Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: KkX58hg3XWWdXgreqEeA+q1MziklXu6V3GgjemL1Uvg=
Subject key identifier: 2E:B4:D7:1A:15:4A:55:5D:6E:26:90:18:F8:19:A7:32:3C:A3:FD:26
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5EB01AF1BCA5B04EF884A0CDE0CC050ED80AF943
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
Signing time: Wed 26 Jun 2024 16:04:28 +0000
ROA not before: Wed 26 Jun 2024 15:59:28 +0000
ROA not after: Wed 25 Jun 2025 16:04:28 +0000
asID: 396356
IP address blocks: 86.38.32.0/24 maxlen: 24
86.38.185.0/24 maxlen: 24
86.38.186.0/24 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.68.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.131.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.89.0/24 maxlen: 24
89.117.90.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.113.0/24 maxlen: 24
89.117.114.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.142.0/24 maxlen: 24
89.117.143.0/24 maxlen: 24
89.117.159.0/24 maxlen: 24
89.117.173.0/24 maxlen: 24
89.117.174.0/24 maxlen: 24
89.117.175.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/24 maxlen: 24
89.117.227.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b0:1a:f1:bc:a5:b0:4e:f8:84:a0:cd:e0:cc:05:0e:d8:0a:f9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jun 26 15:59:28 2024 GMT
Not After : Jun 25 16:04:28 2025 GMT
Subject: CN=2EB4D71A154A555D6E269018F819A7323CA3FD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:18:e5:e5:18:cc:6f:b5:75:aa:ca:13:b2:
1f:de:e7:19:db:c8:1f:ab:a2:b8:71:a5:6c:ec:4c:
88:17:1a:86:aa:6b:6e:40:e6:93:a8:33:f7:fc:71:
56:ed:f9:97:cc:0a:f0:63:59:e3:d7:a0:6c:b9:96:
dd:82:40:b8:d2:4e:4e:04:56:43:56:75:f1:95:77:
8e:a8:7d:8c:aa:65:a4:36:79:39:cf:c8:0d:eb:6c:
e6:f0:03:db:4e:06:84:14:2f:97:60:43:3b:06:0d:
4d:d4:c1:d7:dc:d4:91:7e:8e:00:5a:a7:dd:7f:04:
d1:fa:f6:0f:3d:32:7d:4f:d6:91:c9:b1:d2:21:86:
ff:e9:41:3f:2f:79:66:e4:1b:6a:cd:e4:2c:06:1c:
87:75:ca:0c:3f:74:6e:14:ac:dc:f4:ec:61:d1:7f:
13:37:0d:c5:85:32:3d:1d:6b:d7:9f:7e:ef:f5:ce:
bb:a2:53:e1:54:8b:47:9a:f7:74:1e:f5:92:a0:46:
2d:ca:2b:7e:41:d4:54:0b:61:d3:8e:9b:e4:22:bd:
01:98:34:c3:ac:d5:b6:af:b9:19:5e:41:8f:94:bd:
3e:fc:4d:26:dd:6f:33:84:fd:83:f8:62:22:6b:84:
5f:63:f5:8e:29:91:9a:2a:88:a0:91:6c:f7:c0:56:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:D7:1A:15:4A:55:5D:6E:26:90:18:F8:19:A7:32:3C:A3:FD:26
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
86.38.185.0-86.38.186.255
86.38.241.0/24
89.116.63.0/24
89.116.68.0/24
89.116.99.0/24
89.116.112.0/24
89.116.131.0-89.116.132.255
89.116.154.0/24
89.116.158.0/24
89.116.166.0/24
89.116.218.0/24
89.116.223.0/24
89.116.248.0/24
89.116.253.0/24
89.117.89.0-89.117.90.255
89.117.101.0/24
89.117.113.0-89.117.114.255
89.117.118.0/24
89.117.142.0/23
89.117.159.0/24
89.117.173.0-89.117.175.255
89.117.190.0/24
89.117.216.0/24
89.117.227.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5d:d5:11:2b:69:f5:1a:9a:cc:d0:46:30:57:b0:92:44:7a:
d9:f0:8e:f9:99:6a:9f:ac:d7:d6:f7:80:50:5d:b1:a0:8f:17:
db:b6:52:cb:19:62:a4:ac:33:91:e5:17:72:0e:85:45:8a:ba:
4e:f9:b4:ae:e8:76:e6:ef:51:94:9d:df:19:55:1a:fb:7c:01:
26:4e:34:4f:80:6b:83:ff:a5:48:95:ca:0b:55:77:5c:7f:ad:
97:7a:4f:29:88:e3:cd:87:5f:2b:76:a2:b8:35:7e:2d:8c:c6:
b9:c0:88:e9:72:5b:74:4b:4f:62:2a:2f:28:f5:9d:ff:0b:38:
50:72:5e:36:89:c0:6c:c3:50:8f:8f:2a:df:0e:aa:e0:2e:25:
74:a2:3a:14:c4:48:4b:bf:30:6f:ce:a3:f9:72:c7:9a:2a:89:
d0:d6:56:84:f5:9b:3a:df:68:32:48:70:aa:81:80:d7:1d:d6:
3c:67:74:78:76:6a:e1:2d:70:87:96:6a:55:7b:e8:95:e7:b4:
de:60:ae:2a:47:ad:ed:74:06:83:a6:2e:27:48:1c:59:ba:a8:
6c:81:09:78:32:72:fd:ae:13:3c:1d:a0:4d:5f:26:77:d9:6c:
7a:52:25:28:13:34:e6:64:1c:0e:18:d2:fc:c1:8c:6a:0e:78:
fa:e2:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:25 2024 by rpki-client on console-ams.rpki-client.org