Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          lW8pFAYgHTtmHU6HKDmQ1i10L30NIQj2N0xDGb1pmtc=
Subject key identifier:   95:B7:C8:C4:DD:24:77:5A:1C:A1:AF:7E:AF:7B:F2:DB:6C:42:90:19
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       179DBBCF11D9482E2E27E4C215E52FE2567EF41F
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16509.roa
Signing time:             Thu 20 Oct 2022 10:58:48 +0000
ROA not before:           Thu 20 Oct 2022 10:53:48 +0000
ROA not after:            Thu 19 Oct 2023 10:58:48 +0000
asID:                     16509
IP address blocks:        185.145.38.0/24 maxlen: 24
                          185.151.58.0/24 maxlen: 24
                          185.170.41.0/24 maxlen: 24
                          213.109.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:bb:cf:11:d9:48:2e:2e:27:e4:c2:15:e5:2f:e2:56:7e:f4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 20 10:53:48 2022 GMT
            Not After : Oct 19 10:58:48 2023 GMT
        Subject: CN=95B7C8C4DD24775A1CA1AF7EAF7BF2DB6C429019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:44:2d:a2:dc:6d:9a:da:47:c3:07:7a:a6:
                    d7:b2:26:f2:4d:b5:a3:dc:04:71:ca:78:50:a9:86:
                    5d:d2:80:d8:ab:6c:bf:e0:8f:e8:64:05:d8:1e:ee:
                    8b:11:eb:7d:86:93:ab:7f:c8:87:1d:b4:c4:a0:e8:
                    5b:93:ca:89:c5:60:0f:9e:7e:29:78:cb:b7:2e:89:
                    2d:d2:02:33:1e:fc:4d:0e:f6:4d:bd:8e:36:c5:d3:
                    43:82:b9:12:11:1f:e5:14:58:60:8b:ea:03:0f:d1:
                    f3:ee:7f:ff:be:67:a1:08:4b:07:7b:3c:59:33:e9:
                    e4:89:bf:4e:cb:f6:f0:0a:09:5d:e8:62:32:9b:68:
                    b2:24:31:63:4e:cc:05:57:cc:a3:f5:d8:e4:d2:8c:
                    83:f7:55:bc:0e:0a:08:24:c0:d3:61:59:2a:f4:c3:
                    12:e3:49:7a:a0:61:d8:94:1e:6f:63:4b:f1:99:92:
                    08:37:4c:7c:6c:40:c2:75:62:94:b2:a0:74:42:71:
                    62:cf:d3:33:b2:b9:c3:53:66:63:d0:cf:26:7c:f5:
                    85:88:99:07:1d:a9:75:e3:a1:0a:48:2e:e7:59:b7:
                    19:e6:ed:6e:b5:34:04:a7:00:51:28:26:77:82:ef:
                    a1:c9:10:68:1c:4e:17:2a:8a:d4:aa:ca:10:64:2c:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:C8:C4:DD:24:77:5A:1C:A1:AF:7E:AF:7B:F2:DB:6C:42:90:19
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.38.0/24
                  185.151.58.0/24
                  185.170.41.0/24
                  213.109.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:02:87:e2:57:07:70:5b:a3:8a:55:3e:c9:b7:87:6f:cf:
         9d:b2:6b:4d:bc:67:34:fc:37:20:4c:3f:9f:a3:81:4e:f3:28:
         17:18:37:7e:c7:a6:c8:39:a7:30:59:39:c8:93:b7:31:f9:26:
         e3:4f:8f:e1:3a:55:e0:a8:63:8a:db:18:75:ae:fa:0c:ae:a2:
         e6:72:96:99:4b:48:99:02:21:e5:8e:11:84:e3:4d:58:db:c2:
         54:c7:cf:53:d5:3b:49:31:d0:44:0b:6b:59:92:72:2e:b0:4b:
         85:78:b7:76:aa:f6:18:fd:41:2b:40:24:fa:a8:c6:c9:d5:61:
         52:be:89:21:d7:a6:b7:8f:8f:48:cd:2c:72:6d:9d:bf:a7:9a:
         7e:a8:b5:07:13:e7:92:ee:01:16:5e:72:e7:7c:4e:16:72:8d:
         e7:48:fe:0e:40:77:02:05:f0:dc:1d:83:5c:8a:39:34:9b:67:
         40:c9:01:b7:68:93:79:a7:a1:50:82:75:d7:76:d6:81:9c:a3:
         78:cb:4e:0a:e9:e4:4a:bc:93:20:7e:45:bb:46:8a:53:9f:86:
         bc:fd:35:45:9e:77:c7:1c:72:a1:9e:7f:d2:fa:c6:62:15:47:
         6e:d1:e0:fc:7b:ae:dd:5d:0e:8d:6f:04:ae:e7:5b:1f:99:7c:
         86:3e:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org