Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3136332e302f32342d3234203d3e203435363731.roa
File:                     3138312e3231342e3136332e302f32342d3234203d3e203435363731.roa (raw, json)
Hash identifier:          9tSdPhmy53DEqiYGaepJpaL8roraKdoys/dHoOOK/Xg=
Subject key identifier:   A1:EC:1E:6B:E1:B1:4F:57:0D:2C:B3:E9:03:51:D2:15:C1:3F:ED:F8
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       22D9957D847937E674620CE5F18E865EF60F9770
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3136332e302f32342d3234203d3e203435363731.roa
Signing time:             Thu 03 Mar 2022 13:14:35 +0000
ROA not before:           Thu 03 Mar 2022 13:09:35 +0000
ROA not after:            Thu 02 Mar 2023 13:14:35 +0000
asID:                     45671
IP address blocks:        181.214.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d9:95:7d:84:79:37:e6:74:62:0c:e5:f1:8e:86:5e:f6:0f:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:09:35 2022 GMT
            Not After : Mar  2 13:14:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:54:d6:e7:48:b0:8c:fa:ad:0b:1e:f1:b9:
                    05:9e:e4:fe:ad:d9:20:1f:1d:1a:20:ac:b5:ab:77:
                    71:52:5b:2d:0b:bb:0a:5d:ff:c3:ef:d0:f8:08:e2:
                    dd:3a:49:08:1a:77:47:64:c8:3b:b9:43:43:c8:9b:
                    b2:09:48:ad:19:76:12:b2:fa:a2:3a:b0:b3:5c:75:
                    b9:db:1c:cd:03:1e:fa:83:bf:94:f0:bb:98:b3:95:
                    30:f7:20:a1:63:73:2d:cf:55:30:6a:a1:c9:35:71:
                    66:b7:42:af:47:ee:4e:e2:94:8d:c5:3d:b0:01:ad:
                    e5:cd:b4:a8:0c:81:4b:a7:50:80:1e:88:2c:5d:29:
                    ea:51:75:1a:2d:d5:8f:fb:58:c9:f7:48:61:b5:43:
                    35:d4:0f:b1:f8:96:26:5a:60:fb:d5:1b:ae:e3:00:
                    ce:2d:23:e0:f5:56:40:a1:56:16:df:84:35:9d:d6:
                    9e:26:f3:4e:5a:64:c3:bc:f6:a8:bf:40:fd:05:01:
                    de:9d:67:35:06:a8:6b:0f:22:8e:89:ad:a5:9f:ca:
                    47:06:85:8a:a8:01:f2:52:73:83:97:4b:69:65:76:
                    fc:de:73:d0:de:6b:a3:d5:9a:de:92:98:2b:02:d6:
                    46:f7:a3:00:05:f6:78:96:44:98:0b:0d:20:3e:3d:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EC:1E:6B:E1:B1:4F:57:0D:2C:B3:E9:03:51:D2:15:C1:3F:ED:F8
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3136332e302f32342d3234203d3e203435363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:80:8c:b8:f9:3e:87:1d:35:7f:02:f9:11:b3:19:f8:28:eb:
         c9:b2:56:5d:98:ca:fc:e6:4a:30:b3:c6:47:85:ab:ea:e6:ee:
         9c:f0:c3:85:34:28:12:f7:60:a4:b0:46:55:07:78:53:98:e5:
         81:00:08:34:81:4c:1a:d1:0d:4d:32:6a:5e:e3:72:eb:d2:12:
         cc:62:34:ee:3d:4e:13:56:83:52:6a:89:3f:51:99:45:cf:40:
         c3:07:60:ed:7e:06:92:3c:60:22:f2:2b:a7:1f:38:4e:3e:0a:
         af:89:96:6b:d6:69:4c:1c:07:ff:bc:c8:f8:50:96:4b:d9:1c:
         d4:45:02:35:79:79:5f:df:fb:87:76:72:c8:03:88:52:77:25:
         3f:de:23:a3:ba:9a:c6:ec:06:db:5d:fa:eb:70:7e:d0:a3:0f:
         d8:aa:e6:20:db:c6:14:c8:ef:b0:f8:73:e6:72:23:0f:b5:48:
         f8:ec:af:58:7c:43:3d:e1:06:89:60:7e:ea:82:ee:d4:03:f8:
         6f:9c:b1:0b:f4:22:1a:77:be:4a:2f:30:e1:13:5e:3f:89:7b:
         0d:21:a6:4a:6e:8c:f6:4d:7d:a7:1a:2f:f2:80:1c:10:00:73:
         0a:6a:b5:10:52:c5:7f:b6:37:9f:1d:a5:37:93:f3:3c:51:fb:
         f6:01:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org