Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
File: AS50673.roa (raw, json)
Hash identifier: PoMqHPkvXWWgVKcKw8ytg1mmxJUjNdBfw0+Lrvx0Rpo=
Subject key identifier: 93:F0:12:FB:9C:E9:1D:FF:35:1E:1C:B9:8E:F5:4D:DC:45:C2:72:2A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 44F22624F61A05927D1D4E1A62E0B49785CE560B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
Signing time: Wed 11 Dec 2024 08:53:48 +0000
ROA not before: Wed 11 Dec 2024 08:48:48 +0000
ROA not after: Wed 10 Dec 2025 08:53:48 +0000
asID: 50673
IP address blocks: 89.117.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f2:26:24:f6:1a:05:92:7d:1d:4e:1a:62:e0:b4:97:85:ce:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 11 08:48:48 2024 GMT
Not After : Dec 10 08:53:48 2025 GMT
Subject: CN=93F012FB9CE91DFF351E1CB98EF54DDC45C2722A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:08:f6:66:fd:8e:09:6f:6e:13:9a:16:d3:
ea:ea:aa:1e:81:3c:28:74:46:b3:71:2d:a9:51:53:
25:6e:89:e6:2b:65:8b:32:34:3d:44:a5:23:80:40:
c3:48:b9:8e:a7:7a:f7:c7:e6:0e:a6:3e:ee:7f:40:
c5:c3:61:35:30:5e:3a:c1:1f:16:2f:83:94:61:d2:
0d:47:bd:20:a9:45:2c:42:41:5a:16:bb:d9:d9:80:
54:ae:24:9f:eb:08:24:93:0e:b1:9b:a5:56:cb:fe:
34:2e:e5:45:58:1b:1a:46:0e:20:20:58:4e:20:e7:
7f:23:1d:5c:27:95:d1:fc:5e:4f:92:16:70:5c:9a:
77:22:96:e4:9a:af:83:88:a5:b2:76:0b:8c:a4:9c:
5e:de:dd:49:8c:25:1d:69:a6:34:07:f8:43:e0:d3:
90:61:30:05:ea:54:94:75:ab:e8:82:b8:75:17:e0:
38:de:4a:da:3b:61:91:4e:f0:54:2d:df:5e:a8:63:
86:6b:4a:a3:ec:41:81:7d:ba:47:d2:0f:d2:bb:4e:
bb:6f:37:c4:1a:9b:74:55:e2:ad:9b:07:0e:a9:ee:
95:92:0e:c8:3c:ee:56:91:dc:b9:53:85:7f:82:c0:
00:51:5c:4f:d9:cf:dc:c7:98:30:b1:9a:2c:f5:53:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F0:12:FB:9C:E9:1D:FF:35:1E:1C:B9:8E:F5:4D:DC:45:C2:72:2A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.24.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a7:03:61:67:42:48:1b:d0:ed:f7:a6:ee:9a:a4:35:4c:05:
5c:f1:4a:30:3e:03:b3:8c:34:78:42:7b:50:15:05:00:2e:5a:
5e:00:b4:e4:d7:15:86:63:63:d1:f0:e4:5c:19:a1:ca:97:df:
d1:1d:76:a4:6c:ba:19:03:6c:a2:94:3c:b6:01:7b:7d:32:46:
70:31:d6:77:a5:0b:ae:ab:67:72:d2:88:40:1f:49:9e:e4:e3:
b2:e7:29:8e:14:ac:1f:ab:2f:7e:f1:fe:46:72:3c:4f:75:37:
86:25:6f:a6:b2:f1:ff:40:ab:1c:6f:b1:b0:dc:1f:9d:2d:84:
e2:b5:76:04:c5:07:24:0f:92:5c:f6:63:84:29:28:fd:eb:05:
75:03:e3:2c:8f:89:1c:18:3a:0f:e6:85:e6:12:8b:b4:71:62:
92:a8:ee:c8:d0:06:0d:68:44:d4:f9:98:55:3d:c8:7f:4d:5b:
ce:fa:fa:41:d7:14:97:df:3d:61:12:90:ee:98:25:ac:14:43:
0b:ef:e4:33:84:bc:80:12:cb:9c:80:0e:95:9e:97:4a:43:c0:
f4:89:c2:cf:f7:1d:66:f2:ca:e7:09:65:17:94:12:bd:aa:40:
c3:63:40:23:67:41:53:3e:f3:f4:41:c9:34:97:80:56:86:18:
f5:78:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:47 2025 by rpki-client