Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131302e302f32342d3234203d3e203430363736.roa
File:                     352e3138322e3131302e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          /TFVS+QyfhDq/dRiRqC4LFUWOB06iHPlmfDw17X36fk=
Subject key identifier:   35:2D:4B:4F:7B:0C:4A:8F:A6:AE:D5:28:37:04:F7:6C:E5:AF:9B:DF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       62F9F6AFF70AD3B3CEE615E8D80DC49E05AD9055
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131302e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 26 Jan 2022 21:52:11 +0000
ROA not before:           Wed 26 Jan 2022 21:47:11 +0000
ROA not after:            Wed 25 Jan 2023 21:52:11 +0000
asID:                     40676
IP address blocks:        5.182.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f9:f6:af:f7:0a:d3:b3:ce:e6:15:e8:d8:0d:c4:9e:05:ad:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan 26 21:47:11 2022 GMT
            Not After : Jan 25 21:52:11 2023 GMT
        Subject: CN=3082010A02820101009CD9EED2A59AD07F6000F8DA39921BA1EB707EC16A78B0E30AB311B5D9F9AA030284D806BA2FA65266AE0A9FF98EAF3CC55197AF9BB62083829B0D2103D163F06D05622D26004B5EB6E4488E1038F47F1642C342B214FFF6AF330C419495D974333D9C0B832A478EBBB83BD858E2BB530266E95682E4648CA283EAAEFD5F63A6B1955BEA0395445180AC9A3FAD2D0A1C0C267E07BB4C03C7AF8958E4422DD3FE0325C8B58694DC218E3CCF847D72A8784BAAC51145564D063CB7E4A9DA621CAAF910941107698C7C1FB77D0E2FF6EC762B251B9159E641783D58170BAA4F67703B22CFF9C803EC92E29C9F17AA44E582325FCAB8E3264A1E430BD2ADA81D281D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:ee:d2:a5:9a:d0:7f:60:00:f8:da:39:92:
                    1b:a1:eb:70:7e:c1:6a:78:b0:e3:0a:b3:11:b5:d9:
                    f9:aa:03:02:84:d8:06:ba:2f:a6:52:66:ae:0a:9f:
                    f9:8e:af:3c:c5:51:97:af:9b:b6:20:83:82:9b:0d:
                    21:03:d1:63:f0:6d:05:62:2d:26:00:4b:5e:b6:e4:
                    48:8e:10:38:f4:7f:16:42:c3:42:b2:14:ff:f6:af:
                    33:0c:41:94:95:d9:74:33:3d:9c:0b:83:2a:47:8e:
                    bb:b8:3b:d8:58:e2:bb:53:02:66:e9:56:82:e4:64:
                    8c:a2:83:ea:ae:fd:5f:63:a6:b1:95:5b:ea:03:95:
                    44:51:80:ac:9a:3f:ad:2d:0a:1c:0c:26:7e:07:bb:
                    4c:03:c7:af:89:58:e4:42:2d:d3:fe:03:25:c8:b5:
                    86:94:dc:21:8e:3c:cf:84:7d:72:a8:78:4b:aa:c5:
                    11:45:56:4d:06:3c:b7:e4:a9:da:62:1c:aa:f9:10:
                    94:11:07:69:8c:7c:1f:b7:7d:0e:2f:f6:ec:76:2b:
                    25:1b:91:59:e6:41:78:3d:58:17:0b:aa:4f:67:70:
                    3b:22:cf:f9:c8:03:ec:92:e2:9c:9f:17:aa:44:e5:
                    82:32:5f:ca:b8:e3:26:4a:1e:43:0b:d2:ad:a8:1d:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:4B:4F:7B:0C:4A:8F:A6:AE:D5:28:37:04:F7:6C:E5:AF:9B:DF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138322e3131302e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:84:0f:d7:15:34:7b:60:49:83:a1:2d:31:cf:98:d3:5b:
         7a:3b:8e:d2:20:ab:45:88:03:ee:63:06:ef:e4:33:58:e1:a7:
         ff:28:44:70:c5:8d:02:a2:7a:1a:7b:dc:0f:ff:4a:2e:00:1b:
         1d:d9:f5:d5:ff:2a:08:ea:2c:a7:08:9f:3a:55:da:5d:f9:5b:
         78:ad:c5:b6:42:9f:59:69:7a:9e:b9:c1:3c:07:71:49:2d:e6:
         39:2c:a6:53:c0:e1:52:c4:97:6f:58:e6:24:5f:ab:76:16:fd:
         e0:50:75:d2:9f:a4:b3:9a:bb:de:b9:c5:38:8b:d4:e2:8c:d0:
         63:2d:6a:2d:9a:7b:a3:c6:75:c8:1f:6b:de:c8:35:96:f8:e4:
         38:14:68:eb:c6:5c:ce:68:7e:d6:36:1b:4d:c8:ef:e5:59:a2:
         1e:30:96:ff:94:01:3a:a4:b3:ab:f2:da:62:bd:a5:b5:b4:65:
         c1:66:48:c5:b2:57:9d:e4:4e:11:00:5e:ae:25:8b:4a:6c:67:
         9a:41:5e:8f:a6:5f:d0:df:74:d3:57:13:2d:54:b0:05:76:09:
         b8:9f:a2:bd:6f:30:74:88:ba:e8:07:f1:cd:b4:f3:08:2a:17:
         f9:33:aa:4b:59:7f:2f:a4:d8:06:87:a5:c9:96:14:1f:2b:1b:
         23:cb:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org