Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32322d3234203d3e203631333137.roa
File:                     38352e3230392e3137362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FE7rijsG+osDKWqHgxXO7P1D6n3oYVgPZYZ91ZPpnk4=
Subject key identifier:   37:85:47:D7:BF:E0:10:24:10:89:18:D9:7A:B2:B8:CC:25:90:65:7E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       41BBB9AD22CF4E7502AEFC8E7C0948A220C4021A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     61317
IP address blocks:        85.209.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bb:b9:ad:22:cf:4e:75:02:ae:fc:8e:7c:09:48:a2:20:c4:02:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:12:7f:dc:32:d9:09:4b:19:58:e0:23:96:
                    b7:d6:4c:2a:2f:bc:60:0e:21:63:e7:74:95:23:a4:
                    ef:30:46:7d:c9:c4:e3:63:c0:fe:68:59:4f:be:35:
                    c5:45:b9:74:aa:87:51:89:5f:d4:69:73:69:ea:f7:
                    d5:9b:6a:35:c1:ea:97:0c:08:11:7f:c9:cb:5f:64:
                    ce:6e:b3:7e:6b:7e:4a:d4:88:07:b6:77:f9:27:a5:
                    bf:21:3d:10:ce:b4:28:07:70:a0:8b:59:24:bb:02:
                    31:61:e5:d8:56:b8:89:2b:f7:b5:d9:47:8c:65:9f:
                    ef:c0:e8:01:92:4b:4b:e9:6b:ae:17:bf:20:1e:f9:
                    0c:f4:07:9d:45:d3:d9:04:e0:b6:af:2e:b9:f0:98:
                    32:6f:3d:50:58:8b:b9:ec:66:c1:68:c8:66:55:93:
                    f4:86:94:7e:df:ac:b4:53:2f:92:3a:da:d6:48:07:
                    eb:f6:fd:10:4b:41:3e:9c:87:0e:86:c2:4b:1e:c7:
                    c5:e3:06:6c:86:20:48:51:f3:b5:4e:d1:1b:32:bd:
                    42:77:e5:69:c3:c2:91:e0:e9:1d:26:a1:a6:41:c4:
                    2b:f5:27:29:1a:93:2c:8a:bf:8a:c1:32:33:78:d8:
                    d6:33:f6:0b:8e:72:b9:e3:20:47:7e:55:52:17:98:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:47:D7:BF:E0:10:24:10:89:18:D9:7A:B2:B8:CC:25:90:65:7E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:00:09:41:e8:7b:e2:c7:d5:3c:11:0a:fb:8b:5c:26:db:81:
         23:e6:b2:de:6d:d2:69:54:00:f8:b9:43:b5:be:fd:d3:21:a9:
         4c:2c:cb:70:d7:ed:73:38:04:c1:c6:66:c2:03:69:93:af:cb:
         91:b4:5c:a1:98:5f:e9:96:10:32:aa:ad:84:0b:26:2d:b4:1c:
         fb:77:80:cb:e9:35:b5:42:92:d4:03:de:15:41:f8:a0:f4:63:
         0e:0e:6d:2f:8a:55:8e:7f:37:d2:9d:35:43:66:31:3d:07:ee:
         7f:ae:ba:ae:9c:d6:1c:f7:c5:35:43:64:7d:9d:a6:86:7e:5b:
         2e:29:ad:64:69:19:77:db:b8:6e:c9:08:ed:11:a4:dd:dc:cd:
         c3:d8:c2:60:88:1c:51:fa:a8:93:a8:76:ce:37:36:20:30:33:
         54:b4:72:e4:d4:80:c2:3b:e6:ce:2a:17:f9:4d:e5:33:4e:c1:
         0c:aa:5c:17:15:83:d6:6e:f7:78:b9:cb:0f:42:f6:c7:cf:39:
         b3:f5:ab:cd:31:ef:f9:8e:f6:11:78:25:0d:9c:87:79:16:e5:
         ce:76:7c:fe:62:18:a0:49:6f:ee:e3:32:37:dd:40:34:fc:67:
         b0:a8:30:12:4e:24:b0:ec:eb:12:8d:6a:a1:a2:94:d7:34:e8:
         e0:a5:f9:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org