Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa
File:                     34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier:          hbpaoKVDG6ug6vP94TFZB6BGZsWNr7lUPHXHgMogTXM=
Subject key identifier:   42:1E:7F:D1:CC:EA:F1:13:73:8C:14:46:77:3F:2A:F9:53:0C:56:69
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       287D5F48ABD8B4994E26C4E2AAFE5C94BA435D24
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa
Signing time:             Sun 12 Feb 2023 22:57:19 +0000
ROA not before:           Sun 12 Feb 2023 22:52:19 +0000
ROA not after:            Sun 11 Feb 2024 22:57:19 +0000
asID:                     209260
IP address blocks:        45.156.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:5f:48:ab:d8:b4:99:4e:26:c4:e2:aa:fe:5c:94:ba:43:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Feb 12 22:52:19 2023 GMT
            Not After : Feb 11 22:57:19 2024 GMT
        Subject: CN=421E7FD1CCEAF113738C1446773F2AF9530C5669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:60:12:79:ab:31:2d:d7:8d:52:5c:9d:a6:
                    31:f3:bb:f9:91:68:b3:e2:7b:17:a2:60:27:8b:b8:
                    14:2e:65:ac:81:c3:14:1a:77:c4:2a:1b:65:9d:82:
                    aa:ca:bb:91:c7:71:f2:e9:d4:ad:1b:41:e8:03:53:
                    62:1d:a3:67:92:b7:ac:60:4b:ca:1c:81:d2:35:43:
                    13:f3:14:3e:73:ef:ba:21:29:25:70:e0:8e:47:6a:
                    ed:e0:be:fa:ad:28:e6:27:18:ee:7c:9a:c2:04:98:
                    22:24:3e:2b:04:72:24:91:27:a3:d3:41:07:2f:1b:
                    0d:f3:4c:33:a2:30:dd:fb:8d:5f:c3:05:ab:f6:87:
                    a9:aa:3e:25:1e:97:d0:e3:60:f9:f9:14:19:3a:09:
                    47:d5:0e:2a:2a:34:d7:cb:7f:53:29:54:f8:fd:a5:
                    4d:5b:f5:99:c7:de:a2:85:e3:e1:35:50:8b:7a:72:
                    24:27:0c:b1:64:9d:f5:63:4c:72:c6:af:ef:cc:11:
                    ca:0d:01:64:99:7d:95:4e:37:1e:f0:63:53:fa:72:
                    b0:e8:c9:94:18:ac:f3:8f:d7:1f:c5:56:3a:0e:7d:
                    c7:60:44:70:73:ff:b6:60:a0:0d:14:2d:97:39:74:
                    45:5c:de:52:2f:d8:08:e1:df:83:bf:f8:80:da:14:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:7F:D1:CC:EA:F1:13:73:8C:14:46:77:3F:2A:F9:53:0C:56:69
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:b4:24:f0:7e:60:25:9d:5c:76:4e:86:d4:02:2a:6e:52:
         2f:e5:66:36:e4:31:e4:0f:0d:5f:a6:60:34:5a:86:4a:0f:15:
         86:4f:0b:f0:d7:7c:ae:c7:29:3d:a2:22:ad:64:b8:ed:54:5d:
         b2:eb:b4:c7:f3:82:d2:58:a7:e7:b3:7a:d4:00:0a:ff:03:0f:
         1f:0e:54:1a:ee:7f:3e:9d:f6:5b:2d:65:d7:0b:48:3e:56:73:
         05:dc:8f:74:cb:43:db:4e:a7:e3:3b:e4:30:94:9c:b9:58:81:
         69:61:76:e9:30:20:2d:1a:d3:02:d0:fb:5c:ab:49:b3:5d:ce:
         d5:ec:75:75:db:70:71:51:13:e7:ea:2e:c6:d3:91:f4:28:d5:
         a4:db:d0:61:37:b7:88:d4:d8:db:70:48:86:3a:79:09:22:7c:
         9f:0d:50:92:fd:af:c8:b9:ef:8c:ea:d4:97:83:6c:12:bc:a9:
         4f:a9:8e:fb:49:8f:43:cc:2c:c4:67:2d:86:25:41:07:22:c6:
         03:8f:40:9f:ab:40:f7:73:0e:0a:a0:1d:89:d5:21:30:93:75:
         27:28:2d:f9:87:e6:76:a7:cb:99:7b:b6:2f:65:66:cc:37:7c:
         fc:79:5a:de:d1:bc:38:d8:35:10:3d:54:3f:c7:b8:ba:77:20:
         b1:e8:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org