Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa
File:                     3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa (raw, json)
Hash identifier:          edYudR8HgrnsOGdD2zC2C6dhENbNum8pVUl58zoyry8=
Subject key identifier:   18:32:6A:61:34:34:11:68:0C:C2:71:09:28:1C:86:47:2D:67:54:89
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       242960123083FDCD5832030E858161FC46D92E64
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa
Signing time:             Fri 30 Dec 2022 16:59:35 +0000
ROA not before:           Fri 30 Dec 2022 16:54:35 +0000
ROA not after:            Fri 29 Dec 2023 16:59:35 +0000
asID:                     46450
IP address blocks:        185.216.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:60:12:30:83:fd:cd:58:32:03:0e:85:81:61:fc:46:d9:2e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Dec 30 16:54:35 2022 GMT
            Not After : Dec 29 16:59:35 2023 GMT
        Subject: CN=18326A61343411680CC27109281C86472D675489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:0c:e3:4d:73:ed:ab:97:15:f9:f4:2e:42:
                    e5:ab:ab:dc:50:c9:55:47:20:27:84:25:06:77:04:
                    57:fc:c9:c9:47:3d:05:b9:fb:d2:6c:5f:65:18:4b:
                    5d:2f:32:e2:29:db:af:f2:e1:49:48:ad:b1:5e:65:
                    0a:a9:35:3d:6b:65:02:aa:82:9f:5d:40:45:39:c1:
                    32:0b:62:59:6c:bb:51:c4:ed:0e:d2:f1:53:cd:ec:
                    ee:f3:0f:bc:a6:bc:e0:b7:a8:82:68:5c:8a:7c:c6:
                    16:3d:9e:fb:d0:c9:f9:87:7d:d2:8f:67:f6:27:d7:
                    cc:32:6f:ba:29:fc:8e:dc:56:e7:8d:02:2d:08:46:
                    c8:7c:c7:1f:47:54:f3:7a:1f:76:a4:f1:a2:b9:bb:
                    24:6c:c6:40:83:eb:b1:b3:2b:cd:59:13:08:04:dd:
                    29:ff:00:87:2b:49:5f:cc:6c:1f:62:74:5c:5f:63:
                    51:e1:81:45:75:6e:0d:92:e1:b1:59:98:2a:6f:cb:
                    a4:f8:8b:74:01:b9:df:98:c0:e6:e0:3c:07:24:f5:
                    45:9c:5d:25:3b:d9:57:65:08:38:41:91:df:c5:17:
                    45:a1:d7:03:7b:f9:b0:32:bc:94:94:f9:cd:d6:36:
                    41:de:e8:85:ad:7e:0c:60:02:4e:9b:76:f7:34:91:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:6A:61:34:34:11:68:0C:C2:71:09:28:1C:86:47:2D:67:54:89
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:63:bd:2e:7e:7f:9e:63:d7:b5:b2:3d:3d:57:f7:d6:92:56:
         35:6a:e0:7c:2a:3d:4e:06:10:f3:76:2c:d6:c6:f4:d3:66:67:
         ff:3a:b5:28:04:a1:1d:aa:7f:af:f6:86:48:18:50:c5:9f:9d:
         46:35:96:65:dc:b5:00:f7:f9:d7:05:7d:3b:c8:9e:b3:35:68:
         96:0a:60:12:55:91:db:a0:5a:8e:02:0a:11:6d:40:c3:8f:7f:
         b2:ac:50:cb:ad:9a:a3:fe:56:a3:b9:11:9f:5a:06:55:4c:b6:
         77:4d:c2:dd:e5:95:d1:7b:4a:cd:01:15:b5:ff:2a:3f:0f:8c:
         85:d8:66:04:07:08:ca:fc:55:46:d8:d7:2a:33:73:28:57:af:
         8c:b6:bd:21:6e:fe:61:a4:13:16:ad:0c:7c:50:cb:e4:52:46:
         03:70:a3:3d:27:96:9a:ad:fc:38:3e:e3:48:09:1e:f3:7f:91:
         6b:f2:cf:ef:fa:8d:21:75:66:77:cd:fd:21:bc:a9:79:33:8d:
         28:72:58:73:87:1f:a5:b4:0a:9a:ac:0e:51:06:e7:6e:71:c0:
         ae:69:52:3c:8e:9c:b4:a4:1d:f5:5e:6b:ab:54:60:ae:c3:7e:
         c9:e7:1d:85:92:59:ab:c0:6c:ad:02:f8:b5:ea:5c:e8:8b:51:
         d3:db:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org