Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS24875.roa
File:                     AS24875.roa (raw, json)
Hash identifier:          Idiv1gUMfONGhq94MD68tg4SJpEZnKm+SdAmUUKAIHE=
Subject key identifier:   D8:47:63:09:AE:9D:D2:4C:4B:F1:A7:72:95:39:59:68:04:BA:8D:CE
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       548422B287E2FCA3128CD10A4742AC5D0C2A6C92
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS24875.roa
Signing time:             Wed 09 Mar 2022 13:34:57 +0000
ROA not before:           Wed 09 Mar 2022 13:29:57 +0000
ROA not after:            Wed 08 Mar 2023 13:34:57 +0000
asID:                     24875
IP address blocks:        92.119.34.0/24 maxlen: 24
                          181.215.178.0/24 maxlen: 24
                          191.96.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:22:b2:87:e2:fc:a3:12:8c:d1:0a:47:42:ac:5d:0c:2a:6c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:29:57 2022 GMT
            Not After : Mar  8 13:34:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:a8:88:61:16:53:a3:b6:64:fd:75:27:f7:
                    47:81:9b:fc:9c:2d:64:64:7f:c9:3c:76:af:54:fa:
                    39:6b:5c:d7:e8:f0:63:84:db:99:e4:7f:2a:74:53:
                    cf:a9:16:69:ab:cd:31:84:ca:fa:07:4d:41:7d:78:
                    d8:9d:fc:f2:f6:27:91:fd:6a:b6:5c:50:42:7f:6e:
                    f3:ed:53:f4:9a:f4:77:2b:f9:08:1f:f1:53:38:95:
                    46:37:99:97:88:67:c6:9e:75:b1:be:62:a7:f6:28:
                    73:e7:83:1d:32:ce:3f:04:00:7f:c0:dd:22:26:00:
                    e7:f3:f7:07:97:8d:63:7d:92:d5:a3:35:86:a3:32:
                    01:ee:83:12:27:a9:e0:ef:d0:70:a2:ed:93:5a:ac:
                    b6:b2:12:d5:aa:d8:81:3f:be:98:c3:d7:f1:4c:81:
                    8a:2d:fd:d7:8e:d4:d7:e0:78:2e:d2:04:1a:5a:93:
                    7a:87:09:69:d4:0e:87:bc:32:b9:ab:05:87:c5:35:
                    d4:b6:44:84:d0:01:41:7e:14:a2:c1:e7:94:2b:bc:
                    5c:d2:7a:f9:4a:4f:b1:4f:2c:91:bd:bd:9f:eb:ab:
                    5c:95:70:82:cd:a8:1c:f4:0d:13:75:cf:36:bd:8b:
                    b7:d6:45:9a:1b:6d:1a:b3:1c:67:c0:58:62:29:c4:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:47:63:09:AE:9D:D2:4C:4B:F1:A7:72:95:39:59:68:04:BA:8D:CE
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS24875.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.34.0/24
                  181.215.178.0/24
                  191.96.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:b2:79:2c:6e:1f:47:03:e4:ca:cd:17:16:82:81:2a:58:
         15:09:1d:e4:d8:47:bd:f0:10:bb:83:3c:a6:c1:41:fb:5f:af:
         4b:40:2c:41:93:00:99:d2:84:1f:47:fe:0d:37:54:ae:0f:cb:
         ef:61:27:75:1d:41:10:ec:03:25:a2:cb:34:e6:99:36:65:80:
         29:dc:7b:6a:1f:6c:fa:9d:69:9e:fd:18:26:df:96:d0:6a:8a:
         78:30:e8:1b:b5:4c:1e:da:e0:64:4f:e5:f7:f7:02:b9:60:2c:
         d6:ee:0d:a6:72:b6:75:3c:c0:ff:9c:5b:e8:db:f6:d4:4b:d0:
         3f:6d:a4:a1:c2:4b:60:b4:46:c1:c3:be:25:fd:83:34:45:0e:
         e8:92:68:97:8d:5c:22:74:3a:f8:21:be:39:15:1c:33:b9:ec:
         97:21:c9:8f:57:56:1d:23:65:00:56:9c:ce:00:b6:95:a3:6e:
         22:50:b1:bb:78:30:0f:1d:dd:3d:6e:4c:e0:5e:83:35:04:85:
         6b:ea:ca:f5:d9:64:87:cd:ed:12:c0:0b:cc:9c:41:e2:9b:bc:
         51:a7:f0:9e:36:52:0b:fb:30:13:db:e9:2e:be:21:df:8d:d9:
         e5:8d:1e:e2:f1:44:59:60:cd:e4:03:fa:c7:dc:66:36:01:69:
         0b:bf:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org