Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          r6BcyuklmDckK9zDonhfo1GFrfccMngAtAnZesMSJuc=
Subject key identifier:   9F:D6:86:90:E8:4D:96:D8:06:F4:72:EB:3C:89:08:03:8F:12:FF:F5
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       1085B2C9D6AFE2562266C4401D7CBD40CC347129
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa
Signing time:             Fri 10 Jun 2022 19:17:06 +0000
ROA not before:           Fri 10 Jun 2022 19:12:06 +0000
ROA not after:            Fri 09 Jun 2023 19:17:06 +0000
asID:                     211585
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:b2:c9:d6:af:e2:56:22:66:c4:40:1d:7c:bd:40:cc:34:71:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun 10 19:12:06 2022 GMT
            Not After : Jun  9 19:17:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:60:c1:e1:04:88:14:73:17:a4:73:f2:4e:
                    50:ca:53:c8:46:38:2a:62:fa:8c:ba:56:18:e6:df:
                    3e:7c:29:76:0d:11:b2:a6:87:f4:9a:99:9a:73:6d:
                    87:73:08:2f:26:d4:dd:cd:55:fe:43:41:7c:5e:81:
                    2f:77:b4:07:30:d3:36:9e:ba:41:b5:20:6c:7f:50:
                    d0:4b:de:be:28:81:24:0f:aa:8e:af:f0:f4:b9:64:
                    0c:51:21:32:9d:a0:55:63:88:3f:a7:4f:51:2b:66:
                    c8:c9:c8:d5:67:63:f0:84:29:8f:8a:ef:a9:84:20:
                    be:55:0f:a2:c6:eb:87:45:0c:85:7b:07:19:51:58:
                    ae:b7:89:8a:0f:f1:a0:56:55:d2:b8:20:df:59:26:
                    95:3a:24:71:42:bc:50:73:a1:3b:79:04:41:54:c9:
                    f6:4e:53:db:e3:a7:d3:fb:9f:f3:d5:ce:da:64:a2:
                    e1:db:22:d6:5d:99:8f:42:f6:c1:e1:b3:f2:3d:53:
                    64:15:a0:f6:5c:aa:65:3a:35:4a:e5:e7:70:8f:52:
                    fa:a6:98:2d:a1:96:4f:bc:5d:4c:7e:e4:39:8e:28:
                    c7:0c:69:3f:5e:cd:19:67:2f:46:f6:cd:d0:1f:14:
                    d4:aa:e5:38:7f:65:dd:89:ea:b5:66:8d:31:f1:9b:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D6:86:90:E8:4D:96:D8:06:F4:72:EB:3C:89:08:03:8F:12:FF:F5
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130342e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:81:0a:03:b4:52:b6:2e:11:55:b6:8a:c1:69:32:56:14:17:
         0b:a7:6c:ed:ff:a8:70:06:78:1d:1c:6e:17:09:b1:94:c7:4e:
         dd:c7:f8:c0:ed:c3:ce:6e:66:71:2f:59:eb:4f:6b:5d:97:f2:
         97:ca:a0:f7:9c:77:5c:4e:a7:37:35:18:9d:20:9d:81:26:b5:
         10:1f:cb:0d:ab:54:8c:6f:c6:c9:8b:29:45:c0:a7:91:ac:b9:
         cf:ef:f8:d3:ff:7d:9f:15:07:f1:0a:eb:07:3f:bb:ae:9d:d4:
         95:6f:56:47:1d:d1:f8:0d:68:21:df:f1:bf:0a:6c:84:f6:13:
         95:73:a8:09:8e:bf:bb:e7:2b:6a:83:cb:f4:ec:ed:63:41:9f:
         86:94:ca:c8:37:17:aa:b3:fd:cb:df:e7:e4:aa:74:e2:08:3c:
         a7:74:41:9c:5d:45:b3:ba:57:52:d3:b1:2f:ba:b7:74:0f:32:
         c7:29:11:77:7d:b6:3a:9f:01:14:37:a4:fa:94:b0:53:fb:74:
         36:4b:17:42:e6:1d:ba:ab:36:4d:09:f1:ec:22:e1:0a:ac:18:
         11:e2:8e:30:49:06:53:eb:8c:8b:09:e5:88:bb:2b:df:cc:0b:
         c8:bb:e3:7f:8d:fb:58:97:c7:49:39:6e:87:6c:7c:9f:47:b7:
         84:82:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org