Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa
File: AS35793.roa (raw, json)
Hash identifier: S7Gk9a4hgKk97IzAZ7FG6zSYLAsxGoY3Yyr2FlTAZeg=
Subject key identifier: 57:02:44:6F:61:91:F3:FE:D6:88:43:87:0A:B4:BF:26:ED:9C:7F:74
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3C257436D19DA1CD6ACAFD11A44150BC171BF34B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa
Signing time: Wed 05 Feb 2025 09:02:32 +0000
ROA not before: Wed 05 Feb 2025 08:57:32 +0000
ROA not after: Wed 04 Feb 2026 09:02:32 +0000
asID: 35793
IP address blocks: 89.117.29.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:25:74:36:d1:9d:a1:cd:6a:ca:fd:11:a4:41:50:bc:17:1b:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Feb 5 08:57:32 2025 GMT
Not After : Feb 4 09:02:32 2026 GMT
Subject: CN=5702446F6191F3FED68843870AB4BF26ED9C7F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:4e:a0:5b:9f:61:8a:20:21:f7:70:0c:41:
74:bb:c1:e4:8f:ef:c0:68:c9:53:e8:a3:38:20:25:
44:8e:51:51:6d:ee:a5:c5:d4:99:c6:35:83:79:ff:
dc:34:0c:59:fc:2e:51:b3:25:e7:c5:6a:03:80:4b:
28:f4:c8:83:60:fa:7e:82:6e:27:0a:de:a5:70:4d:
9c:44:5c:d6:f7:da:b1:c7:f9:0f:ba:79:13:c1:7e:
76:91:b0:45:e4:1d:03:04:6f:28:db:30:c1:e0:28:
2a:98:30:13:21:f1:33:7a:e6:f3:0f:77:94:f0:77:
0e:52:b2:c2:f1:9d:06:68:b0:da:c5:7f:98:87:dc:
b4:36:b0:79:0f:0e:ec:25:f3:b8:c7:57:54:66:a4:
73:de:15:bd:3a:75:c9:cb:a5:ce:88:3c:ff:58:a2:
0f:d3:ae:5f:7e:9d:f5:e6:3f:ff:9a:11:15:47:74:
20:41:02:ec:bf:98:8b:6f:58:51:a4:52:99:fa:62:
05:75:4c:4d:e4:21:38:29:98:15:6b:dd:7f:33:40:
3b:5a:f9:02:ac:6b:de:b1:98:51:2c:8e:a5:38:ae:
9b:ba:19:c4:28:71:c7:05:4e:ea:a6:79:02:c0:5f:
fa:22:69:aa:c7:74:f1:b9:4b:fa:3e:3a:a6:43:ed:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:44:6F:61:91:F3:FE:D6:88:43:87:0A:B4:BF:26:ED:9C:7F:74
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.29.0/24
89.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3e:6c:bc:95:d2:e7:c7:25:ac:26:25:95:d9:c0:9a:01:36:
4d:71:b4:7e:a2:48:73:b7:91:b6:ad:7c:da:87:2c:2d:3e:4f:
1d:c2:69:95:ec:5e:f1:c5:f7:f2:c6:71:43:cf:98:42:4b:89:
37:ea:39:d1:36:c7:d8:7e:4d:4b:73:1b:f9:2a:b1:0c:5b:6d:
78:e0:44:ca:21:74:80:bc:f1:26:a4:fd:e0:ff:40:1c:c7:22:
77:7e:6b:41:e3:8a:ce:44:9d:b3:94:d9:bb:bf:d8:c6:5f:57:
22:2d:c3:c6:ed:47:43:ca:69:b4:46:09:8b:f8:3d:fd:4b:41:
8e:96:a5:8b:83:a6:da:35:ae:8f:b3:5f:b0:29:0f:27:21:a7:
6a:71:70:67:6f:c0:dc:04:2d:08:3b:e0:c6:25:6f:eb:2e:df:
06:9d:63:0f:13:d8:9c:1f:cc:5f:51:87:cb:f4:a5:f0:a1:f5:
64:6f:9d:50:6a:0d:90:fd:77:4b:8a:58:68:6e:f9:b4:3f:b1:
ff:35:6d:93:ee:66:db:ff:41:38:de:8f:50:0e:fe:1f:62:25:
eb:ce:8f:77:2e:c6:6b:93:66:22:8e:cb:b9:63:51:51:40:8f:
4d:ba:55:d4:77:37:c9:9c:41:39:97:9b:86:49:e3:54:3c:59:
71:1e:7f:00
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPCV0NtGdoc1qyv0RpEFQvBcb80swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTAyMDUwODU3MzJaFw0yNjAyMDQwOTAyMzJaMDMxMTAvBgNV
BAMTKDU3MDI0NDZGNjE5MUYzRkVENjg4NDM4NzBBQjRCRjI2RUQ5QzdGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoE6gW59hiiAh93AMQXS7weSP
78BoyVPoozggJUSOUVFt7qXF1JnGNYN5/9w0DFn8LlGzJefFagOASyj0yINg+n6C
bicK3qVwTZxEXNb32rHH+Q+6eRPBfnaRsEXkHQMEbyjbMMHgKCqYMBMh8TN65vMP
d5Twdw5SssLxnQZosNrFf5iH3LQ2sHkPDuwl87jHV1RmpHPeFb06dcnLpc6IPP9Y
og/Trl9+nfXmP/+aERVHdCBBAuy/mItvWFGkUpn6YgV1TE3kITgpmBVr3X8zQDta
+QKsa96xmFEsjqU4rpu6GcQocccFTuqmeQLAX/oiaarHdPG5S/o+OqZD7St7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVwJEb2GR8/7WiEOHCrS/Ju2cf3QwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzM1NzkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXUdAwQAWXWrMA0GCSqG
SIb3DQEBCwUAA4IBAQCqPmy8ldLnxyWsJiWV2cCaATZNcbR+okhzt5G2rXzahywt
Pk8dwmmV7F7xxffyxnFDz5hCS4k36jnRNsfYfk1Lcxv5KrEMW2144ETKIXSAvPEm
pP3g/0AcxyJ3fmtB44rORJ2zlNm7v9jGX1ciLcPG7UdDymm0RgmL+D39S0GOlqWL
g6baNa6Ps1+wKQ8nIadqcXBnb8DcBC0IO+DGJW/rLt8GnWMPE9icH8xfUYfL9KXw
ofVkb51Qag2Q/XdLilhobvm0P7H/NW2T7mbb/0E43o9QDv4fYiXrzo93LsZrk2Yi
jsu5Y1FRQI9NulXUdzfJnEE5l5uGSeNUPFlxHn8A
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:24:57 2025 by rpki-client