Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e20323037333236.roa
File:                     34352e38382e39372e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          paPtXR8QbU7jF6X/fmYU1XdBPwWn/PtgLpxeuQAzDBo=
Subject key identifier:   D7:75:59:1B:F6:96:50:4D:1A:77:C9:CF:68:B9:9B:AA:D7:9B:60:BF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       193432010C8F11DA8DAA7D9CBB7E986F11D16B5D
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e20323037333236.roa
Signing time:             Fri 07 Jan 2022 18:42:59 +0000
ROA not before:           Fri 07 Jan 2022 18:37:59 +0000
ROA not after:            Fri 06 Jan 2023 18:42:59 +0000
asID:                     207326
IP address blocks:        45.88.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:34:32:01:0c:8f:11:da:8d:aa:7d:9c:bb:7e:98:6f:11:d1:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  7 18:37:59 2022 GMT
            Not After : Jan  6 18:42:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:0f:c5:12:ac:bb:eb:20:e2:f4:82:9e:d5:
                    53:a3:f3:db:ae:81:01:1b:88:5d:e5:48:1e:d4:d8:
                    a1:6e:55:72:b7:b8:60:9e:2e:ff:e3:a5:b2:ba:d1:
                    51:2e:c5:2b:d5:07:1f:cc:94:e5:88:c1:dd:94:48:
                    34:57:77:4e:fe:fc:62:da:42:61:81:ee:1a:e5:d3:
                    2b:28:22:fc:bb:25:5c:63:5a:f8:1e:66:0a:f3:7a:
                    d9:1c:a2:46:a3:f6:4d:71:5c:33:6d:a4:6f:29:bf:
                    45:f9:dd:79:46:76:89:fb:de:a5:ec:0e:e0:3a:c4:
                    8c:70:61:f9:ce:10:09:33:35:1f:25:95:7d:66:51:
                    e1:8e:3d:5a:47:1d:06:8d:18:b2:ea:f6:f6:77:52:
                    9a:0b:25:a9:fd:22:8f:ed:68:11:4f:3e:28:e9:c7:
                    c2:23:e2:26:9c:91:2e:23:25:a9:ba:0c:64:7e:ab:
                    ba:b6:b8:4f:e0:ba:0f:b4:ed:c8:cf:37:68:01:fe:
                    fc:fa:70:76:16:ea:a2:c3:d4:84:f0:69:44:58:af:
                    b1:90:3b:3c:a7:72:b4:32:5a:a0:6b:46:19:9e:3e:
                    f7:8d:03:b0:14:d0:92:7f:4b:6b:47:e7:fe:76:38:
                    aa:1a:d7:1a:46:e7:a9:e8:d9:12:d4:22:31:a7:0e:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:59:1B:F6:96:50:4D:1A:77:C9:CF:68:B9:9B:AA:D7:9B:60:BF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:30:d2:2a:84:33:f9:f0:ac:39:ce:f9:14:06:e6:ac:ad:
         5d:b2:19:20:10:79:bf:48:cf:a8:73:1e:b8:6b:bd:a6:10:2f:
         49:e7:31:1c:39:95:e3:ec:04:8d:80:e5:8b:6e:e3:b3:5f:dd:
         c1:a4:68:b9:09:32:ef:da:24:2a:86:a1:d0:37:f4:4b:54:34:
         74:b6:05:a8:3d:9a:d4:63:6d:b0:b9:08:6a:06:4d:22:1e:41:
         05:86:b3:44:e2:37:7b:1f:58:12:fa:5b:ff:cd:05:46:c9:64:
         3e:db:91:2d:cf:87:da:5d:77:a3:6f:89:7e:1c:c9:72:f8:6b:
         6f:08:b5:93:4b:cc:00:5f:df:1a:ac:e1:f4:6b:5c:80:01:00:
         1f:97:3b:15:7f:41:2d:8d:d2:82:b4:59:d8:bd:f8:f9:e6:20:
         a5:c6:9a:58:48:0d:26:1c:b4:c7:02:fc:a6:c9:92:9d:25:db:
         b1:b2:d3:f7:7e:7a:5d:c9:7f:85:69:42:d3:10:f0:5c:ca:c8:
         8a:a6:79:87:64:0c:53:5e:96:1f:41:f3:f6:4c:3d:31:15:0f:
         3a:22:04:d7:45:73:68:34:d9:2f:da:fa:ff:42:1c:de:12:48:
         7c:92:ed:0d:ef:b1:94:a5:59:74:ff:40:c5:da:19:ad:e6:04:
         5b:b8:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org