Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa (raw, json)
Hash identifier:          kpl8g1D7eZqAGO1xJpkTYbdes+zwaM1UZXiXURxy4Gk=
Subject key identifier:   92:07:47:93:86:94:E4:45:A7:C3:BC:6F:D5:A1:CE:68:99:B5:8B:24
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       06FB0498AC8F5284EF0D02A868DA7192F8FF6685
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     213382
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:04:98:ac:8f:52:84:ef:0d:02:a8:68:da:71:92:f8:ff:66:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject: CN=3082010A0282010100B38958F894B69ADD1F6E95E856B989A74F08932B0A31370B3CEBB3CB57A6F644A68F89A7CB0F89322ACC6BC7AAD5A87EDBE403FFA3E5E9471E1AB9025465123E6BCAA7015B30751FF77BE2C56B3138BFB357112DBBAD3D3EF316555BD02B2B502798B7AF9D44A2B508E223B9F8167B2D9BDACD24D1E4DC1E214A284E9691F4096001BD9545874AB6851B68AD54DA07CDF77BE00F748EBD56F241AACC52083CEB08DDB86A6750DE22FD855445C96C747DD357E3386E63DC4C5C474443FC8A35BBE340B01BD3F7CE182201E70F7F66EE2E40A3291536D4B33C7E166A751FCBEE114D4BB9F0FB5FC7D55BC39559ED09DD8249DEB178C228ACB71A46FE16DF237A670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:58:f8:94:b6:9a:dd:1f:6e:95:e8:56:b9:
                    89:a7:4f:08:93:2b:0a:31:37:0b:3c:eb:b3:cb:57:
                    a6:f6:44:a6:8f:89:a7:cb:0f:89:32:2a:cc:6b:c7:
                    aa:d5:a8:7e:db:e4:03:ff:a3:e5:e9:47:1e:1a:b9:
                    02:54:65:12:3e:6b:ca:a7:01:5b:30:75:1f:f7:7b:
                    e2:c5:6b:31:38:bf:b3:57:11:2d:bb:ad:3d:3e:f3:
                    16:55:5b:d0:2b:2b:50:27:98:b7:af:9d:44:a2:b5:
                    08:e2:23:b9:f8:16:7b:2d:9b:da:cd:24:d1:e4:dc:
                    1e:21:4a:28:4e:96:91:f4:09:60:01:bd:95:45:87:
                    4a:b6:85:1b:68:ad:54:da:07:cd:f7:7b:e0:0f:74:
                    8e:bd:56:f2:41:aa:cc:52:08:3c:eb:08:dd:b8:6a:
                    67:50:de:22:fd:85:54:45:c9:6c:74:7d:d3:57:e3:
                    38:6e:63:dc:4c:5c:47:44:43:fc:8a:35:bb:e3:40:
                    b0:1b:d3:f7:ce:18:22:01:e7:0f:7f:66:ee:2e:40:
                    a3:29:15:36:d4:b3:3c:7e:16:6a:75:1f:cb:ee:11:
                    4d:4b:b9:f0:fb:5f:c7:d5:5b:c3:95:59:ed:09:dd:
                    82:49:de:b1:78:c2:28:ac:b7:1a:46:fe:16:df:23:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:07:47:93:86:94:E4:45:A7:C3:BC:6F:D5:A1:CE:68:99:B5:8B:24
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:d6:d5:22:82:ad:43:89:0b:44:46:5e:58:7f:98:20:82:
         30:eb:3f:9c:50:25:00:0f:90:70:83:d3:ad:31:f1:17:01:61:
         6d:25:d0:d4:ad:06:78:41:85:58:77:16:8a:76:1a:80:20:81:
         2d:d6:79:39:72:9b:89:dd:af:11:17:01:4e:d1:76:8a:a0:aa:
         1d:a3:91:35:b2:ce:cc:a3:2c:1d:69:66:9b:ec:f6:1a:b3:cf:
         1d:89:25:ed:ed:63:7d:42:53:c2:a2:97:aa:6d:db:81:e3:fc:
         6f:14:83:c5:3b:4f:d4:79:3d:ff:02:23:d4:d7:b1:3a:53:aa:
         7f:43:58:0b:2f:d1:b5:6b:a1:45:c0:5a:57:ad:2b:d3:b1:ff:
         e3:c7:24:d8:ad:ab:87:f1:71:f0:12:35:62:98:45:64:c1:32:
         c9:91:a7:51:6b:86:a4:28:59:9f:b1:fb:62:44:fe:4f:17:76:
         59:a8:e1:11:4c:98:11:df:58:8d:04:99:9f:06:d3:39:59:48:
         6d:92:a4:e7:7d:b3:88:04:bc:77:54:20:a1:04:02:03:c0:d7:
         88:37:c8:6c:c2:34:a2:34:f8:40:59:9b:1b:40:78:4b:43:ea:
         c6:76:eb:e8:36:7c:a4:fe:33:ed:83:6d:b3:d9:6e:0f:79:00:
         92:17:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org