Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Z5jwzEjWC48qyFIudyqryRZnOJW2cSR7V4kVTT4KKJQ=
Subject key identifier:   12:09:E4:23:67:D8:55:E0:B4:EF:27:4B:96:B0:25:28:78:40:DA:15
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       1A7B1C70A74F4B63AF5E43DA7169B5784CCEA085
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa
Signing time:             Tue 07 Jun 2022 09:10:31 +0000
ROA not before:           Tue 07 Jun 2022 09:05:31 +0000
ROA not after:            Tue 06 Jun 2023 09:10:31 +0000
asID:                     398465
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7b:1c:70:a7:4f:4b:63:af:5e:43:da:71:69:b5:78:4c:ce:a0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  7 09:05:31 2022 GMT
            Not After : Jun  6 09:10:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:19:91:0c:c2:22:28:b1:da:50:2c:d3:e0:
                    bb:4f:4c:5a:ae:d9:ed:dc:b6:75:94:20:84:74:ba:
                    96:15:a9:85:0f:11:7c:50:b3:30:9f:2b:0a:a0:4e:
                    d0:30:74:de:ec:d8:6b:e1:62:1d:c9:e5:a4:82:cd:
                    9c:da:ef:b4:e9:87:cf:fd:7e:b1:61:25:c3:ff:86:
                    1b:c4:c8:c7:71:85:65:3c:5a:6e:3b:26:4b:f5:44:
                    7b:fb:13:c5:01:7f:00:d0:1b:7d:27:4a:0e:63:31:
                    8f:56:20:6b:9d:03:d6:b7:ec:b4:9b:b1:31:c4:cc:
                    d9:91:d7:a6:cf:df:2c:a5:22:65:12:77:d0:c4:94:
                    be:0f:99:82:72:89:bd:c8:a8:b0:fb:0c:1b:40:e0:
                    ad:5e:8e:3a:8c:17:a5:16:fd:ae:eb:5e:c6:15:93:
                    33:2e:e0:50:ba:5e:cf:d0:6e:6b:9e:31:e1:02:16:
                    42:5f:db:4c:a8:e6:99:63:49:ec:0a:cd:0c:18:cf:
                    11:90:a0:cc:b3:2b:3f:b0:f8:a7:cb:6c:85:66:d4:
                    59:35:b4:04:36:3d:e1:f0:f6:0e:2e:23:de:4e:aa:
                    cc:c8:41:3c:41:fc:18:d4:5a:a7:a2:8a:36:de:90:
                    61:fa:09:5b:64:7c:76:6e:7b:42:18:6e:39:d4:d7:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:E4:23:67:D8:55:E0:B4:EF:27:4B:96:B0:25:28:78:40:DA:15
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:f5:6e:4e:7e:1f:0f:0f:db:87:a9:4e:dd:d5:c1:d1:70:
         77:f3:2b:cb:7a:d8:25:b5:b4:1b:70:d9:f9:53:38:14:4d:4c:
         ec:f9:13:9b:f0:08:cf:6c:87:5d:99:e1:d9:da:24:4f:cc:4b:
         5d:fe:f0:0b:a0:c0:79:6b:6a:a0:57:16:21:a1:ed:89:ed:91:
         63:6c:08:4d:58:72:74:d1:ea:31:51:d9:03:83:ea:db:65:63:
         16:20:49:a9:cb:91:7d:8c:99:a7:0e:10:2c:97:71:4a:00:20:
         9e:c5:60:ad:3a:60:a4:1f:f7:f3:dd:5a:f2:bf:18:6c:a3:22:
         97:93:90:09:5a:34:a4:9e:34:c3:98:6b:e3:2d:e3:78:e6:7e:
         61:9f:08:af:61:9e:bb:0a:da:62:25:bb:30:c8:9d:48:4c:fd:
         38:e4:fa:2b:ea:5c:c1:b0:28:3c:1b:08:c8:cf:bc:8c:fd:e5:
         29:df:4e:1f:95:9e:be:bc:79:dc:44:19:47:37:4c:86:fb:e0:
         c4:a7:3f:76:26:cd:13:c2:89:c2:b7:b7:aa:af:80:15:34:10:
         ee:16:d6:aa:6b:e0:13:f7:1a:2a:6f:dd:89:28:33:1e:d7:70:
         15:ec:2f:d3:0a:07:42:59:be:02:67:0f:44:b3:ab:56:65:2d:
         32:36:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org