Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203631313338.roa
File:                     3138352e3231362e3130352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          s97AtRFdNH0vMheuNcXMLgThxAyqel8NFytjRSosHdU=
Subject key identifier:   4C:E4:86:5C:E4:9E:47:D8:AF:E2:CC:39:35:8C:89:4B:D9:67:5C:AE
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       76C07E07004B07947F526E77F3899BFC21E5009B
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 26 Sep 2022 14:51:54 +0000
ROA not before:           Mon 26 Sep 2022 14:46:54 +0000
ROA not after:            Mon 25 Sep 2023 14:51:54 +0000
asID:                     61138
IP address blocks:        185.216.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c0:7e:07:00:4b:07:94:7f:52:6e:77:f3:89:9b:fc:21:e5:00:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:46:54 2022 GMT
            Not After : Sep 25 14:51:54 2023 GMT
        Subject: CN=4CE4865CE49E47D8AFE2CC39358C894BD9675CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:c9:0f:6c:0d:59:5c:cb:3d:d4:fb:a5:9f:
                    9b:9c:f1:a0:8a:ff:10:04:73:20:ba:53:9b:f3:bc:
                    a3:72:b0:74:bb:6e:34:78:cb:a9:ab:d7:57:a3:8e:
                    59:3a:dc:1f:c6:71:22:d9:16:30:db:bc:e8:93:c3:
                    4c:0e:11:7a:26:a8:1f:07:72:c3:70:26:99:53:0c:
                    c4:57:50:4e:b4:c9:5d:bf:98:71:f9:5b:79:5a:02:
                    43:31:64:5f:1e:74:76:c7:d7:0e:12:74:50:57:26:
                    28:bd:8c:18:9f:d1:09:2c:5d:9c:e5:2d:c0:56:3b:
                    e8:14:cd:cc:a0:0c:5b:f1:22:ea:aa:86:d2:35:c1:
                    78:8f:87:2b:95:af:bb:22:83:78:6c:06:e8:b2:bc:
                    3a:48:6d:13:9e:fe:93:17:5b:6d:28:69:20:c0:85:
                    13:d8:77:11:0a:93:b7:74:ac:cb:20:93:d0:c3:a1:
                    7f:61:83:d3:8b:22:be:ae:76:ea:85:7b:51:7a:d3:
                    bd:6e:f5:54:7e:29:de:b3:2f:1c:e2:4f:9a:a8:f0:
                    d0:16:14:9c:d5:bf:70:ff:10:a0:8d:4b:cf:65:d4:
                    b5:6c:3a:7b:40:55:4d:46:ea:80:9c:d7:a9:73:ff:
                    ad:cd:10:71:9f:5c:d5:f6:40:0d:46:5a:47:4c:5a:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:86:5C:E4:9E:47:D8:AF:E2:CC:39:35:8C:89:4B:D9:67:5C:AE
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:71:46:bd:55:b5:ab:54:8d:97:77:ed:27:36:81:23:a4:07:
         e0:7d:20:24:0a:d9:ae:5f:ef:1f:86:46:87:ef:b2:cd:5c:8a:
         04:f6:ba:d7:e6:26:c5:de:4e:ec:e2:c2:28:dd:3e:1f:8f:58:
         32:33:10:ca:19:66:a3:81:f8:9e:7e:7e:09:52:6e:6b:77:03:
         5a:08:47:9f:c7:19:0b:ae:24:6b:27:73:9d:7d:a9:55:e5:de:
         fc:e5:3b:0d:14:ea:40:37:f8:cf:c2:d2:fb:9a:eb:46:91:59:
         b0:23:23:68:0b:f2:1a:ee:74:4e:41:23:d1:4c:26:23:f1:92:
         c1:39:99:24:ab:bb:f7:08:d6:08:6e:17:90:d2:87:65:46:6e:
         75:96:f0:f2:13:57:29:11:ec:0e:a4:d9:33:3f:9d:5e:ca:5c:
         2f:10:98:8c:3d:45:c6:50:e1:62:a5:62:de:c5:0b:85:91:71:
         7e:38:0c:79:cf:31:ee:09:52:e0:42:72:99:c3:e5:4f:7b:de:
         36:e7:f1:77:0b:30:a1:10:1c:63:06:d5:89:e2:ba:d7:72:0a:
         20:27:54:fa:0f:2e:7b:c9:c9:e3:0b:4d:1b:f9:91:93:17:1b:
         e6:23:02:cb:e4:30:1b:3d:a2:91:60:0c:61:36:8d:39:8a:56:
         d2:89:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org