Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203432383331.roa
File:                     352e3235322e37382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          hTLPso6twCri4hziIESfWcLrANHaefKXcCKaE2WmWwg=
Subject key identifier:   84:37:61:8C:D7:93:08:D1:31:53:8D:2F:6A:44:F4:F4:A3:AF:5D:3B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       44B44FD3BE608F230FEFC1E5E6E0CC2ABB104ABA
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203432383331.roa
Signing time:             Fri 31 Dec 2021 16:06:25 +0000
ROA not before:           Fri 31 Dec 2021 16:01:25 +0000
ROA not after:            Fri 30 Dec 2022 16:06:25 +0000
asID:                     42831
IP address blocks:        5.252.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b4:4f:d3:be:60:8f:23:0f:ef:c1:e5:e6:e0:cc:2a:bb:10:4a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 31 16:01:25 2021 GMT
            Not After : Dec 30 16:06:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:5b:d7:0a:24:db:55:9a:5d:48:0d:37:97:
                    33:15:76:05:ba:7f:90:d6:02:c5:62:2a:3c:7a:14:
                    07:c0:cb:c8:57:34:c6:f9:fe:4f:e2:3a:4d:6c:88:
                    f7:0a:c6:af:68:1d:37:7a:53:cd:d3:cb:f5:7b:ed:
                    ac:92:b6:86:fd:27:0c:7b:c3:17:f1:cd:73:9f:9e:
                    a9:32:c7:02:84:c4:8c:3e:d7:78:3d:24:9b:95:d1:
                    09:39:93:f7:16:7f:7e:cd:1f:7a:69:1e:08:10:87:
                    c6:0c:fe:1a:5a:ef:a9:5f:30:58:98:32:83:80:cf:
                    b6:57:1a:74:26:36:43:1b:b8:0c:40:0d:f3:f2:e5:
                    50:3b:dd:9e:c6:74:90:88:68:e1:04:22:41:79:1e:
                    c9:7b:c9:c0:d9:d4:fa:9e:2d:24:0d:92:dc:3e:97:
                    3c:63:2d:80:df:af:dc:1a:2c:aa:9f:11:93:17:d2:
                    17:68:14:7d:97:10:77:99:2b:0c:f0:88:0f:49:3f:
                    d7:ca:13:29:d1:f4:53:34:01:bf:a4:73:92:19:86:
                    72:e7:b8:00:d6:ef:e1:11:84:2d:e3:2a:79:ed:71:
                    6f:0f:8f:31:27:89:8e:d2:8d:3b:48:03:79:31:6a:
                    99:06:0c:78:41:e6:79:a2:14:45:41:91:28:cd:ca:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:61:8C:D7:93:08:D1:31:53:8D:2F:6A:44:F4:F4:A3:AF:5D:3B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:5d:95:d4:a2:04:01:19:e2:10:eb:38:22:2d:c1:9c:58:
         d3:e2:cc:7c:05:a3:cc:d2:3a:4d:a1:a5:bc:21:ae:01:2d:3e:
         fb:26:ab:ff:b3:cd:e4:b4:b4:e9:e8:a9:d4:ce:9f:49:f3:ac:
         1d:f0:ab:35:e6:0a:48:be:ed:84:13:07:33:66:0f:8f:35:3f:
         1b:c7:5b:9f:1a:0d:e2:1c:29:20:98:7f:eb:16:45:79:83:cb:
         a4:ed:c4:02:07:66:77:bd:09:5f:b8:63:f7:5b:15:d7:fd:41:
         52:49:f4:da:ca:11:b0:55:fc:60:d5:0c:50:2c:fa:6f:72:a1:
         0a:1a:c9:b7:9d:2f:b3:be:61:f6:85:ed:7c:da:32:34:35:10:
         aa:e7:45:21:cd:db:d5:64:0a:2d:47:52:5d:ab:41:69:48:86:
         ff:ae:ac:be:21:74:d3:35:c9:9c:1c:f9:9c:5c:c4:9e:ee:bb:
         97:71:cf:c4:cf:a8:5c:6d:2a:63:77:4d:2b:0b:73:74:24:93:
         e2:35:a2:4b:ed:10:17:a2:4a:ea:28:a6:2f:41:1c:84:9a:aa:
         8e:a5:9a:42:95:a9:3c:00:e1:2f:8f:b6:a3:13:b0:a8:05:5f:
         42:d0:b7:fa:87:de:39:97:a0:22:bb:42:f6:33:9d:a3:1d:a0:
         c0:09:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org