Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          zlR44qWniPF/NMX4Hkat5Bw7g3GU+TtX7TOrAFQ+dMc=
Subject key identifier:   3D:64:19:3A:3E:63:63:67:37:DD:C6:7C:0A:2C:07:C3:BE:53:3C:DE
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       222DE994BC078683518BE8822B456A37CF0C50E6
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS42831.roa
Signing time:             Mon 25 Apr 2022 16:48:41 +0000
ROA not before:           Mon 25 Apr 2022 16:43:41 +0000
ROA not after:            Mon 24 Apr 2023 16:48:41 +0000
asID:                     42831
IP address blocks:        5.181.124.0/24 maxlen: 24
                          5.252.78.0/24 maxlen: 24
                          37.143.61.0/24 maxlen: 24
                          181.215.226.0/24 maxlen: 24
                          181.215.229.0/24 maxlen: 24
                          191.96.110.0/24 maxlen: 24
                          191.101.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2d:e9:94:bc:07:86:83:51:8b:e8:82:2b:45:6a:37:cf:0c:50:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 25 16:43:41 2022 GMT
            Not After : Apr 24 16:48:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:1b:a2:7b:be:5d:86:8a:e8:33:68:d5:00:
                    dc:06:8f:7d:67:92:f2:98:4e:61:16:17:3b:79:65:
                    82:24:7a:75:fa:30:5f:60:b3:20:33:21:19:ef:c1:
                    f8:40:53:58:ad:52:b4:72:9c:2f:22:bf:1e:91:e2:
                    dc:75:b6:36:1c:71:0a:68:2a:f0:5a:ae:6a:f6:9e:
                    92:70:0b:c1:70:7e:df:78:ce:56:41:13:73:8e:70:
                    91:e8:81:2b:36:33:27:5c:17:0f:6b:c7:34:d7:b9:
                    76:e6:b6:68:e5:00:90:c7:e4:9b:78:88:49:fc:77:
                    c6:9a:66:73:d1:a6:6a:a9:6c:45:08:34:c6:5d:20:
                    f4:0f:13:27:1b:8f:cd:b2:21:df:3f:c4:3c:e1:8e:
                    38:da:d1:11:88:a9:cb:f2:73:34:91:81:35:52:59:
                    15:fa:f8:93:a7:e0:92:69:22:5a:c0:ec:17:c3:f7:
                    a9:0b:7e:21:54:60:ff:bd:00:7c:48:43:96:b9:38:
                    45:71:20:09:d9:7d:80:aa:71:4e:bf:67:af:64:e5:
                    0a:0a:aa:b7:8d:e1:fa:70:70:f2:ec:8a:d7:56:da:
                    b6:dd:1e:e0:d6:74:ee:73:10:b1:fa:f7:d5:2a:0d:
                    4d:cc:63:27:8c:ba:d3:90:fc:18:e8:2a:df:01:e4:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:19:3A:3E:63:63:67:37:DD:C6:7C:0A:2C:07:C3:BE:53:3C:DE
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.124.0/24
                  5.252.78.0/24
                  37.143.61.0/24
                  181.215.226.0/24
                  181.215.229.0/24
                  191.96.110.0/24
                  191.101.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:b1:5b:15:d0:da:cc:ab:3f:d5:e0:e8:4d:4f:d0:f7:3d:
         0e:51:0b:94:90:1d:fd:5e:da:23:88:b4:ef:6a:77:73:0e:bf:
         6e:35:15:d7:89:f6:5e:ab:e5:7a:16:88:a3:9f:25:20:28:31:
         9c:10:15:26:e8:b2:f4:dd:87:22:f0:df:56:f8:94:8e:5a:03:
         8f:39:63:ba:85:56:9e:34:64:3e:2a:6d:fc:d8:35:b6:99:dc:
         20:e7:04:58:f3:a6:3b:da:2d:b6:0b:2a:89:c5:9a:3f:8e:dd:
         ac:9a:17:e6:cd:48:96:da:e2:a4:b4:76:20:61:10:23:c6:9f:
         01:35:0a:61:96:25:7d:9d:d9:61:de:91:7d:3c:a2:89:58:1a:
         f8:4d:05:5f:c6:05:21:27:17:24:82:eb:aa:3c:94:74:0f:bf:
         1b:d6:8c:71:c4:2c:e3:4b:6c:6c:86:49:f7:4b:cc:7d:24:4d:
         3c:9b:79:62:e3:57:34:9f:cd:93:79:40:cc:d8:b0:e1:5a:94:
         13:53:d4:e3:46:03:38:48:ee:23:da:f9:b9:64:e7:74:12:44:
         14:b6:d1:b7:3b:fa:1f:d5:69:4f:46:5a:7c:81:cd:3e:04:1d:
         93:ce:35:d3:f3:46:ce:ba:2d:cc:35:fb:6c:83:e1:cb:e6:23:
         43:f5:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org