Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: 1Okn21JkMTpYhy+zs2Ei9Q0fho7TjZ9Dxq0g9wFEbw0=
Subject key identifier: F8:07:73:FA:01:DF:CF:6E:AF:8B:ED:E0:32:2D:4D:55:E0:FD:70:EB
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 683B203637307E1AF47E74B7509B02D1FF299C19
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
Signing time: Thu 27 Feb 2025 07:53:55 +0000
ROA not before: Thu 27 Feb 2025 07:48:55 +0000
ROA not after: Thu 26 Feb 2026 07:53:55 +0000
asID: 55720
IP address blocks: 89.116.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3b:20:36:37:30:7e:1a:f4:7e:74:b7:50:9b:02:d1:ff:29:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Feb 27 07:48:55 2025 GMT
Not After : Feb 26 07:53:55 2026 GMT
Subject: CN=F80773FA01DFCF6EAF8BEDE0322D4D55E0FD70EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:7f:13:29:ac:c0:2e:20:25:59:b7:ef:1d:
01:59:ea:48:6a:0b:1c:40:52:e3:51:e0:0a:4e:08:
8f:fb:c1:8f:bc:22:2f:eb:20:7b:97:b6:7e:d7:2d:
93:10:b9:50:d2:21:de:2b:d7:f3:d1:a8:03:69:d8:
b2:59:f3:3e:1a:52:66:bb:4b:6a:eb:97:4c:4b:2d:
76:82:5f:46:75:09:4a:53:6e:bc:5a:b6:52:92:61:
20:e1:b6:88:87:71:e8:e4:e6:06:fa:d4:d9:83:7c:
17:cb:43:c4:f0:f9:2b:39:20:f1:89:c7:1f:56:c8:
e8:86:7a:1a:0f:11:37:c5:12:55:6d:a7:e8:56:c1:
7b:5f:38:90:4c:a6:35:90:30:39:6c:87:2f:87:cc:
63:f8:87:c7:7a:ef:a6:3b:be:00:7c:2c:9f:79:4c:
26:b6:6a:ec:f0:5f:09:d6:26:df:62:93:f5:b0:ca:
6f:5a:35:19:bf:40:78:fa:e9:d4:bb:b2:f4:fa:44:
ba:4b:b5:48:15:78:39:63:5f:1f:10:98:23:c9:5b:
98:7a:97:e1:eb:84:35:b2:d3:4c:2e:e1:f6:46:56:
19:de:4b:e8:75:9f:dd:0b:7e:5a:29:49:a6:20:5c:
82:a4:32:94:da:3c:4d:87:9c:8a:26:fd:b9:af:31:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:73:FA:01:DF:CF:6E:AF:8B:ED:E0:32:2D:4D:55:E0:FD:70:EB
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f3:ab:71:e3:a1:1a:2b:cc:17:91:0b:5f:b8:1b:bb:15:c7:
b9:43:55:9a:8b:bd:6e:72:8d:ef:f6:fb:84:31:61:15:c8:0a:
9f:57:cc:40:60:5e:ac:12:8a:fa:c1:ee:19:8c:7f:92:6a:7f:
9d:a8:2d:27:8c:b9:2d:65:7a:53:45:96:13:e6:87:cc:c8:08:
0a:87:f4:7d:76:1a:4d:5c:54:a7:d5:be:0b:e6:74:9c:65:b1:
b9:9e:7d:1c:9c:1d:71:e6:02:be:ab:61:af:06:57:4e:67:a8:
25:15:f1:fa:70:16:31:e1:37:9c:42:ad:58:cb:69:e6:16:97:
97:95:3d:a0:40:55:d4:9a:01:8f:c6:b4:a3:65:d2:23:0c:f5:
d3:d3:5b:e9:30:1c:5e:74:fa:dc:5d:24:bc:3a:b9:03:31:89:
7e:48:0d:5a:30:89:5e:2d:90:a0:6b:2b:e1:42:c4:2c:c3:63:
37:33:60:e5:5d:3b:63:73:54:13:5b:7b:3d:8f:d3:36:02:b1:
d8:a1:2f:b0:1a:b3:06:be:49:5f:6b:42:c1:2e:31:28:09:dc:
28:85:b8:91:32:53:08:9d:c2:c6:ba:af:54:3d:08:d6:de:0c:
96:d7:71:67:2a:16:2f:8d:5f:f1:fd:51:3b:8e:a4:66:90:88:
0e:d6:a8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:43 2025 by rpki-client