Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: gsZCGkiiNg41A7q0Cuo6rNEDTxECCm/EGpt7SnMskfQ=
Subject key identifier: 46:13:70:8A:A5:0E:6B:18:E2:DD:63:A5:15:20:6D:EB:AA:02:0B:1D
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3DEB67590D517A3BB7AF7A0AD5CB5EE9300BEC2C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215672.roa
Signing time: Sun 19 Jan 2025 11:56:28 +0000
ROA not before: Sun 19 Jan 2025 11:51:28 +0000
ROA not after: Sun 18 Jan 2026 11:56:28 +0000
asID: 215672
IP address blocks: 89.117.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:eb:67:59:0d:51:7a:3b:b7:af:7a:0a:d5:cb:5e:e9:30:0b:ec:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 19 11:51:28 2025 GMT
Not After : Jan 18 11:56:28 2026 GMT
Subject: CN=4613708AA50E6B18E2DD63A515206DEBAA020B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:ed:5c:a2:b5:67:dc:ab:0a:1a:51:8a:e0:
fa:c3:00:3c:2b:13:07:39:f9:71:ec:7e:39:67:3c:
e4:bc:74:37:af:c8:0c:24:be:ad:f2:49:c3:f3:ff:
ad:a5:30:63:2b:bd:d5:bb:d6:2c:3f:60:20:c3:29:
29:e4:d1:a2:54:6c:f1:8c:a4:12:24:75:f0:7c:96:
3e:c6:87:f2:2d:27:a7:80:88:77:47:6a:f8:dc:be:
0a:60:c7:0b:93:d3:7c:1a:ab:3e:26:b7:c1:63:c8:
5f:48:36:4a:89:8d:c6:c2:40:53:66:db:c5:52:ce:
11:dc:ab:e6:03:2f:17:0d:38:03:35:5a:01:60:03:
f3:70:b9:4b:e8:c7:b9:c7:37:fe:2c:7d:73:2b:da:
f5:6a:2e:5d:d1:45:8c:8d:87:8b:8f:0a:be:e2:f8:
cb:5a:7f:0d:a7:d7:6c:5e:8f:26:45:69:24:a0:46:
d5:2b:d1:20:d0:48:ed:56:86:53:66:4a:12:16:a8:
37:cf:68:28:c0:10:9b:15:e9:0a:4e:c7:6d:7b:74:
89:3f:a3:fc:7f:01:48:af:53:cf:3a:0f:a9:8f:18:
7d:cd:8c:a2:62:82:6b:de:de:c5:14:6a:b2:e9:5e:
fb:16:17:1e:6a:21:01:cb:ff:45:56:07:2c:a9:81:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:70:8A:A5:0E:6B:18:E2:DD:63:A5:15:20:6D:EB:AA:02:0B:1D
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7d:0c:cd:11:dd:c3:eb:a1:94:06:95:92:ad:0e:0e:f0:8f:
dd:0c:88:56:41:f5:03:25:0c:a0:29:16:80:86:ae:9f:b6:c4:
04:2b:e2:4e:c2:21:f4:67:f6:f9:c2:08:e8:5a:d9:45:06:94:
ba:ba:ab:ab:e5:1c:35:8c:0b:7e:fc:ed:c9:5a:d3:0a:d4:0e:
d8:5d:46:6f:9e:7b:d6:32:0a:85:a6:27:83:ca:e4:af:61:07:
88:e5:4d:c6:39:2e:41:6d:fd:8a:51:43:05:05:2a:fc:4c:60:
d4:1c:e1:ab:82:ad:ed:6b:79:b4:0d:92:89:90:6a:b4:dd:3a:
5d:8e:fa:55:61:28:bf:e3:09:80:2b:ef:72:3a:f9:00:eb:e0:
26:42:f5:c9:a6:87:cb:03:3b:24:8e:91:2a:fc:0e:e3:5a:04:
e6:7b:29:85:b0:fb:c3:4d:ff:3b:ee:43:6a:90:1b:3a:8e:13:
dc:3f:1f:9b:b0:e8:4a:b7:e0:fe:6e:75:93:bb:2d:7b:d4:44:
7b:17:f7:ef:67:52:b2:d6:af:88:33:06:6a:71:50:51:16:f1:
8b:d7:fb:71:fb:f1:a8:50:bd:04:23:32:1c:e5:b6:6f:8b:10:
9d:17:c6:92:d1:c4:eb:f6:86:7c:a8:a2:da:9f:8d:22:da:df:
83:df:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:29 2025 by rpki-client