Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa
File:                     39312e3232382e3136382e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier:          ojY1lqPsj6YwCgGV2P4Oxk9j/8h9BGow5RtdZahh73s=
Subject key identifier:   19:2D:AA:3A:2E:93:FE:1A:D5:2E:23:6D:2D:A9:03:BB:F5:3D:7D:FE
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       28150BD7CCB0DC57E779B7E14EC68C9D38D95B5B
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa
Signing time:             Wed 02 Nov 2022 23:08:53 +0000
ROA not before:           Wed 02 Nov 2022 23:03:53 +0000
ROA not after:            Wed 01 Nov 2023 23:08:53 +0000
asID:                     984
IP address blocks:        91.228.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:15:0b:d7:cc:b0:dc:57:e7:79:b7:e1:4e:c6:8c:9d:38:d9:5b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Nov  2 23:03:53 2022 GMT
            Not After : Nov  1 23:08:53 2023 GMT
        Subject: CN=192DAA3A2E93FE1AD52E236D2DA903BBF53D7DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:ba:f4:02:8b:dc:90:22:2d:e3:5d:94:56:
                    79:dd:37:a1:04:f5:05:75:49:83:4c:ec:9c:2d:2e:
                    f1:7f:14:52:26:7a:3e:5b:24:95:ee:1b:6c:b2:6a:
                    69:25:c3:f5:18:cf:aa:28:a0:bd:2a:1d:11:e6:c6:
                    62:48:d2:f0:79:b5:fb:02:22:d4:7f:06:d6:23:73:
                    0f:08:0e:ce:33:bd:c7:61:2a:ad:b0:e1:d6:ed:2b:
                    c4:d3:9f:9f:28:13:a2:87:a6:7e:2f:a0:3c:78:ae:
                    79:8f:87:07:4f:87:c9:75:cf:8d:f0:76:a2:27:cd:
                    1e:dd:c1:c1:48:17:fa:e7:19:3b:5c:f9:9a:59:0e:
                    e2:3c:57:58:b7:9e:1d:14:dd:46:bb:c7:9d:a8:75:
                    e5:0a:13:eb:ea:65:52:f1:36:31:53:5b:dc:b8:5e:
                    56:f4:08:3f:88:5c:21:63:40:12:4d:fb:a3:ea:93:
                    aa:5f:29:56:9d:b8:22:eb:fa:74:b5:cf:a0:7c:c7:
                    5c:3e:2a:db:3e:d3:d9:7a:44:75:de:05:ab:aa:e6:
                    61:d8:fe:62:c4:78:1d:03:35:70:49:2b:c2:b4:ea:
                    db:9c:10:20:34:75:79:ff:5f:6d:2f:51:1d:8d:df:
                    60:27:b5:6a:0f:15:0d:f0:e6:82:82:61:ba:4a:09:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:AA:3A:2E:93:FE:1A:D5:2E:23:6D:2D:A9:03:BB:F5:3D:7D:FE
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:c3:2b:e6:9e:08:e6:39:6c:8e:ee:51:ac:38:90:6c:81:
         69:73:99:71:3d:ef:dc:58:9f:fc:55:bf:bc:c7:12:83:97:0c:
         9b:5a:59:f2:ed:ff:a3:a6:7a:06:4d:96:46:2d:dd:88:3e:fc:
         8b:2e:5d:fb:a2:ce:42:7c:5b:76:99:b0:8b:94:67:e5:43:8c:
         b7:d0:14:16:57:22:f2:22:1a:11:4b:f7:45:55:01:cd:9a:f5:
         d2:4d:1d:2d:a9:75:67:59:c7:15:68:1e:c5:8a:54:d0:47:40:
         60:3e:b2:6a:ba:a3:6f:96:dd:f2:2f:8c:e5:6f:a2:86:b5:c7:
         fc:f7:b8:9f:35:81:4a:73:41:b3:c1:01:78:5b:ef:8a:de:b2:
         2f:65:e3:de:ed:43:04:39:49:b6:b2:cc:e1:9f:60:95:7c:66:
         96:60:85:31:fb:ce:3e:1c:13:13:1b:29:95:e1:fc:47:9c:23:
         48:7c:80:20:79:8e:0f:cf:7e:d9:06:45:c7:68:fe:24:83:75:
         6a:d8:aa:9d:1b:8e:95:6c:d2:08:5d:d0:e9:2d:38:15:85:ab:
         a6:75:ee:11:90:66:81:73:1f:b5:2b:c4:aa:3e:3e:a2:00:83:
         c0:0c:4a:a6:b4:d2:62:57:df:d2:09:dc:5f:e3:5b:74:b3:17:
         04:2d:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org