Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: MbmTCZA5bncm9rg81vCj5RZFj/suAWvxKcVd2ncOIdg=
Subject key identifier: 83:2F:DA:21:11:B0:62:2E:DB:A0:4F:26:82:E4:49:B5:A3:F4:D7:10
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 64B118B6B0D113F789CAD5058121CD610BAE45DB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
Signing time: Tue 31 Dec 2024 12:53:48 +0000
ROA not before: Tue 31 Dec 2024 12:48:48 +0000
ROA not after: Tue 30 Dec 2025 12:53:48 +0000
asID: 398465
IP address blocks: 86.38.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b1:18:b6:b0:d1:13:f7:89:ca:d5:05:81:21:cd:61:0b:ae:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 31 12:48:48 2024 GMT
Not After : Dec 30 12:53:48 2025 GMT
Subject: CN=832FDA2111B0622EDBA04F2682E449B5A3F4D710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:86:45:bb:1e:76:1a:3d:b6:bb:48:1d:5f:
b6:3b:c2:98:d7:b7:49:f2:54:7c:37:ee:e8:b2:aa:
c1:02:58:fd:ef:cc:24:6e:3d:ba:3b:f5:cc:d9:32:
19:eb:97:48:9b:99:83:a0:5b:11:13:6d:dd:aa:97:
b3:77:73:d5:2f:40:39:b3:4d:fe:5c:24:55:21:4b:
b7:ce:5c:c2:71:98:a1:08:34:4b:64:a3:44:3d:f7:
0a:23:b4:e9:e5:04:27:96:dc:75:c8:ef:df:f3:0c:
ad:6a:7f:fa:88:39:ee:2a:b5:bb:da:d6:f6:f2:fc:
ef:eb:da:70:d6:f9:f6:11:eb:7a:4a:69:5a:19:a6:
2b:8a:a2:89:0f:8a:17:e1:36:e0:f5:d1:e8:60:d4:
ff:2a:cd:15:5a:a9:08:88:e5:52:44:88:ef:b6:9a:
40:01:e3:80:96:61:52:46:f3:9e:0c:47:af:1c:f5:
ab:4c:b5:43:ec:4d:7b:39:d7:5d:36:1a:d8:9a:00:
3b:70:eb:4d:ad:cb:49:86:b0:28:6f:9d:bb:d5:d6:
5b:c1:ec:66:c8:b5:8c:e3:08:df:0e:a8:6e:aa:b1:
a7:75:95:0a:4d:92:fa:ba:ef:7b:57:64:c3:00:05:
4f:2a:37:db:c8:a4:f2:79:36:16:c7:ff:79:73:cb:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:DA:21:11:B0:62:2E:DB:A0:4F:26:82:E4:49:B5:A3:F4:D7:10
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.246.0/23
Signature Algorithm: sha256WithRSAEncryption
33:1b:ff:2f:88:d1:70:55:8e:c1:2f:6d:48:8a:3c:1b:00:30:
d0:05:df:8a:aa:b9:e2:81:73:8a:0e:b8:2d:6f:0c:46:1a:14:
e6:c3:60:68:26:1b:c9:61:5d:b6:46:8a:d3:33:59:fd:40:34:
57:b1:51:2d:df:d6:dc:66:63:3e:1d:6b:2a:4a:7b:b9:14:f2:
f8:7d:2f:5c:15:53:6a:e3:c9:c2:44:60:9a:f5:e1:f0:28:8a:
5c:cc:86:eb:e5:69:43:95:e4:fc:87:a8:9f:47:5c:29:b1:79:
5a:70:34:8f:f1:21:a8:f0:72:25:fa:86:e0:fa:f2:67:1f:b2:
10:0f:0f:8c:77:5f:63:21:42:43:8a:f9:1d:73:1e:35:a5:f0:
2c:cf:2f:55:38:43:6b:c9:21:5d:f1:6d:be:c3:df:ca:87:72:
ee:b1:a1:98:6e:81:d3:a0:74:b7:23:5b:19:7a:1c:3b:2d:67:
2a:65:9b:a2:12:cb:f8:82:e9:ec:da:d5:37:fd:e2:34:d0:f3:
18:61:88:6f:ad:fc:a3:41:e4:75:96:a4:35:94:43:e2:2d:29:
23:56:85:ce:e3:bb:be:88:42:26:43:70:27:8b:9f:45:0c:4e:
6d:20:ca:a0:14:59:f8:50:8f:60:07:99:af:ab:f7:57:a3:53:
c3:68:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:41 2025 by rpki-client