Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS18345.roa
File:                     AS18345.roa (raw, json)
Hash identifier:          QraH3uCdmnYoKLlEkhVAI6HgYix9/t5qivPgcOeaHSI=
Subject key identifier:   F2:52:7F:98:1C:8E:5E:C5:DF:39:60:3B:22:76:00:1B:B6:11:7D:50
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       561DB093287F23C0BA2A7C9F871BAD1ACB3D0C3C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS18345.roa
Signing time:             Wed 09 Mar 2022 13:31:00 +0000
ROA not before:           Wed 09 Mar 2022 13:26:00 +0000
ROA not after:            Wed 08 Mar 2023 13:31:00 +0000
asID:                     18345
IP address blocks:        181.214.23.0/24 maxlen: 24
                          181.214.51.0/24 maxlen: 24
                          181.214.104.0/24 maxlen: 24
                          181.214.199.0/24 maxlen: 24
                          181.214.215.0/24 maxlen: 24
                          191.96.18.0/24 maxlen: 24
                          191.101.210.0/24 maxlen: 24
                          191.101.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:b0:93:28:7f:23:c0:ba:2a:7c:9f:87:1b:ad:1a:cb:3d:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:26:00 2022 GMT
            Not After : Mar  8 13:31:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:b8:5f:f7:b8:74:33:f2:60:ce:3f:a8:0b:
                    10:26:c2:da:87:fd:1d:89:dd:28:43:06:db:30:9b:
                    e3:a4:d7:aa:ec:f6:1f:78:8f:06:1f:5f:d9:c4:34:
                    19:5e:24:a9:9a:61:8c:fc:53:d6:70:db:8c:44:0d:
                    39:15:94:24:6c:20:68:1a:98:d9:bb:78:9d:6c:e0:
                    a2:08:90:8a:f4:ee:df:24:47:c3:f1:fb:c8:27:fd:
                    c0:bc:72:cd:2c:3c:c3:f6:3c:1a:b8:61:d6:d2:a2:
                    51:de:c6:78:c6:63:57:f0:55:10:5d:16:e7:9f:4b:
                    31:a2:c7:7f:10:20:51:e6:32:71:60:be:e4:a0:c8:
                    9b:8e:8b:42:52:fd:82:b2:36:4a:9c:bd:7f:4b:95:
                    b8:3e:16:13:be:06:47:2a:47:32:d4:03:ac:c5:7f:
                    fd:cc:1f:76:a5:cc:32:df:cb:42:d1:07:98:67:b9:
                    b6:26:c7:10:aa:e4:68:7c:0e:10:59:e3:f9:ae:fa:
                    00:f0:b5:5b:b7:be:5e:d7:50:61:50:71:f7:f0:93:
                    84:84:57:49:0c:0d:a5:99:4b:ca:14:da:f4:ae:61:
                    b2:58:02:b3:7f:41:37:29:8b:24:79:91:be:7a:c6:
                    6b:85:ff:eb:19:ec:08:97:5c:75:bd:ba:a6:5a:d4:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:7F:98:1C:8E:5E:C5:DF:39:60:3B:22:76:00:1B:B6:11:7D:50
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS18345.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.23.0/24
                  181.214.51.0/24
                  181.214.104.0/24
                  181.214.199.0/24
                  181.214.215.0/24
                  191.96.18.0/24
                  191.101.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:9d:0c:b3:91:9b:f2:74:ee:2b:6a:07:94:85:05:89:e5:55:
         e7:2f:ed:a0:dc:6a:4d:30:cf:3b:63:d7:62:36:9f:6e:4b:a9:
         7b:17:83:75:c3:ec:ea:9f:44:cd:b8:01:7b:57:3e:da:91:e0:
         0d:eb:5f:3e:6c:a6:6e:09:0b:a4:e5:ee:40:8b:a9:5c:fa:45:
         f0:fe:19:65:d5:02:6b:76:0d:d3:98:0e:a1:99:2c:cd:f7:f0:
         a0:27:e8:39:7f:3c:9a:6b:5e:dd:10:d7:82:14:39:fb:0a:ac:
         05:93:d3:2c:64:dd:ab:68:45:38:0e:5c:20:3c:f6:03:b3:bd:
         e0:54:7a:40:1d:bc:29:82:35:a4:7b:d6:a5:83:9b:3e:a9:b6:
         41:53:6f:51:7c:5b:bc:27:cf:cf:e1:a5:dc:f4:8c:42:de:f9:
         13:22:1a:5b:c5:db:94:6b:bb:35:a8:a7:93:92:03:81:b7:a6:
         45:12:5d:af:6b:3b:37:46:0f:be:40:fc:df:25:11:01:2d:49:
         5b:21:cb:0c:7e:bf:f4:68:c5:ff:88:1c:a8:b9:98:50:42:05:
         9e:68:f6:63:e9:41:c9:b0:4f:1a:eb:d7:e2:a1:d9:65:d4:9b:
         c5:1f:cf:51:79:27:f6:78:75:50:70:c8:e1:d5:97:18:08:b1:
         3a:7f:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org