Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323132303730.roa
File:                     38352e3230392e3137362e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier:          T4bVh66dU+SGlTQyG1dhnMtcNapMALHgNci1lDnS0aU=
Subject key identifier:   51:2F:C3:87:48:C1:0F:C7:30:1A:48:80:45:3B:A4:CB:BB:8A:7C:FD
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       323CDD00BE323DC2EECB0F956DDC325E81AB29A2
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323132303730.roa
Signing time:             Wed 05 Jan 2022 14:16:17 +0000
ROA not before:           Wed 05 Jan 2022 14:11:17 +0000
ROA not after:            Wed 04 Jan 2023 14:16:17 +0000
asID:                     212070
IP address blocks:        85.209.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:dd:00:be:32:3d:c2:ee:cb:0f:95:6d:dc:32:5e:81:ab:29:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  5 14:11:17 2022 GMT
            Not After : Jan  4 14:16:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:42:3d:ee:08:db:71:e6:9a:c1:a0:7b:17:
                    75:d3:62:7b:dc:00:bf:26:dd:be:aa:7f:96:bb:7e:
                    8e:74:88:b5:76:56:3d:4b:13:2d:97:86:6a:fc:18:
                    0a:ae:14:2a:0c:f0:b3:c7:fd:87:51:c8:e4:6f:7d:
                    3d:ad:c4:1d:e3:5f:15:11:cb:22:bc:0b:66:19:6f:
                    f0:9a:65:9c:28:15:db:27:ed:ce:50:62:aa:10:12:
                    9c:03:7e:1d:6e:21:ef:9f:a5:35:ec:12:14:fa:d5:
                    aa:b9:7f:e2:e4:14:e2:a1:50:75:09:66:de:0e:db:
                    76:69:84:b4:be:f2:b6:3e:ec:f1:55:85:ca:d7:59:
                    64:8d:38:a6:dc:d9:ef:89:47:0a:8c:f9:2f:77:a8:
                    9d:21:e8:f9:24:f9:04:d1:33:5f:67:36:df:cc:2c:
                    9e:20:ff:36:ba:25:59:8c:92:af:14:1b:cf:82:d9:
                    a1:e4:5b:e6:14:97:62:55:70:ee:a8:42:c6:6c:90:
                    48:a7:49:fd:b2:b6:11:f3:ea:94:7d:eb:47:d9:16:
                    4b:06:1e:7f:dc:9c:4b:58:7f:1d:76:8a:e1:11:48:
                    bb:de:84:5d:a1:ba:ba:f0:64:50:fe:b3:4b:0c:15:
                    bf:a8:0a:2d:36:60:0c:35:53:8c:d7:e0:15:03:24:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:C3:87:48:C1:0F:C7:30:1A:48:80:45:3B:A4:CB:BB:8A:7C:FD
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323132303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:ba:6d:db:b2:75:fb:b9:2e:02:dd:76:2d:f8:e1:bd:ea:
         ef:75:d4:62:0b:a2:46:49:cf:4f:68:ea:95:ab:8f:cd:b4:27:
         ee:80:ff:0c:c9:8a:1e:93:83:be:6b:ee:7f:dd:fd:c4:7d:e0:
         4c:9c:de:1b:08:7c:1d:7d:e5:fe:e6:9b:0e:5d:c5:f5:7e:e0:
         6c:7a:ba:ee:33:e1:e7:b1:fa:ef:b2:37:6d:f1:5d:3d:1b:58:
         eb:ef:ad:54:13:b1:6a:65:d6:aa:46:a1:10:3a:e3:b1:4e:3c:
         83:2b:a3:98:38:f2:8c:2f:24:21:9b:a6:a0:e3:4d:75:26:e6:
         0c:98:18:b9:c3:9b:a9:62:ea:0b:df:c3:ec:c9:96:45:cf:04:
         3e:11:68:22:9c:b4:9a:f6:16:8a:06:b5:d5:76:2c:d8:6b:55:
         da:1b:22:87:a7:06:76:38:ac:09:50:4c:e7:51:04:fd:86:60:
         ee:b6:d9:9a:89:bc:1a:e3:6b:33:d2:8a:55:b8:bd:19:2a:ce:
         35:ba:b4:aa:7b:68:b4:f1:27:ee:e2:b9:ba:a0:b6:ea:f1:0d:
         8e:4d:9c:c3:2f:bd:e2:1c:01:32:2f:5f:16:53:0f:25:10:0b:
         81:e4:3f:60:89:88:8a:94:1f:e0:bf:b8:8a:40:7a:80:2b:9a:
         8e:ee:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org