Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS56485.roa
File: AS56485.roa (raw, json)
Hash identifier: B6DcL8Z2dBxLy7G/6JzfDjhSWotmpUBT8FfpkzyeptQ=
Subject key identifier: 8F:D9:58:C4:DF:07:2A:1C:C7:F7:E9:FD:0D:B6:2D:C7:CA:74:20:E9
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5457F1B61A2ACBE6A58F9019F8D082069B1E93EF
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS56485.roa
Signing time: Fri 22 Nov 2024 20:43:28 +0000
ROA not before: Fri 22 Nov 2024 20:38:28 +0000
ROA not after: Fri 21 Nov 2025 20:43:28 +0000
asID: 56485
IP address blocks: 89.116.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:57:f1:b6:1a:2a:cb:e6:a5:8f:90:19:f8:d0:82:06:9b:1e:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 22 20:38:28 2024 GMT
Not After : Nov 21 20:43:28 2025 GMT
Subject: CN=8FD958C4DF072A1CC7F7E9FD0DB62DC7CA7420E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:57:d6:fd:0e:89:80:8e:d7:77:51:fa:ff:
6a:da:44:9d:d9:61:33:8d:82:ef:b5:3a:c2:a7:64:
3c:9a:75:94:fe:13:0e:84:c0:51:a2:60:8e:73:81:
ae:27:f4:83:e4:a3:fe:18:1d:5c:22:c3:8e:a4:c7:
fe:3d:83:27:c7:56:de:92:c6:76:0f:26:5a:c5:59:
b5:cd:df:7b:9f:ed:18:be:75:9e:ef:3a:6b:55:fa:
3e:26:8c:e8:85:53:a3:9c:6a:03:6a:1f:45:c8:bc:
db:77:a1:66:d8:8a:63:ee:9d:18:da:9c:a5:e1:65:
4e:a7:61:5e:56:e1:9d:90:55:c0:e3:f8:21:1e:8f:
97:04:46:1c:a9:61:e6:df:95:7a:19:6b:e5:65:f4:
ba:19:37:77:4a:6a:a7:59:8d:85:2b:73:95:8b:e4:
12:23:65:65:bc:72:98:cc:f4:9c:58:c9:3f:36:ca:
9d:a0:5f:22:8b:83:60:83:83:2f:a9:b0:91:8b:a1:
eb:1b:7e:e9:5e:11:74:99:3c:4e:a2:b5:9d:40:1a:
f2:f5:3a:b2:b4:ee:da:2e:e9:20:0e:7f:3c:b1:20:
1c:12:28:e4:89:d8:13:88:b1:31:ba:82:1a:69:28:
28:69:2d:dd:ba:2d:4f:32:cd:d6:e4:a4:5b:39:9d:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:58:C4:DF:07:2A:1C:C7:F7:E9:FD:0D:B6:2D:C7:CA:74:20:E9
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS56485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.198.0/24
Signature Algorithm: sha256WithRSAEncryption
19:70:e8:93:3d:a9:81:14:57:bc:87:c1:d3:02:61:8b:3c:5c:
d5:bb:52:ea:08:f7:e0:ba:74:7c:10:07:bc:4d:0c:a5:d4:2e:
9a:5f:14:67:fe:3d:2d:2c:82:cb:50:70:94:d1:ea:f5:0d:cf:
a5:6d:6c:90:a0:4a:9b:bd:35:94:6a:68:05:8f:b0:aa:dc:2f:
f6:c4:2e:10:89:7b:e0:57:fb:09:d2:85:4a:4b:bb:a1:8b:0d:
ab:d1:10:15:81:69:70:d4:67:74:ee:e2:3d:87:1e:8a:b8:11:
d2:69:46:4e:8d:d3:be:74:6f:56:6d:b2:ec:db:cf:f0:80:f4:
23:30:69:19:3a:c4:b6:12:4a:91:48:4c:33:5d:a4:4a:e6:f7:
03:df:d9:2e:15:56:f1:ca:79:89:37:f1:06:a7:e4:bd:b9:22:
1f:4b:8b:a4:1d:90:41:4a:c9:82:1c:4d:78:39:3a:e1:ef:cc:
2e:91:35:7d:8e:85:c6:29:ba:53:e5:44:34:cc:55:8b:64:19:
ba:a5:4d:8e:a8:96:f6:4e:b2:e1:e7:2a:93:60:8c:69:83:de:
33:2e:44:74:d8:4a:35:91:3f:42:58:0e:98:46:9e:6e:89:d1:
b0:a5:37:8d:71:4a:e5:43:34:2d:46:c9:fb:7c:43:d2:80:d3:
7f:dc:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:38 2025 by rpki-client