Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          ZAa8v084Wf79712IMf6smkxWrmpYTKkXK03r7wRZtyI=
Subject key identifier:   77:38:81:E4:22:15:09:4C:72:CE:7B:99:59:C9:AF:3D:11:75:D4:83
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       40805B199B151C6E74B415545C9BD6381F7C4C97
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS16509.roa
Signing time:             Sat 11 Jun 2022 06:28:49 +0000
ROA not before:           Sat 11 Jun 2022 06:23:49 +0000
ROA not after:            Sat 10 Jun 2023 06:28:49 +0000
asID:                     16509
IP address blocks:        5.45.38.0/23 maxlen: 24
                          45.137.157.0/24 maxlen: 24
                          185.145.38.0/24 maxlen: 24
                          185.151.58.0/24 maxlen: 24
                          185.170.41.0/24 maxlen: 24
                          213.109.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:80:5b:19:9b:15:1c:6e:74:b4:15:54:5c:9b:d6:38:1f:7c:4c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 11 06:23:49 2022 GMT
            Not After : Jun 10 06:28:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:7c:c0:b8:e2:9d:4c:dd:4f:fb:19:f5:06:
                    93:8b:a9:95:fa:51:23:06:7f:ff:03:c8:a4:bc:62:
                    73:d5:9f:27:fd:ab:6e:7e:c7:2c:8b:52:c2:14:84:
                    50:f6:5b:56:14:b1:e9:5f:be:d4:81:d4:41:dd:71:
                    41:6c:5f:c6:bd:ea:62:63:49:d3:c0:78:14:3a:61:
                    2b:f2:8f:53:78:63:03:cf:07:52:a3:2c:59:1e:10:
                    e6:ff:00:47:08:1f:f2:1e:41:32:f4:d4:5b:e5:69:
                    33:e9:c7:7c:0d:e0:05:a0:61:92:15:8d:69:c6:0a:
                    d5:2e:d0:99:95:09:4a:8d:38:1b:b9:a8:f3:25:5f:
                    d0:93:d9:5b:dd:80:ff:c2:6a:e2:a5:56:5f:26:2d:
                    16:68:c9:67:eb:07:5d:7a:87:23:7c:17:9c:a2:66:
                    12:00:8d:cb:d1:cf:4a:43:1d:4b:e5:3e:d7:f5:39:
                    c6:53:16:ab:b9:8f:72:3d:1f:dd:9a:c5:fb:3b:ab:
                    50:e9:d3:12:ca:62:b8:92:ea:52:cc:2c:80:b9:d9:
                    01:cf:54:f9:ac:71:4e:3e:95:fb:32:17:f9:a9:4b:
                    47:ca:b4:7a:6c:74:1c:5d:71:b8:8c:2b:f7:93:f7:
                    07:38:fb:0f:24:83:90:b0:16:e3:03:0a:f8:45:dc:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:81:E4:22:15:09:4C:72:CE:7B:99:59:C9:AF:3D:11:75:D4:83
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.38.0/23
                  45.137.157.0/24
                  185.145.38.0/24
                  185.151.58.0/24
                  185.170.41.0/24
                  213.109.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:c3:b5:f4:97:04:e2:c3:5b:52:ad:eb:f6:77:14:7f:c6:
         48:46:e0:54:f8:ab:67:5b:4c:2d:9d:58:60:c0:1c:79:fe:dd:
         0e:f0:61:cd:5d:ca:66:3b:8c:ac:d3:4a:6e:af:4c:62:32:28:
         27:82:7c:90:a8:e5:31:28:d4:a2:4b:e5:60:04:a5:2d:28:77:
         83:f4:ae:f5:00:45:46:f9:f6:d8:36:54:fc:15:db:a5:55:ec:
         0e:3a:38:0d:a4:05:e8:fc:92:d7:c6:f0:04:bc:77:a1:ad:90:
         19:ed:1d:64:30:41:5e:e0:5c:29:f2:6d:39:cb:4d:9c:e6:47:
         a2:ff:0d:a7:aa:6b:6c:a1:86:55:53:12:0d:05:04:68:c0:e4:
         0e:f9:f8:c9:42:53:34:3e:e7:4b:bf:90:f8:1f:3a:b5:4d:0d:
         58:35:cb:48:44:8a:a1:1a:bc:43:44:77:46:c7:18:0f:41:f6:
         25:bd:91:73:ed:8f:a1:de:e6:23:90:91:24:60:9c:f1:d0:65:
         10:3d:81:6b:0a:de:2f:53:fd:95:25:a5:1d:09:1d:8c:0c:ec:
         92:8e:14:2f:02:cd:4d:1c:3f:8c:d5:73:34:14:f2:83:3a:72:
         c6:cf:c9:76:10:98:b9:e6:fc:76:65:e8:ae:67:ad:f0:8c:2f:
         bc:77:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org