Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa
File:                     3138352e3231362e3130362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          hOaIhCjogTYi7AyiuzeQAuGBLfU7VMI8tYAvuRj2LII=
Subject key identifier:   6E:EA:60:9A:C5:23:6F:FF:5F:D7:0A:A9:B9:9B:F8:84:4D:D5:EC:03
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       1AA08E4F0A4A4BF03A950D53E6FF1B180C7504A5
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:56:22 +0000
ROA not before:           Mon 26 Sep 2022 14:51:22 +0000
ROA not after:            Mon 25 Sep 2023 14:56:22 +0000
asID:                     834
IP address blocks:        185.216.106.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:8e:4f:0a:4a:4b:f0:3a:95:0d:53:e6:ff:1b:18:0c:75:04:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:51:22 2022 GMT
            Not After : Sep 25 14:56:22 2023 GMT
        Subject: CN=6EEA609AC5236FFF5FD70AA9B99BF8844DD5EC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:4e:45:8c:7a:6f:32:11:d5:a4:28:ce:bc:
                    ec:ed:71:a3:2b:44:bf:52:8c:f3:2f:b9:5e:3b:9d:
                    03:43:b7:ba:61:f6:d6:dc:64:b4:f5:2b:36:0e:c0:
                    78:9b:81:a8:f0:9f:ab:4a:1d:4c:5f:2e:95:05:1f:
                    70:4d:be:48:45:73:f0:45:e5:e0:2a:8c:4a:e0:6a:
                    21:36:96:c3:12:17:fe:03:db:9e:fa:f5:55:28:39:
                    2d:50:44:35:c6:5a:5e:5a:56:fd:20:00:04:5c:04:
                    09:98:50:4b:f1:10:81:ca:37:03:51:05:13:ac:a3:
                    58:92:a2:f0:3b:c8:1d:1e:e3:e9:0b:f4:de:4e:fb:
                    4d:38:ae:7e:6e:e1:49:17:ad:54:35:c7:ce:36:08:
                    52:70:28:69:80:00:0f:9b:5f:e5:ee:c0:ce:57:58:
                    be:e1:f8:d0:d6:80:ef:21:c1:e8:f6:53:b5:ba:df:
                    da:9a:5b:62:78:e2:a0:79:b2:a7:b0:51:74:69:ad:
                    b9:10:23:c7:f0:5c:fa:24:aa:fe:e5:f0:d6:c0:53:
                    fa:17:fd:09:1a:0d:ee:7a:fd:d9:c2:24:e6:3c:2a:
                    f5:51:89:e5:c3:d9:8b:8b:61:1d:b5:89:b5:dd:f0:
                    e5:c9:6a:75:7f:35:ea:99:04:bf:01:85:87:43:ed:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:60:9A:C5:23:6F:FF:5F:D7:0A:A9:B9:9B:F8:84:4D:D5:EC:03
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:44:77:2a:30:7e:37:4e:32:54:f3:4c:57:1c:5e:63:c8:1c:
         b4:3e:8b:c6:f8:a4:7b:4b:aa:86:ff:3c:2d:c3:b2:66:aa:11:
         fc:ea:22:fb:8e:bb:47:b0:64:53:00:4e:62:32:c6:54:37:44:
         fc:00:46:62:8a:e5:15:39:86:6c:1e:cb:4b:9a:36:c0:3b:78:
         9b:41:53:7e:82:9c:1b:cd:50:cf:a1:81:21:25:09:23:f4:40:
         89:65:d4:ab:13:49:30:f4:3c:fb:0b:1c:4f:90:85:0b:9e:4a:
         3d:59:cb:32:1d:ad:69:5d:2f:bd:49:81:45:ee:74:1d:5d:81:
         1b:91:a9:f5:f6:81:8f:e3:5b:bb:e6:f0:38:d6:7f:39:ef:77:
         29:9a:70:15:8c:a9:41:56:b5:65:11:70:fc:20:8d:9a:2c:b9:
         ae:33:de:86:12:17:47:63:b9:a5:4f:9d:72:ee:8c:2b:c9:52:
         a1:2e:1c:5d:0b:c2:32:f9:87:69:f3:4c:b4:30:11:1d:c7:d3:
         fe:f7:81:8a:ef:2c:79:2c:6a:0d:ea:21:87:eb:ec:98:e6:8b:
         d8:2b:0b:95:0c:c1:e3:a2:4e:40:e6:c0:e3:e4:5f:48:2d:e4:
         43:2f:be:da:bc:a3:c3:81:ae:5c:24:c9:45:4a:f6:c1:15:4f:
         7f:c0:40:eb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIUGqCOTwpKS/A6lQ1T5v8bGAx1BKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjA5MjYxNDUxMjJaFw0yMzA5MjUxNDU2MjJaMDMxMTAvBgNV
BAMTKDZFRUE2MDlBQzUyMzZGRkY1RkQ3MEFBOUI5OUJGODg0NERENUVDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhU5FjHpvMhHVpCjOvOztcaMr
RL9SjPMvuV47nQNDt7ph9tbcZLT1KzYOwHibgajwn6tKHUxfLpUFH3BNvkhFc/BF
5eAqjErgaiE2lsMSF/4D25769VUoOS1QRDXGWl5aVv0gAARcBAmYUEvxEIHKNwNR
BROso1iSovA7yB0e4+kL9N5O+004rn5u4UkXrVQ1x842CFJwKGmAAA+bX+XuwM5X
WL7h+NDWgO8hwej2U7W639qaW2J44qB5sqewUXRprbkQI8fwXPokqv7l8NbAU/oX
/QkaDe56/dnCJOY8KvVRieXD2YuLYR21ibXd8OXJanV/NeqZBL8BhYdD7cSHAgMB
AAGjggIlMIICITAdBgNVHQ4EFgQUbupgmsUjb/9f1wqpuZv4hE3V7AMwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBogYI
KwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzEzNjJlMzEzMDM2MmUzMDJmMzIzMzJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudhqMA0GCSqGSIb3DQEBCwUAA4IBAQBS
RHcqMH43TjJU80xXHF5jyBy0PovG+KR7S6qG/zwtw7JmqhH86iL7jrtHsGRTAE5i
MsZUN0T8AEZiiuUVOYZsHstLmjbAO3ibQVN+gpwbzVDPoYEhJQkj9ECJZdSrE0kw
9Dz7CxxPkIULnko9WcsyHa1pXS+9SYFF7nQdXYEbkan19oGP41u75vA41n8573cp
mnAVjKlBVrVlEXD8II2aLLmuM96GEhdHY7mlT51y7owryVKhLhxdC8Iy+Ydp80y0
MBEdx9P+94GK7yx5LGoN6iGH6+yY5ovYKwuVDMHjok5A5sDj5F9ILeRDL77avKPD
ga5cJMlFSvbBFU9/wEDr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org