Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          iwFCX8MoraOhDprubSRCwI/gorvCfg8W0/Vsidz97nQ=
Subject key identifier:   6A:E2:9C:1A:F7:EC:6D:77:EF:1B:88:D6:09:6B:52:24:5F:4B:73:10
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       0EACBC495E316C916AF7E038133DE115DBFECBBF
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS33696.roa
Signing time:             Mon 28 Mar 2022 12:51:14 +0000
ROA not before:           Mon 28 Mar 2022 12:46:14 +0000
ROA not after:            Mon 27 Mar 2023 12:51:14 +0000
asID:                     33696
IP address blocks:        85.209.179.0/24 maxlen: 24
                          181.214.39.0/24 maxlen: 24
                          181.214.41.0/24 maxlen: 24
                          185.170.42.0/24 maxlen: 24
                          185.172.57.0/24 maxlen: 24
                          191.96.197.0/24 maxlen: 24
                          191.96.204.0/24 maxlen: 24
                          191.101.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:bc:49:5e:31:6c:91:6a:f7:e0:38:13:3d:e1:15:db:fe:cb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 28 12:46:14 2022 GMT
            Not After : Mar 27 12:51:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:2e:76:8e:90:99:ae:fa:f6:38:a2:c8:d7:
                    83:1b:e4:95:b3:08:8a:64:75:53:e8:d1:f5:1f:be:
                    ae:5e:f6:82:3e:43:e7:83:41:1a:3a:93:d6:93:3c:
                    9c:9b:bf:a9:0f:72:89:f3:74:27:fd:85:7a:fe:1b:
                    0b:09:53:3d:a4:d2:06:67:df:c3:b0:25:7a:e8:9e:
                    8b:7f:ad:8d:79:af:02:eb:c5:52:92:53:19:b8:cc:
                    a0:1d:51:f7:74:cf:b9:f2:60:1e:e3:d4:8f:7c:3c:
                    da:f3:05:d7:d1:b2:3e:e2:b7:67:42:3a:72:c2:23:
                    d1:c5:51:0c:e3:f1:a6:e1:aa:04:03:fe:98:6c:64:
                    23:bd:57:98:be:55:af:6d:0d:94:9d:d8:1a:5a:c3:
                    6f:85:27:bd:9c:1e:82:0c:88:b9:54:60:25:dd:8c:
                    a6:a1:48:2e:a3:93:9f:74:65:a1:bd:78:ae:ab:04:
                    ab:dd:56:ed:58:c0:81:86:f6:c0:b8:e0:34:b0:41:
                    03:06:9b:cf:e9:61:38:73:38:4e:7a:9b:c5:4a:e6:
                    88:81:36:d1:36:d0:20:a6:34:ef:ad:53:33:3e:be:
                    ed:60:8c:e0:33:c4:64:d0:4a:59:52:d8:c6:ee:f6:
                    4e:ca:f7:77:cb:bb:c4:95:a0:51:f5:64:29:9d:13:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E2:9C:1A:F7:EC:6D:77:EF:1B:88:D6:09:6B:52:24:5F:4B:73:10
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.179.0/24
                  181.214.39.0/24
                  181.214.41.0/24
                  185.170.42.0/24
                  185.172.57.0/24
                  191.96.197.0/24
                  191.96.204.0/24
                  191.101.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:a9:96:10:28:5c:f6:f1:0b:4b:41:d7:b2:6a:ee:93:c7:
         db:f5:db:6c:46:b9:4a:d2:c7:49:30:55:f8:7c:91:71:74:3f:
         54:a0:af:59:86:57:12:c7:42:de:0f:8c:77:d4:a3:5a:3c:c5:
         02:85:e2:c2:6d:3e:9f:47:6e:12:9e:16:a9:0d:73:44:63:ad:
         42:e8:2a:d6:dd:c6:3d:f5:d9:27:e6:62:fe:fa:1b:ba:b8:a7:
         de:21:ae:ed:8b:99:1f:ca:2f:bb:ea:1c:db:61:b9:18:73:f3:
         fc:a4:e1:a4:c0:2e:6d:8f:e0:c8:12:d1:76:a5:b7:39:2c:3e:
         a1:a5:a1:82:9b:61:f9:cb:13:81:0e:c7:24:21:cd:a6:24:fb:
         c8:63:1f:e4:e3:e9:eb:2c:c7:cc:5c:f3:cb:fe:43:73:18:21:
         06:43:78:b9:a2:91:66:1a:19:26:d5:57:9c:f0:00:48:63:f7:
         8d:25:83:26:86:8d:51:b9:8b:bb:a6:cb:db:8e:8d:f0:0b:88:
         3f:f4:51:7f:74:94:b6:a1:c9:39:36:97:e0:fc:94:0e:7a:69:
         85:0c:f6:2e:98:14:23:39:4d:66:d1:36:97:23:c4:46:6d:e3:
         8a:b9:b7:1c:40:b1:91:bb:b7:7b:18:3c:be:4d:9c:23:84:6d:
         9a:8b:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org