Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa
File:                     34352e38312e35392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          Qw04lZ1iJ323QuzgvP/+IlH8wYBI/s0VlCIhhwsDVIA=
Subject key identifier:   24:59:ED:51:79:D8:8E:84:01:CC:B9:57:8A:57:B4:7D:34:5C:E2:58
Certificate issuer:       /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial:       632942E96806774C5C06DC1AA21402BCD9340F73
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 06 Dec 2022 00:28:58 +0000
ROA not before:           Tue 06 Dec 2022 00:23:58 +0000
ROA not after:            Tue 05 Dec 2023 00:28:58 +0000
asID:                     212384
IP address blocks:        45.81.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:42:e9:68:06:77:4c:5c:06:dc:1a:a2:14:02:bc:d9:34:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
        Validity
            Not Before: Dec  6 00:23:58 2022 GMT
            Not After : Dec  5 00:28:58 2023 GMT
        Subject: CN=2459ED5179D88E8401CCB9578A57B47D345CE258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:60:a3:06:12:39:14:2b:a2:59:f8:0a:c6:
                    fa:be:27:bd:c8:73:c5:6d:6c:0b:8b:c7:f5:25:f2:
                    e0:d1:4f:7f:0e:e2:57:7a:19:33:5c:a7:95:a4:6e:
                    1a:85:12:cc:c9:6b:34:bb:cd:95:70:a5:3c:01:ed:
                    26:14:09:95:77:db:2d:31:a6:75:66:c6:a8:2f:ac:
                    9d:2d:cc:cc:8e:ec:b8:4e:9a:00:85:08:5c:2a:bc:
                    c8:57:3b:55:83:2b:2d:b3:08:5b:af:93:9f:50:b5:
                    6f:e1:0c:c4:e1:27:92:fb:26:e6:3f:ea:55:4f:26:
                    93:65:53:04:09:47:d1:bd:5b:88:5e:c2:11:c6:35:
                    5f:76:c6:ea:da:e0:df:53:bd:07:3b:20:59:6a:fb:
                    2b:e3:ca:b1:59:79:a9:1b:8e:99:25:98:25:39:85:
                    44:b8:0b:34:7c:89:2a:43:06:8e:0a:d8:dd:e0:98:
                    0e:d9:70:d9:88:86:be:a7:b0:2d:33:22:1a:a4:f1:
                    de:78:c0:8d:77:7b:ef:86:55:d5:e4:d0:23:da:c4:
                    b8:7a:c0:a5:f4:1f:97:91:9c:02:f1:5e:cb:b2:05:
                    06:33:49:8f:3e:34:c2:d6:4c:39:c4:c8:af:99:43:
                    2a:7b:48:5d:4d:b4:da:c3:53:8a:87:f2:9d:f0:3e:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:ED:51:79:D8:8E:84:01:CC:B9:57:8A:57:B4:7D:34:5C:E2:58
            X509v3 Authority Key Identifier:
                keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:29:e4:83:9c:73:b3:fb:2d:c0:a4:ee:82:d2:87:f2:2f:e2:
         af:ee:ef:2d:4f:23:e1:c4:ad:8b:0b:a7:b6:95:0a:92:65:24:
         6c:31:6d:97:a3:42:d2:15:96:5f:66:31:a5:2e:f8:34:00:e0:
         ec:6c:64:04:f3:68:77:16:11:6f:bb:a5:be:25:80:bd:7a:69:
         ce:7a:35:4f:56:5c:83:85:f3:90:77:0a:0e:f2:30:53:0c:61:
         74:11:ea:bc:91:0e:e7:f1:d9:4f:d9:6b:61:e2:e9:3c:09:b7:
         93:8d:b0:41:66:7f:bd:42:7d:b3:1e:87:86:a0:75:9d:11:13:
         3f:7c:42:b4:5f:69:4a:39:30:d7:17:50:aa:67:c0:ff:6f:90:
         5d:41:a4:d9:a6:fd:1c:3b:ef:28:04:ca:60:a6:42:35:23:90:
         7a:f7:f1:e1:7c:33:4f:00:c3:04:a4:55:06:8b:28:f2:c7:54:
         5c:a9:a2:1f:8e:a1:3f:06:6a:69:11:7f:de:84:92:42:1e:c2:
         a9:d7:71:30:d0:c9:62:f3:62:8c:19:e8:2e:cc:8e:ec:29:e7:
         b3:44:d4:b3:8a:e5:03:5f:c0:0a:9c:ab:0a:b1:b7:47:99:15:
         76:19:9d:b8:11:d0:c6:4c:05:99:5f:e4:1b:47:b9:2a:13:35:
         27:f0:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:24 2025 by rpki-client