Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          yZTh98EBjFVOMgB50p3D0iLBJvt0IrUaY3o/QyWvx2Y=
Subject key identifier:   7C:F5:71:FD:32:12:57:F9:80:80:7A:86:38:07:92:EF:1E:BE:9A:02
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       206C4D8663A76F87EC1171EBCB6D6A1F472A8DB7
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9009.roa
Signing time:             Mon 13 Jun 2022 12:52:41 +0000
ROA not before:           Mon 13 Jun 2022 12:47:41 +0000
ROA not after:            Mon 12 Jun 2023 12:52:41 +0000
asID:                     9009
IP address blocks:        2.57.20.0/23 maxlen: 23
                          2.58.172.0/24 maxlen: 24
                          45.95.14.0/24 maxlen: 24
                          45.137.124.0/24 maxlen: 24
                          179.61.131.0/24 maxlen: 24
                          179.61.201.0/24 maxlen: 24
                          181.214.3.0/24 maxlen: 24
                          181.214.15.0/24 maxlen: 24
                          181.214.19.0/24 maxlen: 24
                          181.214.27.0/24 maxlen: 24
                          181.214.28.0/24 maxlen: 24
                          181.214.32.0/24 maxlen: 24
                          181.214.55.0/24 maxlen: 24
                          185.34.42.0/24 maxlen: 24
                          185.135.10.0/24 maxlen: 24
                          185.139.236.0/24 maxlen: 24
                          185.145.38.0/24 maxlen: 24
                          185.172.66.0/24 maxlen: 24
                          185.174.63.0/24 maxlen: 24
                          191.96.65.0/24 maxlen: 24
                          191.96.69.0/24 maxlen: 24
                          191.96.171.0/24 maxlen: 24
                          191.96.173.0/24 maxlen: 24
                          191.101.23.0/24 maxlen: 24
                          213.109.169.0/24 maxlen: 24
                          2a0a:ce04::/48 maxlen: 48
                          2a0a:ce04:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:4d:86:63:a7:6f:87:ec:11:71:eb:cb:6d:6a:1f:47:2a:8d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 13 12:47:41 2022 GMT
            Not After : Jun 12 12:52:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:72:69:18:42:0c:b2:cb:20:44:a1:d5:73:
                    c3:76:78:e4:45:c6:23:91:7e:52:c0:8e:65:e2:1f:
                    4e:8a:9f:4d:35:d6:e7:37:c6:66:a5:dc:74:db:b4:
                    c8:4b:a7:ae:5e:dd:3e:04:74:9d:5c:9a:af:99:88:
                    6b:48:93:4e:1e:6e:62:91:7e:7b:fd:61:9d:88:d8:
                    82:c0:47:ab:fc:64:39:e2:9b:89:d7:04:90:11:39:
                    6b:07:30:44:5e:6a:7b:f4:f0:b9:1a:6f:8c:e0:96:
                    32:3f:b1:db:78:af:aa:fe:7d:51:e8:56:8c:9c:0d:
                    09:49:b5:70:6d:ca:d2:74:31:03:5a:e8:26:a7:a2:
                    ad:fa:3b:22:20:c1:c3:3e:e9:15:35:76:75:05:1e:
                    fd:22:ec:f3:ad:47:df:f7:49:59:17:da:df:17:1e:
                    cb:88:36:d1:bf:26:2e:6c:3a:b7:ec:ad:2e:48:d6:
                    c3:52:57:96:8a:3e:2b:7d:57:dd:fa:b3:b3:77:15:
                    9c:f1:9d:fc:16:0e:7c:4e:c3:43:d5:9b:67:59:79:
                    af:cb:16:8e:7c:f4:bc:bc:53:bb:d4:55:99:c5:0f:
                    38:d7:bc:90:93:22:67:d2:1b:00:c8:fa:54:14:b6:
                    46:e3:aa:f0:4c:2f:a5:ee:01:77:ee:2f:0e:45:ef:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:71:FD:32:12:57:F9:80:80:7A:86:38:07:92:EF:1E:BE:9A:02
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.20.0/23
                  2.58.172.0/24
                  45.95.14.0/24
                  45.137.124.0/24
                  179.61.131.0/24
                  179.61.201.0/24
                  181.214.3.0/24
                  181.214.15.0/24
                  181.214.19.0/24
                  181.214.27.0-181.214.28.255
                  181.214.32.0/24
                  181.214.55.0/24
                  185.34.42.0/24
                  185.135.10.0/24
                  185.139.236.0/24
                  185.145.38.0/24
                  185.172.66.0/24
                  185.174.63.0/24
                  191.96.65.0/24
                  191.96.69.0/24
                  191.96.171.0/24
                  191.96.173.0/24
                  191.101.23.0/24
                  213.109.169.0/24
                IPv6:
                  2a0a:ce04::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:0c:29:5f:ac:53:bd:75:a7:f5:c1:61:e0:04:3a:00:22:7c:
         b9:44:e8:d1:74:5b:52:9d:39:6d:f0:79:ba:cc:49:5d:60:22:
         9a:c9:d3:f0:ab:9a:27:6c:70:ac:a8:76:dc:80:f8:d3:c3:ee:
         35:2d:5c:8e:72:bf:24:94:52:86:f0:8f:cc:56:89:4f:fe:9b:
         56:b2:55:9f:67:34:b4:fb:ba:63:43:c6:4b:17:c3:56:bf:4c:
         be:26:81:48:d6:e1:b8:40:b7:d6:d0:41:e5:ec:7a:02:ec:dc:
         a5:84:41:62:44:00:5b:91:18:93:94:81:f1:4f:df:43:0a:0c:
         85:92:be:ec:0a:35:ba:53:81:6e:01:6c:8a:a7:d6:d1:59:4a:
         dc:53:cf:76:52:79:d2:76:21:42:9a:87:0b:58:10:a0:9f:64:
         87:53:8b:f2:33:66:1e:ef:d8:90:f5:a8:a1:1b:1a:a8:87:24:
         36:21:46:c4:33:fc:9a:81:10:5c:d7:66:67:f1:cc:80:00:85:
         8d:35:ee:b7:f0:10:af:e5:7d:9c:13:dc:41:d6:8d:53:35:14:
         9b:4a:44:5e:57:50:53:a6:a3:d3:c7:92:20:14:f0:96:83:d3:
         91:41:fb:9b:54:56:70:f4:35:03:bb:ab:1b:10:57:fe:c6:55:
         69:cb:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org