Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa
File:                     3138312e34312e3231382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier:          L33UpjrytPaF2zsguyBGdzttTL5wH15Ak2r59yhxEh0=
Subject key identifier:   55:E4:F1:6E:6A:53:AF:48:34:5A:1B:4A:6E:13:A5:A5:73:82:39:7E
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       090B51BD034D6C75202B52EA2F385BC761FF82F9
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     60458
IP address blocks:        181.41.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0b:51:bd:03:4d:6c:75:20:2b:52:ea:2f:38:5b:c7:61:ff:82:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:0c:0d:26:c8:07:b4:98:8e:87:15:50:36:
                    e5:6c:b9:86:c1:9c:4f:8f:19:53:98:5c:3f:2e:a2:
                    12:18:99:dd:70:0f:6a:6c:86:f2:01:dc:56:76:36:
                    15:8b:49:97:83:22:80:11:97:cc:bb:14:75:eb:d3:
                    37:2b:1e:6f:a9:fa:98:66:e3:c2:39:3f:fa:38:6d:
                    40:9e:52:52:97:1b:d9:75:37:98:95:32:ca:65:ea:
                    66:d5:46:c3:8a:e0:5d:1a:29:44:c7:9d:cd:b9:8e:
                    5f:59:a8:88:e3:f5:a3:1b:a1:0f:78:53:88:3d:d9:
                    ff:fc:f0:05:bc:4f:ec:7a:c7:3d:85:aa:a5:da:b9:
                    22:91:cc:ed:4a:75:fb:c4:8f:4c:b3:49:ca:cb:25:
                    c4:b5:e8:57:39:49:6f:c2:cc:18:39:b2:71:aa:96:
                    96:be:90:b7:7c:b9:48:84:13:81:fb:c7:c6:2b:20:
                    d4:4b:e7:c4:b2:6f:a0:2c:9d:8b:e4:62:bf:c5:bf:
                    20:fd:31:de:06:31:d4:20:f2:4d:ff:9c:8c:13:bd:
                    0c:a7:b1:03:57:9e:59:54:fb:b9:29:dc:6a:d1:e7:
                    9b:b5:f7:d2:5e:93:b1:fe:1b:0c:81:d9:05:b1:82:
                    89:c0:61:06:35:f3:7c:9a:b7:20:00:a2:d6:a4:30:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:F1:6E:6A:53:AF:48:34:5A:1B:4A:6E:13:A5:A5:73:82:39:7E
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3231382e302f32342d3234203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:5d:3d:df:a4:41:d6:aa:8a:cd:53:d8:fd:44:2c:e4:1a:a5:
         47:28:8c:c1:d1:d6:82:21:da:ac:5e:25:b5:71:31:27:1f:4d:
         ba:b3:0f:ce:47:e2:74:b9:4e:78:76:7c:03:92:6d:03:98:06:
         9b:f4:a4:ff:18:12:c9:44:01:36:85:bc:3a:54:ab:1d:9c:06:
         2a:93:4c:60:8b:6c:1a:1a:71:7e:1c:07:44:d1:dc:7d:ac:d3:
         57:64:48:77:3d:3e:9a:15:0c:3e:46:a4:57:e4:03:e8:bb:cf:
         ff:32:13:d2:87:9b:26:3c:e5:e8:83:6d:ab:53:24:ba:ea:14:
         03:d1:9a:5f:95:16:b5:0c:85:6f:2b:7c:1d:3f:23:34:a6:58:
         5a:b0:35:3a:43:31:b2:22:4a:f2:be:1b:69:a9:c7:d8:5a:9e:
         11:4c:ab:37:0b:3e:e0:45:37:da:1a:54:61:e7:75:1c:0a:7d:
         7a:51:38:1c:14:40:4f:69:c1:55:cf:ac:e8:79:60:8a:11:ff:
         5d:2f:85:90:b5:35:ba:10:45:f7:8c:35:c3:5f:17:3a:f3:40:
         2b:80:fc:10:92:64:11:85:57:b4:2a:3f:b9:c2:c0:52:73:e5:
         84:f8:d7:c4:0a:75:68:14:a6:33:f2:04:95:f1:29:e9:67:ff:
         b8:9a:e6:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org