:69:a7:95:7f:f7:f0:98:aa:
         d7:34:ae:17:60:4b:22:4a:f7:5b:8a:ca:c7:5a:56:5e:1b:fe:
         86:69:17:56:e4:33:e6:86:37:f8:69:09:b8:97:be:e1:23:f0:
         4c:03:d7:60:66:bd:11:85:a0:13:22:47:63:25:cd:22:e3:c4:
         da:bf:94:bd:5d:cb:62:ff:24:1d:ec:70:45:23:a2:22:50:23:
         f9:e6:1a:ce:d2:1a:64:9c:35:a9:59:d0:81:b0:9e:46:66:3d:
         98:dc:fb:15:0a:10:31:36:98:83:43:22:04:5b:61:d6:90:64:
         15:07:da:ad:22:95:2d:01:b7:ea:fb:bd:45:69:7c:b1:62:72:
         3c:61:19:53:8b:7d:b5:62:69:cc:02:58:fc:12:7e:10:fe:27:
         c5:59:95:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org