Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e2031323339.roa
File:                     3231362e3132322e3131322e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Tn/l0bfmeZpV4+bDgoRL+afuTK7AV3WqOOUWNEnCb6c=
Subject key identifier:   3B:19:35:FF:C6:43:7C:F2:86:95:73:10:B1:81:D6:CA:71:8D:83:FF
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       7D5EB45D160B333BAAA313C8E4EAE4401DCE8BCF
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e2031323339.roa
Signing time:             Wed 22 Dec 2021 16:27:12 +0000
ROA not before:           Wed 22 Dec 2021 16:22:12 +0000
ROA not after:            Wed 21 Dec 2022 16:27:12 +0000
asID:                     1239
IP address blocks:        216.122.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:b4:5d:16:0b:33:3b:aa:a3:13:c8:e4:ea:e4:40:1d:ce:8b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Dec 22 16:22:12 2021 GMT
            Not After : Dec 21 16:27:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:c8:7a:3a:3b:2d:d9:7f:72:3b:e6:8b:d9:
                    1b:ea:86:5a:ae:f8:82:1a:fd:1b:4b:5a:70:39:96:
                    bf:86:0c:11:c5:6d:af:b3:5c:2b:ba:5f:94:a3:84:
                    26:d8:52:ff:be:94:01:49:b7:9d:0c:50:e6:af:b1:
                    95:64:32:02:a1:f5:a9:20:28:1c:52:53:8b:3f:8d:
                    22:6b:9a:e3:82:18:53:5a:a4:a9:d5:78:5b:71:59:
                    7e:32:d1:32:a2:6f:3c:c0:f2:4c:89:35:18:68:46:
                    56:15:cf:04:07:e5:ce:83:0d:dc:07:54:99:a1:ab:
                    04:3e:17:da:fa:cb:e2:9b:99:f5:bb:7e:49:fe:7d:
                    e2:9d:08:c9:f7:97:22:5c:aa:56:cd:3e:69:77:05:
                    29:0a:2a:ee:ad:7e:da:c5:fc:16:a5:f8:9b:c9:55:
                    1b:01:a7:74:c9:02:7a:0f:d4:4c:84:2f:93:ed:39:
                    5a:7a:9f:1b:45:5f:5c:f9:c4:a9:5d:77:88:cf:6d:
                    d7:41:7c:da:33:ea:52:89:7f:ed:73:8e:82:c3:ba:
                    5f:a1:e4:45:00:40:3e:02:13:a8:c4:28:2c:ba:1a:
                    38:48:dc:56:7d:75:dc:be:5e:45:ec:a9:5c:5f:83:
                    84:d0:8e:9f:ae:7c:3d:1d:bd:c6:61:ab:7b:77:8a:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:35:FF:C6:43:7C:F2:86:95:73:10:B1:81:D6:CA:71:8D:83:FF
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c2:d8:50:2e:5b:05:e0:e7:76:a3:dc:83:66:6a:cf:e8:92:f3:
         ae:51:6f:17:57:00:e8:fb:49:ce:37:65:8b:2f:da:2d:b7:45:
         9a:6d:11:88:c6:35:52:b3:0e:73:9d:10:f1:34:29:d1:ea:06:
         c8:d2:53:ce:b2:2b:e2:6d:11:ad:e7:25:57:ae:28:f9:cb:15:
         bf:9e:d2:75:b5:ca:fc:17:ae:b5:c8:ea:bc:30:1d:ea:3f:36:
         1d:fa:7f:6f:79:ea:b0:94:a0:35:f8:bf:93:ff:0b:97:35:af:
         67:a3:b1:29:b2:9b:86:1b:32:2a:aa:44:ed:37:79:ae:bc:7c:
         a9:f8:bb:c2:5e:18:12:5e:3b:4c:b4:41:b0:40:3c:a4:24:42:
         36:32:12:73:ec:0f:68:72:b5:ed:29:d1:33:8e:c7:f0:2f:0e:
         9a:08:a3:4c:86:16:27:e9:3e:5d:f7:a4:14:c5:90:6f:81:21:
         9a:5a:2e:d4:ba:2f:9e:f7:c6:6e:1a:9b:7c:0d:cf:c7:ee:38:
         b2:7c:8f:5b:8b:28:39:09:c4:a5:3e:40:97:5c:16:7d:86:94:
         40:12:dd:86:24:52:e3:b2:dc:f9:45:dc:bd:c6:bc:dd:51:41:
         b4:3e:17:90:f4:0e:09:18:ab:3b:ef:2c:4c:a3:96:78:76:b2:
         fb:ac:b2:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org