Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e203433323630.roa
File:                     39312e3232382e3136382e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          CSLB058kwGVIdHBzTGzdLZ5Bk8uA3pd9hqpHr4bXN3s=
Subject key identifier:   33:B7:66:48:A6:3F:7E:BE:03:27:70:DC:7D:5E:05:49:5F:F9:EF:2E
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       7178A2A2B5A33E8021514693142632E734B36F53
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e203433323630.roa
Signing time:             Fri 21 Oct 2022 06:35:20 +0000
ROA not before:           Fri 21 Oct 2022 06:30:20 +0000
ROA not after:            Fri 20 Oct 2023 06:35:20 +0000
asID:                     43260
IP address blocks:        91.228.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:78:a2:a2:b5:a3:3e:80:21:51:46:93:14:26:32:e7:34:b3:6f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Oct 21 06:30:20 2022 GMT
            Not After : Oct 20 06:35:20 2023 GMT
        Subject: CN=33B76648A63F7EBE032770DC7D5E05495FF9EF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:02:ba:db:5b:77:f6:a0:0c:d9:e2:fb:7d:
                    7a:89:3e:2f:61:ed:94:ae:8e:75:08:04:77:d3:52:
                    79:0d:18:49:e4:03:f1:32:54:c6:4e:da:ee:3e:96:
                    7e:3c:f4:f6:1b:e8:73:2f:fb:b4:06:f6:9f:97:bb:
                    3d:5c:eb:21:e1:94:11:07:79:11:81:b9:aa:5a:8c:
                    96:a2:4a:62:8e:78:87:03:4b:dc:16:ac:66:05:21:
                    39:32:d4:45:93:c6:04:75:bd:37:9d:11:fb:b8:88:
                    79:03:b2:71:df:5a:81:7b:ca:e2:ba:e9:15:36:67:
                    3d:74:76:cb:bc:0e:33:2d:c5:df:d1:62:11:b1:99:
                    ec:75:7e:07:f5:82:f4:d4:d9:cd:0f:d8:92:5f:64:
                    19:4f:20:e5:ca:62:90:ff:49:6a:1d:c9:34:ab:b5:
                    fc:48:ba:d4:ff:77:41:93:83:c1:94:b4:2a:3c:82:
                    19:75:cb:ba:55:1e:9a:13:a9:2b:96:44:cc:4c:1e:
                    b6:a6:ec:9d:b8:6f:ef:30:bc:d1:f8:31:54:f4:98:
                    81:8f:1e:47:35:d8:ea:01:ee:d5:f4:e1:80:1e:1e:
                    ce:ad:11:23:e3:83:c4:41:d3:dc:68:e5:5c:8d:8a:
                    a2:48:05:a6:5d:cf:73:9e:09:c9:7a:70:5c:80:02:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:66:48:A6:3F:7E:BE:03:27:70:DC:7D:5E:05:49:5F:F9:EF:2E
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:07:e2:54:6a:7e:dc:e1:ea:cd:25:92:f7:0d:b4:21:15:
         6e:06:0a:65:e4:a1:db:fd:15:b1:b0:17:2d:77:75:6b:66:b5:
         8f:a6:32:7b:49:8e:1f:7e:79:63:33:f6:cb:cd:d2:b9:4e:a4:
         d4:df:85:e4:a7:e5:7b:7b:d9:67:4b:28:f1:51:4a:bb:e5:1b:
         fa:4a:c0:9a:9f:1e:23:ff:02:37:ff:e7:d9:c7:8f:40:5a:3d:
         07:c8:4e:8d:9a:51:ac:ec:24:05:1d:df:30:33:8c:71:b0:f8:
         c0:29:b0:4c:de:8b:6a:75:c1:91:9c:bf:4e:fd:5f:d6:ef:5b:
         f3:52:30:f2:63:dd:20:e4:19:3d:02:59:4c:44:5b:a5:37:01:
         ad:42:d8:e0:5f:21:37:3c:37:52:c5:64:ec:fd:00:97:62:62:
         29:a9:e3:4d:64:c8:d8:00:37:af:ec:ae:0d:8f:76:0a:38:cf:
         c4:6b:62:80:e3:2d:f4:f5:61:c7:0c:35:d2:6a:7d:a5:14:9e:
         0d:ca:34:8e:13:85:90:7c:b7:bb:02:f5:38:6e:a0:db:2b:32:
         08:02:5f:c8:84:58:fd:e0:ea:74:fb:3f:41:46:34:9f:1b:c8:
         9a:bf:6c:12:d3:4e:44:7a:a1:8e:4c:d5:30:70:5f:15:b2:43:
         bb:11:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org