Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa
File: AS207152.roa (raw, json)
Hash identifier: 0J/K0mSXbUeVur58R+4nw7ktEddgQNPQm2QyAFT0Lbs=
Subject key identifier: 0D:CC:B4:20:91:F7:51:6D:70:59:40:8E:87:8F:37:73:1D:99:0D:02
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 039FB9162E0DDFC04407F3FD4CE4F31596EB73E8
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa
Signing time: Tue 31 Dec 2024 12:53:48 +0000
ROA not before: Tue 31 Dec 2024 12:48:48 +0000
ROA not after: Tue 30 Dec 2025 12:53:48 +0000
asID: 207152
IP address blocks: 86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9f:b9:16:2e:0d:df:c0:44:07:f3:fd:4c:e4:f3:15:96:eb:73:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 31 12:48:48 2024 GMT
Not After : Dec 30 12:53:48 2025 GMT
Subject: CN=0DCCB42091F7516D7059408E878F37731D990D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:9b:a8:5c:cb:a5:1a:39:01:6c:7f:a2:26:
e3:93:e7:b7:60:a0:47:45:c8:ab:3a:d3:54:69:38:
bd:a8:22:23:89:64:6d:fb:63:21:c4:14:93:ff:ec:
85:de:d5:43:13:c9:cc:0c:df:80:a8:d0:dc:0b:5e:
bf:3c:ea:66:54:4f:01:da:a6:c1:e2:c7:58:f3:b2:
8c:17:2d:5e:4c:b5:a7:37:61:5d:a1:8a:b0:84:50:
3b:7d:d8:c3:55:5c:74:6a:f4:82:e3:c2:8a:20:0d:
ba:ca:be:39:11:45:9f:a9:14:1c:a8:70:92:67:49:
a2:b5:ff:24:fe:9c:67:48:28:9b:24:ea:55:52:01:
c4:df:ec:de:6a:c5:f9:ee:5f:b2:46:26:70:62:de:
6d:5e:f1:7f:14:f8:8d:cf:66:90:be:fc:64:46:c2:
9c:2b:0f:b4:83:1e:b9:07:97:60:65:fd:a0:84:9f:
41:9c:bc:23:fd:e6:35:b7:5b:08:47:30:cc:25:c0:
0d:3b:a5:59:af:16:88:03:57:12:c3:67:96:5e:07:
51:77:28:38:d7:14:08:21:00:41:8f:53:c1:97:25:
d5:bf:bd:d9:2a:81:fd:d6:63:c2:e8:9b:29:5a:78:
97:24:ae:20:6f:d6:e0:1f:fb:ce:95:a2:02:11:c4:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:B4:20:91:F7:51:6D:70:59:40:8E:87:8F:37:73:1D:99:0D:02
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.184.0/22
86.38.246.0/23
89.116.172.0/23
89.116.210.0/23
89.117.88.0/22
89.117.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:eb:2a:1a:4d:cb:23:b9:fd:19:be:b4:15:0f:1b:cb:75:c3:
d4:b0:a9:b0:17:46:b7:a5:2f:0a:29:f2:e2:76:24:e3:7d:e8:
15:b0:1f:7b:17:31:25:5d:13:6e:97:29:c1:9e:e9:69:ee:be:
30:7c:2b:08:e0:78:f0:ab:b9:72:9d:39:bd:5c:73:88:b1:41:
0a:2d:f6:45:ba:63:d4:8b:24:4f:e2:ae:99:b3:cf:95:51:5a:
31:f6:e1:8a:ee:0d:bc:77:f8:4c:c2:19:61:df:43:d0:88:f4:
97:20:83:54:da:df:cf:c5:e4:91:2c:1a:cc:c6:b2:55:bb:08:
27:0f:37:de:6c:d4:53:8a:eb:a0:f9:2e:81:35:97:e1:e1:d7:
e8:69:e0:f1:09:88:8a:38:79:0c:62:96:61:fa:b6:4c:01:73:
4d:a6:16:ea:98:d2:13:19:1d:5e:e2:0c:47:1d:39:c1:f5:31:
3f:1d:81:23:ef:5e:09:9d:d9:40:10:4d:3d:fd:36:4a:dc:5f:
12:fe:a0:26:e4:12:68:ea:82:3c:f4:ca:1c:71:51:82:b4:f7:
df:bd:44:26:bb:5b:82:57:7c:d6:ba:b8:b5:f3:78:98:49:e6:
89:66:d8:bb:b9:c0:9d:79:80:ab:a5:54:14:1a:49:89:0d:16:
bb:94:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:32 2025 by rpki-client