Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133332e3137372e302f32342d3234203d3e203239343234.roa
File:                     34352e3133332e3137372e302f32342d3234203d3e203239343234.roa (raw, json)
Hash identifier:          +PGWP7BsBA3tQvXgYDtkU/YPiF7NUPps5pOixVuDJ3A=
Subject key identifier:   F5:47:DB:64:71:21:0F:72:C1:D6:CB:51:3B:80:71:A7:9C:7D:3B:60
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6C4978CB41BAF158535CC6D441A0A79AFA3BB32F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133332e3137372e302f32342d3234203d3e203239343234.roa
Signing time:             Mon 13 Dec 2021 10:24:42 +0000
ROA not before:           Mon 13 Dec 2021 10:19:42 +0000
ROA not after:            Mon 12 Dec 2022 10:24:42 +0000
asID:                     29424
IP address blocks:        45.133.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:49:78:cb:41:ba:f1:58:53:5c:c6:d4:41:a0:a7:9a:fa:3b:b3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 13 10:19:42 2021 GMT
            Not After : Dec 12 10:24:42 2022 GMT
        Subject: CN=3082010A0282010100C28F6A4513205B206210C2348E5895ADDE0A631CDA6BD303DDD80BACE975595BB01510494E6A1BFF86A075AEB346334501029CECB34E7ECD832E7C2DC18A348F75D61420A228D2C2BB675DB7E49C79CB13F32997E4480DE23ACA2BDBEE91DBD04D4503ACF1C7F231F41F7173157F96A3A543EB6E5EA851D94493B68F24AEC0E719F197635D3D1873585A3B233A42CE7BE55E1CC51E8E9EE121920A14E9E33F307A62C5B206CD0C8EF5ADD6ABB49C253AE5CC177F4DE27E25546AD007B2CE7C4DA8F270F3AC8AF92E40F456EE649120D06013E4EDE7D3F78ABB7B6AD1888E5598DD6A950EE3DC8709B23345D0D123DE0B778C6FC7E56BEA4285745F68F4E711F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:6a:45:13:20:5b:20:62:10:c2:34:8e:58:
                    95:ad:de:0a:63:1c:da:6b:d3:03:dd:d8:0b:ac:e9:
                    75:59:5b:b0:15:10:49:4e:6a:1b:ff:86:a0:75:ae:
                    b3:46:33:45:01:02:9c:ec:b3:4e:7e:cd:83:2e:7c:
                    2d:c1:8a:34:8f:75:d6:14:20:a2:28:d2:c2:bb:67:
                    5d:b7:e4:9c:79:cb:13:f3:29:97:e4:48:0d:e2:3a:
                    ca:2b:db:ee:91:db:d0:4d:45:03:ac:f1:c7:f2:31:
                    f4:1f:71:73:15:7f:96:a3:a5:43:eb:6e:5e:a8:51:
                    d9:44:93:b6:8f:24:ae:c0:e7:19:f1:97:63:5d:3d:
                    18:73:58:5a:3b:23:3a:42:ce:7b:e5:5e:1c:c5:1e:
                    8e:9e:e1:21:92:0a:14:e9:e3:3f:30:7a:62:c5:b2:
                    06:cd:0c:8e:f5:ad:d6:ab:b4:9c:25:3a:e5:cc:17:
                    7f:4d:e2:7e:25:54:6a:d0:07:b2:ce:7c:4d:a8:f2:
                    70:f3:ac:8a:f9:2e:40:f4:56:ee:64:91:20:d0:60:
                    13:e4:ed:e7:d3:f7:8a:bb:7b:6a:d1:88:8e:55:98:
                    dd:6a:95:0e:e3:dc:87:09:b2:33:45:d0:d1:23:de:
                    0b:77:8c:6f:c7:e5:6b:ea:42:85:74:5f:68:f4:e7:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:DB:64:71:21:0F:72:C1:D6:CB:51:3B:80:71:A7:9C:7D:3B:60
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133332e3137372e302f32342d3234203d3e203239343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:d7:bd:34:94:8b:f0:14:22:cb:66:a9:50:cf:3d:e8:a2:
         80:de:b1:ef:7b:4a:00:0c:1d:0d:9d:15:28:57:12:ae:3c:7e:
         20:8a:e6:1a:72:ef:ce:ec:b2:c1:e9:34:8d:7c:1c:e4:f0:2a:
         59:73:be:a1:ca:01:02:70:64:11:96:31:a8:14:1b:33:b6:7a:
         08:be:2a:72:ff:b1:f6:11:72:7e:25:d7:1b:44:e1:41:1d:c0:
         ae:d9:17:8f:b5:ce:49:dd:ad:3f:cd:d8:e6:82:68:fc:a7:79:
         55:19:00:c8:06:73:8e:5f:21:47:48:8a:37:f6:db:ae:79:7d:
         e2:92:90:f1:fc:10:3f:b5:28:d3:f1:88:31:61:09:3f:f3:52:
         ab:f6:b0:14:fe:9a:9d:7a:4e:31:73:ab:03:8b:11:79:c1:62:
         1f:e2:b4:46:67:55:04:8c:08:4a:de:af:7d:0f:b3:f3:ee:63:
         43:d1:3a:45:f6:58:91:73:b9:45:aa:b4:ae:4c:5b:36:d5:52:
         de:30:5a:e6:34:e7:ea:88:4d:a5:2e:a5:88:a4:c9:99:e8:ec:
         b4:ae:af:cb:a5:8d:97:83:97:19:06:b7:72:4e:93:6b:9d:07:
         b9:48:af:ea:e5:77:89:00:e7:72:35:a3:e2:78:30:d9:3e:8d:
         1e:cf:81:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org