Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137302e35362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PSGm9UJLchfahQ+V7lbAjFBy0Ol3nUbS3+w9TKnjgk0=
Subject key identifier:   6B:B7:DD:ED:9F:29:B0:3E:54:41:B1:FE:A1:C5:8C:2C:1F:C7:09:53
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       2AD9D125C34F26D12835213D6A03721CDE543369
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     61317
IP address blocks:        185.170.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:d1:25:c3:4f:26:d1:28:35:21:3d:6a:03:72:1c:de:54:33:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:31:4d:cb:a0:2e:78:d1:d4:1f:86:36:92:72:
                    9d:64:12:71:76:fe:7b:c3:9b:60:74:5f:b6:8c:5f:
                    66:5a:88:0d:1c:71:bc:4a:ba:4b:20:e0:03:0c:c7:
                    90:cb:dd:8e:e9:53:e1:74:ca:fb:2e:19:b5:3e:8d:
                    74:d0:c4:e4:c5:aa:52:74:13:00:fa:9b:ab:57:b0:
                    76:b3:c8:8b:8b:da:52:c3:e7:e8:19:c0:f6:38:2d:
                    88:d9:ae:e1:f2:16:3e:f4:93:f2:ae:f7:e0:df:fe:
                    be:b5:e1:c2:7b:e2:8b:67:87:85:19:b3:d3:d4:39:
                    b9:7f:b0:b0:d0:fd:7f:7c:39:00:2a:3d:f8:ad:0a:
                    74:47:4e:2c:ae:fa:bd:5c:5b:36:70:b7:d8:b8:67:
                    ce:82:51:da:3b:16:4d:7b:1c:38:ad:f5:fb:e1:c3:
                    5e:e5:9f:b1:0d:2f:4b:9f:ae:8a:35:51:2e:18:1e:
                    76:48:e4:04:78:c5:6e:ce:af:64:7a:ee:f9:03:5d:
                    18:a9:2a:db:1b:f9:25:76:10:9b:52:1a:b5:10:0b:
                    17:8b:dd:8f:d7:b6:e1:c6:03:86:7b:fb:66:51:67:
                    a3:fa:32:15:1f:ac:5c:06:4e:02:43:77:63:ec:4a:
                    ca:fd:93:1a:6b:e2:85:8a:0a:1b:36:c7:1c:7a:11:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:DD:ED:9F:29:B0:3E:54:41:B1:FE:A1:C5:8C:2C:1F:C7:09:53
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:2a:e1:f3:ca:cf:1f:e2:83:74:35:a6:f6:f0:d4:dc:4a:
         ef:c2:82:51:eb:29:46:55:fb:ec:7e:1c:1a:c7:8b:4e:4f:15:
         49:4e:c1:c5:11:97:35:62:e4:28:ca:73:b3:59:c2:25:ae:89:
         b8:23:01:9f:7f:a6:99:94:ce:e9:36:6f:3a:95:55:7a:42:3f:
         a8:20:ad:0f:d5:6a:7a:b8:61:06:2b:8f:73:d4:78:d1:67:de:
         13:27:71:58:7e:1c:24:24:d7:7c:74:8c:ac:e0:31:15:10:5b:
         88:ac:1c:28:d7:ea:4a:75:8d:c1:82:5a:23:4f:86:e3:f7:34:
         d0:f3:98:46:22:c4:d5:df:53:ee:d5:e8:92:13:f1:f8:cb:2c:
         6a:0d:c6:f6:ae:7d:04:77:4a:58:bc:de:53:3e:ff:d5:dc:fe:
         7f:f3:8e:13:49:f6:db:af:9a:c6:f5:e4:41:4f:1d:1f:d3:7c:
         eb:f7:4b:eb:2d:47:dd:55:88:7e:f8:a5:d3:65:0e:c7:56:68:
         4c:07:d0:6c:ce:c1:37:af:27:13:9c:00:0e:a7:19:b8:c1:91:
         76:04:62:0d:ad:36:9d:32:d1:a7:8f:f1:4c:7a:dc:2a:e4:59:
         a1:22:ea:12:3a:a2:3f:37:42:6c:0f:6d:2c:e6:67:c2:ad:12:
         ff:d4:48:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org