Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3235302e302f32342d3234203d3e20323132323338.roa
File:                     34352e38392e3235302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          D7SQpff4dsous7DjiieGUlAz4gB3+PsXXsSoKu1ykJg=
Subject key identifier:   BB:0E:AB:D7:C1:53:D1:32:18:87:E9:A2:CF:51:61:3E:54:53:C2:DA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       163F82522233FC34E851A79ADD074927E359E435
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3235302e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 08 Dec 2021 19:58:42 +0000
ROA not before:           Wed 08 Dec 2021 19:53:42 +0000
ROA not after:            Wed 07 Dec 2022 19:58:42 +0000
asID:                     212238
IP address blocks:        45.89.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:82:52:22:33:fc:34:e8:51:a7:9a:dd:07:49:27:e3:59:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec  8 19:53:42 2021 GMT
            Not After : Dec  7 19:58:42 2022 GMT
        Subject: CN=3082010A02820101009AFB7984072032415F71E79E95817ED5E825B18ACA8B2E6701497BDE8F586AFCB538556E99A26A47538A5857A43E51C9989FDAD74268753EAC6AD3841D48BB09C7B1F927B6D8D8EF16D0E8A41CD0D11B39EEA3DCAE5A8B7BAFF02263201D3750DDC3A2A029209F1D95C5B5BBBB576D3BF1CC8E3D84C3FDA23F07410C8ECCF7377C7537480BE9F2316547E6109888DC44F5EE7227DEB7BD786DD02F4982C1F1B39304F6DB4154115BB1659401ABD2B2D105DB465E4AD34A7D1D0FE60EB3AFFBB2EDE114797C63A162EC6C2108C54A388C3B12E0BF5CB81D75A0BBC6787BB507FC21E7E94341404F9AD4B8936703ED93E987DCF22BBCEE866F0AC75056E1D1DEAB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:79:84:07:20:32:41:5f:71:e7:9e:95:81:
                    7e:d5:e8:25:b1:8a:ca:8b:2e:67:01:49:7b:de:8f:
                    58:6a:fc:b5:38:55:6e:99:a2:6a:47:53:8a:58:57:
                    a4:3e:51:c9:98:9f:da:d7:42:68:75:3e:ac:6a:d3:
                    84:1d:48:bb:09:c7:b1:f9:27:b6:d8:d8:ef:16:d0:
                    e8:a4:1c:d0:d1:1b:39:ee:a3:dc:ae:5a:8b:7b:af:
                    f0:22:63:20:1d:37:50:dd:c3:a2:a0:29:20:9f:1d:
                    95:c5:b5:bb:bb:57:6d:3b:f1:cc:8e:3d:84:c3:fd:
                    a2:3f:07:41:0c:8e:cc:f7:37:7c:75:37:48:0b:e9:
                    f2:31:65:47:e6:10:98:88:dc:44:f5:ee:72:27:de:
                    b7:bd:78:6d:d0:2f:49:82:c1:f1:b3:93:04:f6:db:
                    41:54:11:5b:b1:65:94:01:ab:d2:b2:d1:05:db:46:
                    5e:4a:d3:4a:7d:1d:0f:e6:0e:b3:af:fb:b2:ed:e1:
                    14:79:7c:63:a1:62:ec:6c:21:08:c5:4a:38:8c:3b:
                    12:e0:bf:5c:b8:1d:75:a0:bb:c6:78:7b:b5:07:fc:
                    21:e7:e9:43:41:40:4f:9a:d4:b8:93:67:03:ed:93:
                    e9:87:dc:f2:2b:bc:ee:86:6f:0a:c7:50:56:e1:d1:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:AB:D7:C1:53:D1:32:18:87:E9:A2:CF:51:61:3E:54:53:C2:DA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3235302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:e9:02:6a:c1:2e:5d:52:34:3b:54:79:ef:6a:84:33:9c:
         74:c2:df:a4:63:f6:a3:80:50:3e:12:90:f3:bb:a7:11:c2:6d:
         72:ef:5e:c1:41:e5:ac:49:98:6d:11:59:ee:28:a0:82:d9:6d:
         23:9e:c0:06:56:53:1a:98:02:53:f4:ea:f4:0a:ae:4e:91:e7:
         b5:1e:39:95:da:fb:6c:f3:37:0d:11:64:64:9c:b8:a9:5e:6b:
         b9:ee:6b:18:e0:f1:23:a4:e8:5b:06:7c:17:ec:3e:8e:e6:b1:
         dc:27:12:60:2f:e3:e4:45:59:f2:a8:c2:46:8c:e2:5c:c8:94:
         ed:f3:0f:d5:22:18:79:35:94:2f:1c:c4:fd:75:be:ac:bf:d8:
         b7:b4:76:fe:58:8d:94:dc:b8:5e:a6:f3:94:2c:54:a6:1f:f3:
         9e:81:91:ec:35:60:a9:c0:20:ee:c7:da:e7:38:f6:f1:aa:ed:
         39:80:cb:04:6c:fb:73:d0:33:ac:77:c7:93:57:83:5b:93:52:
         f4:df:6b:db:02:27:a8:d7:41:fb:8f:19:11:69:ed:53:4b:bf:
         e0:a9:cd:b2:8e:b9:1c:af:bf:d2:6c:6b:1b:1a:9b:98:a4:ef:
         4d:cd:59:36:4e:ab:e0:2b:8d:b6:d9:dd:90:51:a6:b3:6c:41:
         13:56:b4:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org