Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e20383334.roa
File:                     3138352e3231362e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          FjEk19/Qw8rHc3mIDLsrBLnlCemTEy7KHnZxijxWhQM=
Subject key identifier:   EE:48:DC:E8:E1:E4:68:CA:DF:0A:51:FF:00:F8:B4:D0:A3:88:C1:CB
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       7D5FA690608F1FD6E567D61A8067AA8BA7D6FA23
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:52:47 +0000
ROA not before:           Mon 26 Sep 2022 14:47:47 +0000
ROA not after:            Mon 25 Sep 2023 14:52:47 +0000
asID:                     834
IP address blocks:        185.216.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:a6:90:60:8f:1f:d6:e5:67:d6:1a:80:67:aa:8b:a7:d6:fa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:47:47 2022 GMT
            Not After : Sep 25 14:52:47 2023 GMT
        Subject: CN=EE48DCE8E1E468CADF0A51FF00F8B4D0A388C1CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:83:79:97:91:7c:73:34:4e:55:92:22:b8:
                    e5:2e:36:60:b3:4c:33:d0:5e:2f:87:9a:ba:b3:2f:
                    e6:50:8f:28:13:81:40:72:2b:e9:3f:9e:4c:f0:62:
                    f9:90:ce:4e:e5:d0:cf:b6:f6:61:5b:6c:15:45:a2:
                    29:bf:30:a9:43:50:f4:69:12:2c:bb:a1:b4:00:8f:
                    03:d8:c3:e3:bb:de:46:84:8c:7b:7a:ef:a7:6d:32:
                    b2:66:1e:63:46:20:77:1d:9a:10:d2:f4:3b:3d:76:
                    8f:9c:30:47:71:d0:2c:06:c1:0a:3b:c0:4a:01:73:
                    2d:e2:dd:36:f1:c5:01:79:fc:93:7f:00:1d:e4:9a:
                    e6:a8:b7:97:5e:4c:f3:c6:dd:93:cc:4c:a5:ab:d2:
                    d6:9a:35:18:e0:e8:77:e3:27:8e:f0:c7:a4:8a:8c:
                    8e:c1:0a:f5:cd:76:ce:6a:d4:ad:52:f1:da:8e:e5:
                    f7:30:fd:af:e0:6b:0c:b1:95:af:ee:21:14:8d:dd:
                    57:d1:42:02:e7:1c:84:5d:0d:11:8e:59:6d:8e:b9:
                    08:35:81:56:84:c2:77:a4:a7:9e:a6:92:4d:1b:cb:
                    db:e5:f5:d4:a4:50:69:bd:f8:e1:bc:cb:47:e8:4d:
                    97:b1:fe:bb:09:44:e2:ce:a1:d3:62:cb:18:11:1c:
                    1a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:DC:E8:E1:E4:68:CA:DF:0A:51:FF:00:F8:B4:D0:A3:88:C1:CB
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:f1:18:34:13:42:10:e4:81:e2:bf:91:c2:58:3d:48:b3:
         77:2f:c2:f6:ff:33:63:8d:af:c0:82:e9:96:21:8d:6d:22:93:
         13:3b:53:25:49:db:c4:61:19:d7:d1:e3:64:b8:74:42:09:6e:
         9a:45:65:2c:2e:a3:07:60:4c:33:1e:21:98:92:bc:1f:e0:b3:
         bf:26:79:76:95:04:f5:66:30:82:e2:5e:42:81:12:d1:a3:81:
         f2:9d:d7:8c:38:fd:b2:5f:4b:d0:bb:88:e3:1e:b5:85:dc:8b:
         e6:68:28:1b:7d:36:27:47:4e:57:cd:f7:19:6d:68:c1:3b:93:
         8f:9d:ab:6e:58:31:46:f3:c0:1a:55:99:73:1c:3b:6a:02:e7:
         60:31:2d:18:cf:43:d0:b8:86:a0:d0:e6:79:ee:b1:d9:96:06:
         b2:66:8a:59:11:2b:f5:e8:18:79:38:4a:b0:27:9d:56:b8:30:
         c7:a2:d7:45:dc:ef:30:4a:9e:84:3d:05:59:37:1f:a9:38:82:
         aa:ff:a2:1f:2b:f6:25:38:c6:20:fb:f6:79:78:bc:64:88:02:
         c5:46:da:00:17:5d:9c:b7:c4:59:0e:2c:43:23:6d:8a:c0:19:
         e6:94:e1:9f:5f:ba:0f:7d:50:1d:72:44:77:f5:ab:70:9e:a3:
         86:6a:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org