Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e203630373231.roa
File:                     34352e38312e35392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          5emB8Ac5Fg/10Ad9rcuzl/eg9ej4B2eyfvRDzwN/qs8=
Subject key identifier:   99:3D:53:6C:76:3F:98:38:DF:F4:A4:F3:A5:C0:3A:3E:A3:44:95:C0
Certificate issuer:       /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial:       54274FB95C046127B16699E13266EE1D7EFB674F
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 05 Dec 2022 12:32:38 +0000
ROA not before:           Mon 05 Dec 2022 12:27:38 +0000
ROA not after:            Mon 04 Dec 2023 12:32:38 +0000
asID:                     60721
IP address blocks:        45.81.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:27:4f:b9:5c:04:61:27:b1:66:99:e1:32:66:ee:1d:7e:fb:67:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
        Validity
            Not Before: Dec  5 12:27:38 2022 GMT
            Not After : Dec  4 12:32:38 2023 GMT
        Subject: CN=993D536C763F9838DFF4A4F3A5C03A3EA34495C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:83:71:e2:e1:ed:4b:c2:19:e5:4d:af:e2:
                    42:0b:05:c7:a8:38:f2:8a:ef:94:67:8b:2c:c8:b6:
                    49:c9:39:53:77:0e:73:39:ec:b8:c5:5c:86:38:73:
                    b2:e5:12:96:49:35:23:07:8a:10:12:8d:15:39:14:
                    c0:ac:a8:0f:b9:63:aa:a5:01:73:f1:d1:9a:33:e5:
                    c0:ef:e8:bf:41:08:94:98:7e:f7:37:43:be:41:c5:
                    80:2b:8a:e2:88:cd:88:2a:3a:cc:cd:44:fe:59:3e:
                    ea:48:1f:a0:20:69:51:af:c5:19:43:a8:79:93:44:
                    b7:19:6b:80:25:18:f6:62:0c:70:bc:b7:ad:bb:50:
                    50:e4:ea:1a:b0:f0:20:a5:9d:ab:e2:e1:82:b6:83:
                    be:05:1c:12:7d:eb:f9:b3:51:40:d2:17:02:e0:ac:
                    d1:8c:de:29:b0:8d:b8:64:02:47:58:73:83:1b:c1:
                    cd:c4:09:40:90:27:6d:c6:f3:2b:3a:73:d6:39:2b:
                    75:88:e3:60:32:25:12:cc:b6:67:9f:74:c4:94:f0:
                    db:f5:da:42:35:0b:0c:53:92:c0:2d:62:aa:99:fe:
                    87:bf:2e:2c:5e:a5:ea:05:08:24:ed:a0:ad:7f:c4:
                    7a:cd:e5:74:5d:79:a1:b6:5c:8a:6e:40:58:65:39:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3D:53:6C:76:3F:98:38:DF:F4:A4:F3:A5:C0:3A:3E:A3:44:95:C0
            X509v3 Authority Key Identifier:
                keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:08:16:c4:69:06:47:93:0b:9d:6c:d6:84:da:82:9a:03:b4:
         4a:8e:94:83:88:66:98:87:9d:af:ae:0b:6e:4d:47:8a:8a:51:
         67:2f:d4:5f:1a:ce:84:9e:b2:05:bd:f9:1d:be:ea:63:b9:a3:
         e3:90:86:1a:47:fd:51:a8:d1:b0:f6:79:c6:cc:37:ed:95:ec:
         48:c6:5f:23:e9:ee:04:df:0e:06:d5:d1:80:98:ed:70:ab:b5:
         d3:e4:39:d7:7f:d7:1b:7c:99:0b:f1:36:0a:9a:85:d9:53:90:
         ed:96:1b:f7:86:7a:92:76:09:94:9c:2c:1a:d5:2b:05:38:38:
         63:86:3a:00:a3:90:cb:6d:4e:9a:5b:d2:38:37:3f:08:2f:1f:
         86:00:22:85:73:6d:24:98:8a:ea:9a:2c:62:85:eb:e7:69:cb:
         cf:b0:e3:8c:75:8e:4c:d6:29:5b:bd:d4:0a:a8:96:99:8d:6a:
         b0:a8:1c:45:de:f4:ad:d3:13:03:a7:04:eb:d1:4f:04:3c:78:
         5b:cb:38:22:6d:f2:b5:e2:6c:9b:b1:77:7f:85:29:3e:fb:72:
         3e:c6:68:f6:62:1f:d6:ff:e6:7e:55:48:45:e4:da:87:e1:12:
         78:8a:c3:61:04:94:79:0b:02:b0:d8:61:78:f4:50:70:13:9e:
         1a:47:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:06:32 2025 by rpki-client