Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3133392e302e302f32322d3234203d3e203631333137.roa
File:                     3138352e3133392e302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Ro3Lg8Ve+aInpnFOLarhXu3YnpC8b6a/SEcGp0uSYTg=
Subject key identifier:   72:89:2C:39:DA:C3:62:18:72:0E:5D:1E:81:D2:91:38:72:BE:2C:83
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       732C41E2A535EB920FE22CC78DFE786FDB7398FF
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3133392e302e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     61317
IP address blocks:        185.139.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:41:e2:a5:35:eb:92:0f:e2:2c:c7:8d:fe:78:6f:db:73:98:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:26:f7:bc:45:f9:27:e4:69:63:80:74:74:
                    eb:54:87:96:40:b5:3a:26:5f:de:fd:a1:9d:e3:56:
                    66:f6:fd:a7:98:32:57:dc:c5:24:e0:cc:35:59:41:
                    9d:21:3e:0d:37:46:8c:9f:84:07:a4:c9:45:27:a8:
                    78:7a:ea:e3:51:4f:99:ef:f7:aa:67:f2:fd:88:28:
                    af:33:ac:ea:a1:c4:23:d4:23:97:d5:94:83:28:14:
                    76:1f:c4:7e:71:84:50:34:20:1e:fd:f5:2b:1c:bd:
                    e5:cf:87:e2:94:8a:6c:8c:d4:cc:7e:a7:93:14:fb:
                    da:ba:a4:5e:1f:21:d7:00:e1:fe:d3:6a:9f:a0:f1:
                    00:f7:25:64:67:fb:f1:88:f7:5b:6e:fe:e3:23:96:
                    c0:95:bb:12:f3:9f:f2:38:35:3f:2e:85:cb:c4:8e:
                    46:63:6b:6a:82:2e:93:59:50:94:20:50:9c:bd:6c:
                    27:7a:42:eb:a8:cd:36:b0:e4:82:4b:c7:a8:52:f3:
                    b3:1d:b6:88:5e:11:5b:ce:31:01:d7:a4:f0:41:dd:
                    c7:c6:b6:fb:33:ad:f4:eb:75:35:3e:c5:04:68:47:
                    20:a7:e5:2c:8a:fb:75:d3:82:2d:20:f1:90:81:bd:
                    7b:a9:97:da:26:e3:0e:61:68:55:59:29:2e:4f:3a:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:2C:39:DA:C3:62:18:72:0E:5D:1E:81:D2:91:38:72:BE:2C:83
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138352e3133392e302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:f5:54:6e:f2:e2:7a:08:99:34:37:56:70:f9:b4:4e:b9:
         42:cc:49:fc:9c:71:13:d0:39:33:e3:d7:e0:1d:45:a4:ab:8b:
         b5:67:a3:9d:92:3b:e4:fa:da:b9:b7:4b:d1:a5:03:22:a2:6e:
         00:fa:c4:fb:10:7e:1b:d0:26:a9:d3:e4:34:6e:26:f5:a4:c5:
         1a:d9:42:f8:cb:e1:57:1c:62:bc:89:4e:3a:95:47:64:91:d2:
         10:42:6c:23:22:2a:62:fc:fe:a4:28:56:01:f6:35:11:71:0e:
         3f:68:6c:0b:2d:7a:f1:3d:0f:29:03:52:89:d0:c3:5e:97:da:
         03:21:dd:f1:16:6e:1c:3b:03:83:17:26:e7:0e:5e:21:50:c6:
         0e:4b:c9:0a:d8:dc:64:90:22:88:68:e7:53:89:fd:18:78:a2:
         f9:c8:cb:cf:a2:7e:9b:67:b4:7a:fa:72:0c:6c:78:c6:90:96:
         02:7a:4a:cd:9e:ef:d7:4a:03:49:5d:3d:37:2e:7d:de:3b:69:
         f4:24:3d:94:5d:25:2b:04:77:82:db:ef:8e:e2:5d:4b:02:f9:
         73:1e:53:24:7d:7d:94:fc:1d:b4:e3:28:ae:84:39:07:7a:cc:
         6c:7e:f7:c4:5f:51:d7:40:e3:c7:31:d4:ad:74:03:6e:7c:2f:
         90:ce:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org