Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132322e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3232372e3132322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          C41I7FBPINlwDrePtZ1sy2v9mPtLRRzC5f7N3fUckV4=
Subject key identifier:   BF:10:E4:13:2F:93:30:0F:5C:53:FF:EB:FB:09:EC:CA:50:0E:B1:6D
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       41855F52279148EFEE3C34E61E5654EE34400571
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132322e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 29 Dec 2021 11:12:05 +0000
ROA not before:           Wed 29 Dec 2021 11:07:05 +0000
ROA not after:            Wed 28 Dec 2022 11:12:05 +0000
asID:                     212238
IP address blocks:        193.227.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:5f:52:27:91:48:ef:ee:3c:34:e6:1e:56:54:ee:34:40:05:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 29 11:07:05 2021 GMT
            Not After : Dec 28 11:12:05 2022 GMT
        Subject: CN=3082010A0282010100C696BC3EFD5344A3DE6A096D33E5A9360D4788C185D9EA9C91597B5535E18828D720696A76B553B7C38E99511E113CACD7BDFA2110053EE59D3FB9FF5783823C8BBD9E4C55908D04FE293B9159B4514441F824A7184CFF88A35A8D7192944860B9C66C54A6E5FA135F19B09864D94579860AE2E349C8D9452898E6B922707C71FA0773FC0CC13103938FAF7B78FF6E0523449CDB3E91FE97BBE3123B6F1BC2535BC9F5AEE6EEE5CA92DB1A74F6866ECD9FEE0A8AC3042954C6F669EDF6058985656C6D611A2E750A8C38A0E66D2C2E88CE6C21CD02F755189022F040499EE57F53BF91CFD7C826EC7283FC84C4D67730876EBBE09A2380EF174321C2FAAA58E10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:bc:3e:fd:53:44:a3:de:6a:09:6d:33:e5:
                    a9:36:0d:47:88:c1:85:d9:ea:9c:91:59:7b:55:35:
                    e1:88:28:d7:20:69:6a:76:b5:53:b7:c3:8e:99:51:
                    1e:11:3c:ac:d7:bd:fa:21:10:05:3e:e5:9d:3f:b9:
                    ff:57:83:82:3c:8b:bd:9e:4c:55:90:8d:04:fe:29:
                    3b:91:59:b4:51:44:41:f8:24:a7:18:4c:ff:88:a3:
                    5a:8d:71:92:94:48:60:b9:c6:6c:54:a6:e5:fa:13:
                    5f:19:b0:98:64:d9:45:79:86:0a:e2:e3:49:c8:d9:
                    45:28:98:e6:b9:22:70:7c:71:fa:07:73:fc:0c:c1:
                    31:03:93:8f:af:7b:78:ff:6e:05:23:44:9c:db:3e:
                    91:fe:97:bb:e3:12:3b:6f:1b:c2:53:5b:c9:f5:ae:
                    e6:ee:e5:ca:92:db:1a:74:f6:86:6e:cd:9f:ee:0a:
                    8a:c3:04:29:54:c6:f6:69:ed:f6:05:89:85:65:6c:
                    6d:61:1a:2e:75:0a:8c:38:a0:e6:6d:2c:2e:88:ce:
                    6c:21:cd:02:f7:55:18:90:22:f0:40:49:9e:e5:7f:
                    53:bf:91:cf:d7:c8:26:ec:72:83:fc:84:c4:d6:77:
                    30:87:6e:bb:e0:9a:23:80:ef:17:43:21:c2:fa:aa:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:E4:13:2F:93:30:0F:5C:53:FF:EB:FB:09:EC:CA:50:0E:B1:6D
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132322e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:c4:0a:5a:d4:e5:71:b8:e8:c6:1f:06:e7:00:54:e6:bc:
         a8:49:e2:51:17:e6:af:a1:44:6f:a9:4f:33:31:75:6d:d9:c0:
         b4:0d:d6:29:c7:53:64:43:64:71:96:02:f3:dc:a8:1e:ed:c6:
         67:3e:ba:53:d1:7a:65:dd:91:60:1d:c1:3f:1d:50:ab:93:65:
         c3:e6:bf:97:1f:09:6f:dc:34:d7:c2:41:ac:c0:14:b4:a0:9c:
         98:59:ea:4f:9a:72:6b:64:91:d8:2a:69:3c:2b:f1:0f:96:8d:
         c9:b6:fe:4b:1e:19:e3:8a:8c:8d:1a:20:16:89:3c:07:b6:17:
         cf:fe:f1:0e:13:38:c4:6d:7f:86:f7:e3:23:7f:47:b4:7b:75:
         01:42:93:a9:88:db:6d:33:c6:ee:dd:16:4d:9b:a5:44:5e:4f:
         f0:9f:f7:cf:d3:82:0d:39:22:99:f1:cf:5e:e7:ad:69:ed:a8:
         3c:83:25:dd:8b:31:f3:93:09:bb:f9:61:4c:86:34:7a:4f:af:
         d5:8e:48:22:18:fc:cd:25:8d:71:94:14:36:fd:ae:37:d3:50:
         4a:99:ae:ec:a7:89:90:16:86:15:f8:4d:49:5f:3c:b6:56:91:
         1f:90:9f:4c:a8:2e:3a:f4:78:6b:df:b3:96:25:74:13:67:38:
         93:3f:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org