Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa
File:                     3138352e3137362e39332e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          hT+vn1hNsxwXz5KZXQl8bAKtFdj7zbSQ9GYW1qpzT5s=
Subject key identifier:   90:7B:7A:32:31:84:FB:8E:AE:3A:1F:F1:FD:50:90:E6:BD:E3:77:6B
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       5A892EE5887FB164664D322AE9E910BE9023FD79
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa
Signing time:             Wed 18 Jan 2023 11:22:57 +0000
ROA not before:           Wed 18 Jan 2023 11:17:57 +0000
ROA not after:            Wed 17 Jan 2024 11:22:57 +0000
asID:                     43260
IP address blocks:        185.176.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:89:2e:e5:88:7f:b1:64:66:4d:32:2a:e9:e9:10:be:90:23:fd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Jan 18 11:17:57 2023 GMT
            Not After : Jan 17 11:22:57 2024 GMT
        Subject: CN=907B7A323184FB8EAE3A1FF1FD5090E6BDE3776B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:38:cb:cd:44:14:78:26:b5:c8:95:7c:3d:
                    4a:64:4b:09:d8:65:b0:3f:7c:4b:7b:cf:f3:80:3a:
                    fd:e1:ef:3a:22:61:84:f0:71:a8:5a:90:65:80:10:
                    54:e8:a7:e3:f7:d4:22:6e:33:33:40:3b:2d:d9:3b:
                    26:4b:dc:92:b4:f6:25:84:f7:04:b3:01:87:ac:6c:
                    cc:bf:fe:27:85:be:a8:73:13:36:52:91:ab:67:46:
                    90:ef:ce:fe:27:22:4c:38:4c:10:f6:d6:f9:21:21:
                    c4:a3:d1:b4:7f:3e:d6:d8:15:1b:05:52:44:36:eb:
                    34:94:16:73:43:40:68:16:36:1c:8f:b2:49:00:e4:
                    79:20:3d:b1:24:11:65:27:92:77:74:ed:17:23:4c:
                    4f:78:0c:73:a4:3e:57:be:a0:7f:e9:62:e2:aa:e7:
                    02:e3:e5:ef:25:6d:1c:78:38:7a:79:ab:03:6c:1b:
                    7b:a7:82:bc:fb:80:38:1d:2d:23:34:d1:a8:e3:da:
                    65:7d:35:2d:ec:c3:dc:a6:e4:17:44:84:61:45:5d:
                    53:0b:93:7a:85:09:ed:1d:f8:d0:96:51:14:2f:ec:
                    47:ae:3c:25:e4:51:c0:d2:54:48:c0:52:06:dc:3d:
                    22:cb:ca:e3:69:ca:49:4b:b3:83:fc:7b:2a:e8:e5:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7B:7A:32:31:84:FB:8E:AE:3A:1F:F1:FD:50:90:E6:BD:E3:77:6B
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:22:9b:71:a8:db:f5:85:40:80:91:8c:ed:31:b7:e9:2b:88:
         c3:28:5d:61:24:8c:5c:e1:89:97:e1:4f:eb:75:38:9b:47:35:
         fd:21:29:0a:15:a9:3f:2d:6c:b5:4a:dc:6a:ce:c0:6e:ca:05:
         93:db:92:89:8f:37:98:3b:5a:d2:75:0e:15:80:df:23:fa:55:
         1a:37:c9:2f:c7:e4:f9:e6:9e:6a:ee:13:c6:b5:86:f7:f6:82:
         c7:26:60:2d:8e:36:39:e5:41:f2:72:02:d8:95:a1:a6:39:dc:
         be:05:b5:94:c8:25:30:84:48:8a:41:a2:69:69:98:80:2b:43:
         e1:96:54:15:64:19:01:37:7c:de:6d:8d:ba:19:41:36:b0:bf:
         1a:42:8b:a3:a1:b9:56:6e:e9:dc:c2:e0:0c:d5:9f:c5:30:77:
         16:39:05:9f:94:10:89:3d:a4:9a:13:97:90:ec:21:29:ed:98:
         f2:b1:92:64:62:b5:4f:ff:1b:8d:43:45:aa:1d:38:3f:8d:e0:
         80:6a:7e:15:24:ff:2d:b1:5e:a7:bd:5d:a6:a9:4e:7b:17:54:
         e8:b2:d3:21:f1:45:32:37:ab:dc:b0:9c:68:84:07:f8:d8:47:
         5b:12:e0:81:21:59:f1:24:7f:37:6a:46:8d:77:b3:f5:ad:d6:
         54:82:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org