Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: HueobqV1a06jr0agR0sVXBg25boua2DNXhsxB2/SPwM=
Subject key identifier: 54:85:E6:88:01:70:CE:11:60:32:4C:C3:7C:EA:97:D6:C7:43:94:E3
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 1C5F112EA477E843F3226B0E5AD42FE45DB45D23
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
Signing time: Wed 12 Mar 2025 00:53:58 +0000
ROA not before: Wed 12 Mar 2025 00:48:58 +0000
ROA not after: Wed 11 Mar 2026 00:53:58 +0000
asID: 1239
IP address blocks: 86.38.4.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:11:2e:a4:77:e8:43:f3:22:6b:0e:5a:d4:2f:e4:5d:b4:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 12 00:48:58 2025 GMT
Not After : Mar 11 00:53:58 2026 GMT
Subject: CN=5485E6880170CE1160324CC37CEA97D6C74394E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:aa:6b:70:46:98:41:39:42:8d:06:a4:a6:
11:3a:67:34:a8:27:a5:db:39:6e:8f:08:2e:b1:d8:
b4:4f:47:fb:f7:b4:5b:95:99:b7:84:c9:fd:ae:3d:
c8:f5:80:6f:83:cb:7c:32:ea:7f:c8:df:02:aa:75:
b0:00:2a:69:ce:b2:6d:25:6d:c9:03:b1:2e:b2:54:
47:65:03:3b:8d:7e:d9:fa:24:eb:e4:63:21:c8:fa:
32:8d:d6:f8:21:bb:f8:04:af:55:c6:ef:67:5c:88:
ce:63:1b:34:6a:c1:3f:68:d3:d1:c3:d4:90:f7:57:
c2:d7:96:3b:2c:3d:cf:92:e7:2f:5e:f5:a4:34:e1:
36:a9:2d:f0:d7:e0:8a:3e:3b:c4:c8:ae:4d:ec:10:
b4:06:18:bb:19:4d:1f:51:bf:f3:f3:69:32:e7:fe:
b1:3d:0d:7b:33:99:75:6d:07:14:18:73:1f:32:dc:
f0:87:79:5a:7a:ba:b1:25:83:53:38:24:59:1b:53:
df:e0:53:31:fe:fd:eb:0f:0b:23:4e:26:f3:85:2a:
42:57:95:83:e8:10:07:4f:e7:50:47:7e:04:80:c5:
76:f5:fc:a3:78:0e:02:55:09:a1:31:91:d5:69:b7:
d9:b2:53:41:50:fa:d3:60:29:f2:0d:6c:2f:7e:19:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:E6:88:01:70:CE:11:60:32:4C:C3:7C:EA:97:D6:C7:43:94:E3
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/23
86.38.246.0/23
89.116.189.0/24
89.116.242.0/23
89.116.246.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:65:52:0f:9b:a5:eb:cb:77:7d:5b:15:e0:8e:16:b6:30:9e:
41:ea:27:58:73:2b:94:6a:a7:7a:2c:b7:0f:b4:81:61:b3:c5:
ce:14:d0:ae:e0:17:8b:c5:57:58:52:f9:da:9a:ad:07:40:91:
92:2e:7b:0d:5b:23:37:cb:7e:fd:ab:6f:8d:1c:45:15:19:ea:
03:54:79:6f:23:a6:26:ee:9d:bd:95:02:f5:4e:0b:c4:55:bd:
ce:3d:2b:2f:6a:e5:83:92:3e:db:fe:3a:ac:5d:73:3f:5b:65:
37:54:ca:9e:c3:89:32:25:70:35:5b:d2:63:1d:2c:4a:10:3c:
24:9e:f0:0e:08:4e:8d:08:3b:c1:4a:a5:d1:a5:c9:34:92:8f:
1b:92:df:dd:a5:ab:1d:fe:b7:9f:cc:0a:34:d1:34:24:5a:a2:
45:d9:af:18:5e:1f:20:70:87:89:42:38:90:a8:a5:9b:14:d7:
01:9a:8b:05:c7:73:99:25:f0:e2:60:11:1f:1e:45:f4:ee:40:
ff:09:ae:c4:aa:32:a5:ad:82:22:55:7d:a0:bd:8e:91:0e:59:
b7:30:0d:0c:ce:07:fc:a9:62:b7:2c:16:22:fc:a0:31:b4:d7:
8f:66:42:d8:cc:7d:c5:bf:ed:15:77:62:10:ef:6b:72:16:ee:
fb:b1:bd:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:49 2025 by rpki-client