Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier:          zJOF77g/9EVe+7Q9U9F0U4KHF2IW+4Q+XdKVK9QWXVE=
Subject key identifier:   22:CF:4A:3D:3D:33:3C:11:C3:2B:E0:0E:A3:B1:A4:4E:B1:27:47:84
Certificate issuer:       /CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Certificate serial:       62DE24D088FAE3E8B707963996739977936367D9
Authority key identifier: 9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa
Signing time:             Wed 01 Feb 2023 23:44:01 +0000
ROA not before:           Wed 01 Feb 2023 23:39:01 +0000
ROA not after:            Wed 31 Jan 2024 23:44:01 +0000
asID:                     209260
IP address blocks:        193.84.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:de:24:d0:88:fa:e3:e8:b7:07:96:39:96:73:99:77:93:63:67:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
        Validity
            Not Before: Feb  1 23:39:01 2023 GMT
            Not After : Jan 31 23:44:01 2024 GMT
        Subject: CN=22CF4A3D3D333C11C32BE00EA3B1A44EB1274784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:f4:37:ac:b7:f5:bd:dd:03:6d:d1:10:0d:
                    92:81:43:e0:5f:87:45:ce:07:d2:96:b0:ad:ae:76:
                    8b:52:dc:f0:48:eb:14:46:ab:86:5f:e2:0a:7a:dc:
                    cd:c6:f7:63:c6:dc:67:2e:a1:03:02:67:59:87:39:
                    92:d4:7e:a2:e9:4c:8e:93:55:19:cf:1b:36:0c:71:
                    bb:89:bf:a4:92:8e:c0:9d:9a:f1:25:f6:33:e8:79:
                    62:9b:61:26:41:a5:53:a9:38:f5:f6:87:e5:fe:36:
                    9c:6c:07:fe:af:3c:78:06:46:76:7f:ac:25:d0:e6:
                    37:96:d3:4d:a5:00:b4:ad:95:95:30:05:6f:dd:6b:
                    e8:01:8f:72:ad:99:74:31:48:62:6a:cd:19:95:de:
                    79:c8:91:dd:2b:8c:1d:66:55:61:cd:16:a6:e9:e1:
                    67:7d:db:ec:05:9d:a4:00:d2:30:fc:06:f7:99:3f:
                    c4:c1:f4:96:e8:fb:3a:e5:a6:16:a7:a3:b4:20:a3:
                    1e:ee:d6:0e:e5:3d:59:66:b9:0e:08:ae:17:dc:ef:
                    76:ac:89:c2:56:57:27:08:3b:2e:d3:bb:a3:92:df:
                    9c:de:45:51:47:63:23:e0:b7:fb:6e:c8:10:8b:53:
                    e0:98:9a:50:fa:56:6f:fa:6f:2d:55:cb:8d:7f:78:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:4A:3D:3D:33:3C:11:C3:2B:E0:0E:A3:B1:A4:4E:B1:27:47:84
            X509v3 Authority Key Identifier:
                keyid:9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/9C4E1AD14A6020BC070786E9464412EC4918F7EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:82:f9:90:1e:0b:42:61:36:8b:a5:08:5b:3d:bb:3b:80:cd:
         d8:94:98:45:5c:3e:f9:de:3d:92:1b:89:e4:6b:c0:3d:fb:df:
         e8:ec:a7:46:ae:9e:67:c7:52:d8:5a:9e:7c:32:c5:8f:90:46:
         62:66:2b:47:57:02:8c:ef:6a:a3:6a:27:11:d6:90:e3:f8:03:
         6a:b7:e6:4c:72:7d:d2:67:aa:df:40:4e:e9:55:ef:3d:48:51:
         cb:ba:24:91:7a:c2:75:9b:60:c4:14:c3:e5:0c:59:cf:f7:dc:
         a2:e0:21:ae:4a:2b:25:f6:37:f6:dc:b2:9b:73:55:88:27:05:
         d6:a6:d6:ce:3d:95:6c:b0:ec:9f:4d:f3:33:cd:be:09:d1:b1:
         cd:5f:a9:06:8b:3b:cd:d9:83:45:f3:96:f5:83:c5:92:06:be:
         17:50:1e:2b:03:33:96:e9:43:32:61:54:37:3a:d9:ba:f1:95:
         36:8d:33:0c:60:56:cc:4a:9a:9f:3c:76:1a:a8:31:f4:70:4e:
         58:b3:8d:a6:87:d2:9c:0d:e0:6e:23:52:4b:1f:25:76:3d:23:
         55:6d:3f:85:df:ce:17:a4:92:14:0d:39:69:30:db:eb:e7:06:
         cb:1c:73:7c:ae:ca:8c:f5:9a:ee:1a:a0:93:48:8d:b1:7e:77:
         4c:59:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:49:12 2025 by rpki-client