Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: mOOedNFIzBQYeYO3sUP7zN3qZCk/1ycyABA0mrYhdIs=
Subject key identifier: 7C:67:81:21:08:F3:75:A5:E0:30:F8:01:65:6D:DF:8A:6A:AF:05:86
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 2BB8ED4CB888366FC4A9AF0DFC83862D4205E647
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
Signing time: Tue 31 Dec 2024 12:53:48 +0000
ROA not before: Tue 31 Dec 2024 12:48:48 +0000
ROA not after: Tue 30 Dec 2025 12:53:48 +0000
asID: 49999
IP address blocks: 89.117.88.0/22 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b8:ed:4c:b8:88:36:6f:c4:a9:af:0d:fc:83:86:2d:42:05:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 31 12:48:48 2024 GMT
Not After : Dec 30 12:53:48 2025 GMT
Subject: CN=7C67812108F375A5E030F801656DDF8A6AAF0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:56:48:0d:df:f5:ef:dd:96:ed:d4:48:5a:
68:e0:08:e9:f3:38:77:44:25:8e:95:7b:3f:5b:00:
ab:33:6f:46:7b:11:f7:a4:b1:d4:20:34:30:35:4d:
a2:c7:d3:60:df:3f:ad:7c:98:b0:6b:3f:6d:ef:d0:
68:f9:6b:7a:7b:49:e2:44:3b:19:68:1b:51:ba:d8:
56:1d:74:07:4f:d7:18:63:44:c0:36:66:36:aa:eb:
58:77:d6:c6:e0:8f:30:65:fd:e8:93:e8:5f:fc:fe:
56:3d:6c:1d:c8:37:ef:bd:0e:fc:86:3b:87:cc:00:
29:f3:22:f3:6b:30:9f:e9:c9:ee:ac:bc:0e:02:ea:
af:cc:94:c0:39:7f:3a:7f:9e:55:21:cf:bf:a1:80:
f1:62:19:62:62:d1:5a:bc:b8:31:d6:91:a4:1e:fd:
5b:68:e0:e8:6e:4f:7b:dc:85:84:5d:0d:a3:9e:fe:
c3:86:30:3b:fb:fc:b5:38:a6:26:26:ce:f0:d4:00:
9c:4e:99:0e:ce:ed:6d:97:d9:6c:5d:16:c7:18:6e:
35:df:31:02:6d:59:43:35:4c:81:57:2f:3b:4c:4b:
2c:3c:4b:4a:22:4e:01:f6:6d:fd:a9:c0:e6:86:ae:
29:46:f3:8f:14:c3:7d:a4:d4:64:16:e9:86:39:09:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:81:21:08:F3:75:A5:E0:30:F8:01:65:6D:DF:8A:6A:AF:05:86
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.88.0/22
89.117.112.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
44:3f:8e:8b:0e:63:de:d4:be:1b:19:58:a9:c1:19:dd:a6:dc:
7a:51:53:b2:71:47:0e:92:d1:9f:42:c5:83:70:68:4c:96:d5:
d6:d8:4b:cc:53:ac:2b:62:36:0a:27:69:52:0f:e5:ce:d5:93:
34:b9:64:2c:4c:62:e0:b9:ce:bd:7d:bd:7b:61:81:91:8c:72:
66:7d:e1:c3:09:29:43:55:26:33:72:dc:df:df:32:2c:9b:7e:
e6:d9:c6:c1:dd:3b:3f:c4:a6:06:d1:bc:e5:49:4e:6c:45:05:
58:f7:ec:2d:49:6f:87:62:89:33:e9:55:1f:85:68:83:f6:45:
5b:4e:f1:94:54:c4:26:9a:66:7c:cd:c5:91:bb:10:33:f4:1f:
38:b3:2a:0d:2f:6e:d8:0a:37:b0:8d:03:4d:5e:33:37:31:56:
2b:24:84:60:51:25:14:c3:7d:a7:be:79:c2:3b:c7:c1:97:c3:
09:54:ad:44:5f:0c:3c:90:a8:6d:a5:8b:7b:02:0b:cd:00:c5:
83:ed:4d:31:cd:f9:dc:ec:b1:d8:48:51:f0:20:a5:7c:1e:b0:
2e:12:4d:84:0b:80:6b:16:11:3f:98:ab:f7:70:7f:91:73:f6:
c9:41:08:de:ef:f1:94:9d:97:a8:bf:e4:8a:91:8b:d6:5a:34:
69:4e:1f:18
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUK7jtTLiINm/Eqa8N/IOGLUIF5kcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDEyMzExMjQ4NDhaFw0yNTEyMzAxMjUzNDhaMDMxMTAvBgNV
BAMTKDdDNjc4MTIxMDhGMzc1QTVFMDMwRjgwMTY1NkRERjhBNkFBRjA1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuVZIDd/1792W7dRIWmjgCOnz
OHdEJY6Vez9bAKszb0Z7EfeksdQgNDA1TaLH02DfP618mLBrP23v0Gj5a3p7SeJE
OxloG1G62FYddAdP1xhjRMA2Zjaq61h31sbgjzBl/eiT6F/8/lY9bB3IN++9DvyG
O4fMACnzIvNrMJ/pye6svA4C6q/MlMA5fzp/nlUhz7+hgPFiGWJi0Vq8uDHWkaQe
/Vto4OhuT3vchYRdDaOe/sOGMDv7/LU4piYmzvDUAJxOmQ7O7W2X2WxdFscYbjXf
MQJtWUM1TIFXLztMSyw8S0oiTgH2bf2pwOaGrilG848Uw32k1GQW6YY5CWMBAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUfGeBIQjzdaXgMPgBZW3fimqvBYYwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQ5OTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWXVYAwQCWXVwAwQCWXV4
MA0GCSqGSIb3DQEBCwUAA4IBAQBEP46LDmPe1L4bGVipwRndptx6UVOycUcOktGf
QsWDcGhMltXW2EvMU6wrYjYKJ2lSD+XO1ZM0uWQsTGLguc69fb17YYGRjHJmfeHD
CSlDVSYzctzf3zIsm37m2cbB3Ts/xKYG0bzlSU5sRQVY9+wtSW+HYokz6VUfhWiD
9kVbTvGUVMQmmmZ8zcWRuxAz9B84syoNL27YCjewjQNNXjM3MVYrJIRgUSUUw32n
vnnCO8fBl8MJVK1EXww8kKhtpYt7AgvNAMWD7U0xzfnc7LHYSFHwIKV8HrAuEk2E
C4BrFhE/mKv3cH+Rc/bJQQje7/GUnZeov+SKkYvWWjRpTh8Y
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:44 2025 by rpki-client