Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
File:                     3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          USuUhi+ut7MN94SV9S4y9dX71ZO4FmqjZ33v3AQIYVo=
Subject key identifier:   B3:65:D0:4B:5A:69:42:CE:F5:91:8F:5B:B0:CD:0F:DA:6B:91:F1:80
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       68F9BF01B415D62E07BC066F3D8079D03C782598
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
Signing time:             Wed 29 Dec 2021 11:40:00 +0000
ROA not before:           Wed 29 Dec 2021 11:35:00 +0000
ROA not after:            Wed 28 Dec 2022 11:40:00 +0000
asID:                     397423
IP address blocks:        193.227.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f9:bf:01:b4:15:d6:2e:07:bc:06:6f:3d:80:79:d0:3c:78:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 29 11:35:00 2021 GMT
            Not After : Dec 28 11:40:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:c6:7d:a6:e0:53:a4:16:43:8b:03:9e:f4:
                    77:35:8f:31:30:a8:20:e5:c5:cf:37:c4:33:92:ae:
                    37:4f:a2:0d:6e:13:6c:66:48:79:5f:2a:7f:e7:e4:
                    a8:b1:30:73:d0:94:65:eb:49:d0:e7:a4:63:c9:e2:
                    09:2b:3d:1b:dd:48:da:5f:62:50:c3:be:2d:fa:b6:
                    e3:ce:f8:46:44:4a:8b:f2:2d:60:7b:43:b6:09:ae:
                    e5:88:7f:bb:84:8d:91:b1:ea:ff:b4:ab:40:d7:2a:
                    34:d0:5f:3e:70:19:bf:85:26:bd:2c:64:9b:f5:48:
                    98:10:aa:25:f5:d2:9c:fd:e0:ed:48:f1:72:58:d3:
                    c9:b9:03:51:d9:7e:51:40:f6:8d:4a:4a:65:8f:b0:
                    1a:5c:cb:36:b5:70:9f:8f:6a:14:14:68:6c:9c:b1:
                    2b:da:8d:08:04:c3:be:61:f9:76:ab:dd:83:be:24:
                    5d:f3:c2:36:02:8e:01:06:5b:29:4a:cc:54:5d:96:
                    48:43:2e:c1:fb:f1:cd:b1:d5:57:07:2e:bf:e3:d9:
                    d4:48:5e:dc:65:0a:8f:8d:1a:53:87:0a:d7:e6:01:
                    cf:98:e9:24:57:04:88:3c:a4:91:e9:9b:1c:af:6a:
                    bc:a9:45:08:fc:2e:1d:49:b7:2e:57:27:6a:ff:75:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:65:D0:4B:5A:69:42:CE:F5:91:8F:5B:B0:CD:0F:DA:6B:91:F1:80
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:09:0c:2d:de:94:74:55:da:28:f7:7e:18:87:6c:39:05:
         cd:e5:82:85:9a:c2:17:11:11:05:9a:39:e8:05:3e:2a:1e:08:
         80:a5:02:e1:f2:11:03:78:89:0b:24:23:19:41:a5:3d:a3:5e:
         47:9b:94:6f:db:43:58:59:65:69:e2:96:6e:8b:8e:b2:54:0f:
         fe:80:bf:ac:ff:ce:1f:54:6b:6d:27:9f:82:64:7d:a8:e2:d2:
         c5:a4:c6:9e:40:39:85:1a:f1:8e:ed:f2:5d:a1:23:49:67:82:
         60:aa:70:7b:5d:3c:b1:65:bd:1e:18:a0:6e:2e:13:1c:d8:32:
         ac:e0:ef:39:3a:26:27:2c:71:d9:58:47:ef:7e:ec:0d:85:32:
         51:90:e2:57:8f:4b:21:2d:07:d2:63:86:4b:a2:6d:d2:20:73:
         0e:90:f4:ad:44:df:90:fd:fd:32:e7:31:a4:71:b7:fc:58:bc:
         a1:65:68:15:f0:33:4b:54:b1:8c:3f:62:cd:5b:60:26:68:3f:
         d7:36:6c:6b:0a:88:53:3e:43:30:e5:67:c3:88:47:37:7d:41:
         0d:1c:2a:08:62:fe:1f:1f:b5:dd:f5:0a:67:20:ce:44:46:d1:
         d2:3e:80:91:c6:12:4d:bb:52:c7:9d:f8:cc:41:fd:7e:00:bd:
         70:ad:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org