Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e203633303233.roa
File:                     34352e38312e35362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          bjqCjMJjUzqE6XW62s5aW+uPpJLVqC5N8DLyLBXGkS8=
Subject key identifier:   2C:20:81:44:E4:5F:5E:EF:3C:AD:69:B3:AD:9A:76:36:C7:89:47:8D
Certificate issuer:       /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial:       062A2A6DEADC58B080C6994FFB48E47550B0E07F
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e203633303233.roa
Signing time:             Mon 16 Jan 2023 16:05:07 +0000
ROA not before:           Mon 16 Jan 2023 16:00:07 +0000
ROA not after:            Mon 15 Jan 2024 16:05:07 +0000
asID:                     63023
IP address blocks:        45.81.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2a:2a:6d:ea:dc:58:b0:80:c6:99:4f:fb:48:e4:75:50:b0:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
        Validity
            Not Before: Jan 16 16:00:07 2023 GMT
            Not After : Jan 15 16:05:07 2024 GMT
        Subject: CN=2C208144E45F5EEF3CAD69B3AD9A7636C789478D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:26:c6:67:32:87:c6:94:7a:9f:b8:4c:f0:
                    af:6f:2f:e6:f3:7b:56:a9:7e:55:04:8b:14:4f:71:
                    2a:94:20:e3:4a:0e:52:33:39:e7:90:ea:f1:f0:68:
                    f6:cd:ea:de:44:21:1c:4a:8f:6c:78:80:46:98:70:
                    40:fd:f4:ad:b6:c0:77:f9:a1:db:63:bf:ed:74:17:
                    8f:32:25:b9:3b:d8:8c:b9:b5:30:ce:92:1c:e9:c8:
                    74:d1:16:65:7b:18:d0:f0:05:6f:48:6f:ff:16:9f:
                    eb:b4:2c:7b:b5:72:06:d6:93:bf:88:54:d9:2d:a9:
                    de:4d:00:a5:21:83:5a:57:0c:00:2e:d6:43:ae:c7:
                    24:26:9c:08:55:41:1b:1a:60:3f:0c:f7:a4:6c:f7:
                    fc:ed:2d:45:86:ed:bb:fa:41:27:42:ca:f4:03:d6:
                    06:59:ac:bf:4b:23:ff:23:9d:bf:b2:1c:88:df:04:
                    ee:b4:bf:53:e7:c5:57:11:51:d2:5d:92:c6:9d:93:
                    c1:2d:86:1f:73:8d:21:70:6c:c7:af:eb:6a:ac:61:
                    5b:40:64:08:56:dc:6e:4b:32:49:10:72:85:5f:54:
                    19:8f:05:ab:9e:37:ad:40:52:37:ba:18:36:a5:7e:
                    b4:48:fa:5d:73:ab:c6:35:34:dc:3a:8b:ee:ef:1e:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:20:81:44:E4:5F:5E:EF:3C:AD:69:B3:AD:9A:76:36:C7:89:47:8D
            X509v3 Authority Key Identifier:
                keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:56:d6:64:d0:74:57:53:76:4b:2d:c7:d7:ed:dd:39:d0:0c:
         91:91:52:85:a9:33:f8:6c:1c:b6:a6:f8:21:43:87:2a:5e:70:
         6d:83:7f:83:ac:f4:24:b4:43:b7:23:e5:c0:0d:73:2d:e3:ce:
         a5:01:ed:59:c1:6e:b6:fa:ae:c6:b8:e1:37:60:b5:c6:20:f8:
         6f:97:7e:98:5e:ad:3a:21:ee:32:b1:b3:11:be:c9:30:fc:df:
         b3:4c:e4:17:42:e8:dd:66:14:c2:5a:1e:8e:37:29:96:43:28:
         88:e1:5e:80:42:0f:f6:bf:5d:9c:65:52:97:7f:28:fe:b0:d8:
         3c:f2:4e:44:e2:2f:6c:a4:43:e4:18:89:49:69:de:41:67:22:
         7e:00:45:0a:a1:57:84:1b:de:50:e9:e1:74:51:6a:2e:2e:d9:
         34:44:c7:27:f1:c9:e2:f3:97:6c:3d:d6:77:47:e4:6e:c1:de:
         1e:10:f8:60:d2:a8:ed:9f:49:6b:a3:f0:79:e1:4e:b5:79:d7:
         ce:d4:98:e4:b1:52:c5:41:84:4c:b1:18:e0:c0:39:b0:0c:77:
         5a:15:0b:01:bb:03:73:4b:9a:bf:7c:30:d7:ef:dd:b3:1c:dc:
         3b:43:dc:1a:3e:b3:d2:66:86:69:57:01:d4:4b:87:46:20:6e:
         3f:2d:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:10:22 2025 by rpki-client