Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa
File: AS19437.roa (raw, json)
Hash identifier: pxFU9hnWuSno5QQ3s/YHyC7p1Cf0DGBkhmWYVFsf3I0=
Subject key identifier: 83:1E:CF:E4:7E:36:CD:1C:76:BF:86:BA:99:3F:FC:E1:04:B4:E6:5F
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 706396B12288AC311EC36F86BC82F7B233437F51
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa
Signing time: Fri 03 Jan 2025 08:53:51 +0000
ROA not before: Fri 03 Jan 2025 08:48:51 +0000
ROA not after: Fri 02 Jan 2026 08:53:51 +0000
asID: 19437
IP address blocks: 86.38.189.0/24 maxlen: 24
89.117.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:63:96:b1:22:88:ac:31:1e:c3:6f:86:bc:82:f7:b2:33:43:7f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 3 08:48:51 2025 GMT
Not After : Jan 2 08:53:51 2026 GMT
Subject: CN=831ECFE47E36CD1C76BF86BA993FFCE104B4E65F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:7e:fd:4b:44:5e:bc:51:4f:c8:a1:fc:f4:
2e:d8:4a:5a:91:59:54:de:0a:9d:00:c3:86:bb:ab:
a0:f7:92:db:e9:e4:9e:f9:d2:46:85:c1:1c:62:be:
41:b4:e0:90:c4:55:1a:c3:60:b8:8a:f2:d4:3f:65:
33:d1:a2:a5:96:16:56:05:33:dd:d0:49:b4:80:9f:
8b:d9:e2:8b:a4:ad:cf:9d:53:42:07:7e:af:c4:66:
f6:5b:05:5c:c2:92:80:a3:2b:f9:09:31:2b:2a:d4:
21:64:2f:66:7f:c1:8c:10:75:33:54:43:62:e5:14:
a2:89:1b:a1:c6:67:c2:aa:33:0a:5f:31:93:3f:1f:
18:8d:46:65:19:36:99:ea:50:a8:96:1a:5f:f9:53:
91:28:1a:08:13:57:63:90:fb:a2:a7:82:bf:99:c7:
cb:73:d0:8b:c9:ec:01:37:83:06:f9:a5:81:bc:9e:
e5:cb:1b:67:71:26:e5:e6:97:47:7a:65:74:44:67:
8d:be:df:c2:9a:f4:79:fa:e7:b0:29:71:c9:a3:d7:
27:3a:9e:32:58:2d:fb:ac:86:b3:ea:2d:7e:41:29:
b9:a5:fb:85:1c:95:18:55:04:4c:72:a9:2a:c2:77:
64:ad:21:8e:5f:f3:d2:ec:53:a6:0f:b6:0c:2c:95:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:CF:E4:7E:36:CD:1C:76:BF:86:BA:99:3F:FC:E1:04:B4:E6:5F
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.189.0/24
89.117.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a1:c9:45:37:03:1a:49:e4:10:af:05:09:02:ea:07:81:79:
f4:47:af:89:b7:72:44:1e:f6:74:f7:39:16:b2:b5:9e:d4:af:
30:82:8e:f3:fd:52:92:79:d6:94:e6:37:d8:53:73:36:29:3f:
db:12:b1:d0:f6:e8:fa:ec:a0:b6:31:87:a1:3d:dc:15:44:a1:
f0:01:b1:3c:97:ad:ff:73:29:db:1f:f6:62:2f:70:f6:6d:1d:
e1:f9:33:a7:6c:61:30:9c:08:ec:52:2b:45:d0:f3:5e:9e:6b:
c4:9a:ec:e1:12:fa:80:86:eb:85:0b:e7:14:8e:92:86:ad:bf:
ec:4d:12:02:9e:76:c2:1f:f1:df:6e:ff:cc:5d:1e:64:ea:46:
4a:aa:af:86:45:8a:9a:d2:0c:9f:f4:70:33:42:45:c0:e6:ad:
b8:3c:10:5e:ee:30:1d:d8:b9:52:5f:aa:77:28:1b:62:ed:e0:
9d:f5:81:d2:11:10:7f:85:ce:a0:1a:28:9c:5d:fc:6c:bd:45:
5c:d9:69:fc:f8:42:68:a3:90:07:c6:ab:f4:78:92:ad:d0:ec:
02:07:98:ca:27:71:da:b4:85:f9:6d:b6:03:d4:56:a8:32:9b:
3c:29:65:52:15:8d:3f:58:f9:ab:dd:c8:c0:f7:41:c7:55:29:
43:6d:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:37 2025 by rpki-client