Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          ha/5AKbXBruNNzOb464y2+kDLHhswxPYSkpGYzdHjjw=
Subject key identifier:   F4:90:2D:A8:85:20:B2:A5:C6:CE:C2:FC:9D:20:73:9F:41:4C:1B:01
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       156E6AE6387EEE4200BDEC857D67E23456011050
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     398464
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6e:6a:e6:38:7e:ee:42:00:bd:ec:85:7d:67:e2:34:56:01:10:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:64:3a:7b:ae:1b:16:07:82:17:aa:de:55:
                    9f:7b:33:88:05:cc:6c:e6:0b:44:40:88:ad:09:ea:
                    7b:9b:e6:8d:a6:9f:25:60:88:12:41:7b:91:ae:0f:
                    2e:46:32:cb:84:71:15:95:11:2e:34:0f:bf:b5:44:
                    ab:6c:20:a4:6d:56:b1:19:88:63:07:9e:a3:85:b9:
                    3a:1f:f4:ac:a2:0b:6d:26:ca:ea:45:e4:1d:e1:67:
                    3f:6d:10:51:32:97:6c:82:b5:75:ad:c4:9d:4f:90:
                    b0:44:ae:b1:37:5f:1b:c6:21:fe:ae:8f:bb:5c:7f:
                    a8:56:ad:57:c8:b2:e6:48:c2:6c:af:11:c3:26:b4:
                    d1:64:af:c9:6d:3a:fc:99:86:f9:26:d1:ad:f8:0a:
                    20:08:30:ef:f8:6f:7b:a2:c8:34:bc:6d:70:35:84:
                    d1:bc:45:ae:67:c9:fc:51:f8:20:51:17:0c:36:8c:
                    1b:2d:dd:67:23:54:44:08:3f:39:1b:32:e5:e4:40:
                    7b:4b:64:00:df:86:e8:1a:2d:3e:11:05:a3:a2:9d:
                    be:a6:d5:d1:b9:a8:97:b5:48:bb:12:5b:0d:0d:e6:
                    c7:a5:ff:4b:a3:3f:ff:3e:f5:01:67:00:ed:2b:83:
                    19:8e:a0:ee:28:1b:c6:36:91:d6:b4:7f:f1:9a:cc:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:2D:A8:85:20:B2:A5:C6:CE:C2:FC:9D:20:73:9F:41:4C:1B:01
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:70:b1:7b:b6:a2:c4:dd:01:2e:fa:4a:14:f5:ea:75:34:8a:
         09:c3:27:dc:65:ce:db:89:d1:0c:f9:bc:82:24:fb:84:62:94:
         da:24:d9:6b:0b:d5:7e:30:2f:65:3b:0e:ad:08:4c:cf:91:ff:
         dd:58:2e:60:2d:bb:8d:a5:be:76:46:2b:6f:fe:d7:94:4e:9f:
         3b:ae:f3:00:1c:27:d8:1a:01:b7:a8:62:48:cc:33:5a:6c:e3:
         27:ac:27:59:66:bf:f8:56:bf:4a:b4:4c:e4:b5:33:6e:4f:c0:
         5c:72:ac:c3:21:78:f4:c9:61:90:26:96:e2:a9:6d:43:60:f3:
         fa:06:e4:1a:3c:b2:7f:3c:56:67:0d:dd:67:6a:31:02:80:c6:
         da:a6:72:26:a0:b9:8a:41:bf:7d:9e:86:be:30:68:b2:89:1c:
         35:cf:61:ea:b8:c5:e5:39:d6:10:34:17:0a:82:68:7b:cc:a6:
         ac:e2:95:86:8a:6d:f7:70:ce:29:87:a8:41:0b:d3:c9:8d:cd:
         d8:03:0d:19:73:22:51:48:6c:66:13:cd:c0:81:dd:60:2b:e8:
         6e:d1:24:46:28:00:ca:18:98:62:4c:5f:c7:c5:e1:16:15:11:
         9a:96:ac:ba:f4:58:e5:db:9f:0d:e5:da:48:d4:cb:a8:3f:8e:
         0b:68:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org