Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa
File:                     3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          d7nzAjirfIigpvr7QtFGkHQ9AHZ0+rWbt/6TgqJWJ00=
Subject key identifier:   34:9F:38:0C:54:42:A5:8B:6F:05:C4:C7:C0:74:8C:B7:9D:1B:47:EC
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       5895E286030A8AF2B31F5F9990D8CE0968C44263
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     397423
IP address blocks:        185.170.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:e2:86:03:0a:8a:f2:b3:1f:5f:99:90:d8:ce:09:68:c4:42:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject: CN=3082010A0282010100E552EE05AF0C49FC7B750B4C420711525779E278B00792219F810DCF566CA83A00ADA2D37EE29B2601F23171C6AEC70835FDD2F85A3BECED392BD9242CD7322DF247D1549469523072F764AC5E0A73BD0830197F624179F2276B973F036C38DA2E2B87527029012056B6512C74BFC46841E8FDFA3A1E0ACACADADC13C13469C087FCA74549DF8895D77C32757DB4C5C77F46C82B271565D400BC68FC4D9AA0DC257811EDA9FC557511CEC5DE7D21D914052454C13AEE124699988F2E54E8E3406D75C12B0BAE4BA69D2386EF7622EE3219B75900B93A4FCEF2945F106ED61312E63F3C591B179779A110D866778649CD18D5FA0045B8B95AA66ADC68425F74710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:ee:05:af:0c:49:fc:7b:75:0b:4c:42:07:
                    11:52:57:79:e2:78:b0:07:92:21:9f:81:0d:cf:56:
                    6c:a8:3a:00:ad:a2:d3:7e:e2:9b:26:01:f2:31:71:
                    c6:ae:c7:08:35:fd:d2:f8:5a:3b:ec:ed:39:2b:d9:
                    24:2c:d7:32:2d:f2:47:d1:54:94:69:52:30:72:f7:
                    64:ac:5e:0a:73:bd:08:30:19:7f:62:41:79:f2:27:
                    6b:97:3f:03:6c:38:da:2e:2b:87:52:70:29:01:20:
                    56:b6:51:2c:74:bf:c4:68:41:e8:fd:fa:3a:1e:0a:
                    ca:ca:da:dc:13:c1:34:69:c0:87:fc:a7:45:49:df:
                    88:95:d7:7c:32:75:7d:b4:c5:c7:7f:46:c8:2b:27:
                    15:65:d4:00:bc:68:fc:4d:9a:a0:dc:25:78:11:ed:
                    a9:fc:55:75:11:ce:c5:de:7d:21:d9:14:05:24:54:
                    c1:3a:ee:12:46:99:98:8f:2e:54:e8:e3:40:6d:75:
                    c1:2b:0b:ae:4b:a6:9d:23:86:ef:76:22:ee:32:19:
                    b7:59:00:b9:3a:4f:ce:f2:94:5f:10:6e:d6:13:12:
                    e6:3f:3c:59:1b:17:97:79:a1:10:d8:66:77:86:49:
                    cd:18:d5:fa:00:45:b8:b9:5a:a6:6a:dc:68:42:5f:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9F:38:0C:54:42:A5:8B:6F:05:C4:C7:C0:74:8C:B7:9D:1B:47:EC
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35372e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:82:ec:0d:70:e5:d0:0c:ea:ff:16:9f:83:db:d8:c4:ce:a4:
         c3:28:4c:b9:4c:9f:bb:54:a9:91:fb:a6:df:94:e4:e3:f3:da:
         e6:15:b1:b4:98:d1:da:6c:55:ac:6d:02:c3:ec:18:9b:e1:a5:
         15:cf:42:bf:99:a8:5f:3a:fd:ac:ad:93:29:47:1b:dd:af:96:
         ca:8b:7f:72:5e:fc:d1:8a:4d:1c:67:8d:75:98:24:79:97:d0:
         f5:6c:fd:e8:4b:90:6e:82:f1:08:9b:98:b7:9e:79:e5:33:77:
         24:d4:62:d1:1e:3c:86:4a:fa:a9:2e:47:c9:3d:9a:2d:d0:a8:
         1a:27:32:2b:88:b7:d3:ee:d5:48:4b:d7:24:f5:25:8d:51:4d:
         97:e9:05:33:79:08:86:cc:bb:df:80:bc:19:fd:f7:1f:3e:2c:
         3f:ed:0c:c0:4c:24:39:46:ec:cc:a2:97:5a:20:da:90:cb:e3:
         34:45:f7:75:b6:5a:3d:aa:14:d5:7f:c9:d6:c1:6e:59:12:cc:
         92:ec:ab:d7:8e:ee:98:a7:3c:d8:70:ac:a9:92:74:09:f1:84:
         13:f4:37:e7:8a:72:f9:9c:dd:3d:ea:d2:93:31:d9:81:ba:30:
         58:a3:6c:a6:63:2f:8f:30:18:34:50:ab:49:9e:58:56:fe:aa:
         ea:db:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org