Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
File: AS57167.roa (raw, json)
Hash identifier: o4CQJebgXtmi43KwKwcl+JG076B1JWcQNnD3NscQzms=
Subject key identifier: 28:1D:29:79:1A:A6:43:53:68:E8:00:32:58:A6:8D:3B:72:12:77:DE
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 47CE0ED4A88582284B3A3AAAC513430460567B4E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
Signing time: Tue 10 Dec 2024 14:53:48 +0000
ROA not before: Tue 10 Dec 2024 14:48:48 +0000
ROA not after: Tue 09 Dec 2025 14:53:48 +0000
asID: 57167
IP address blocks: 89.117.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ce:0e:d4:a8:85:82:28:4b:3a:3a:aa:c5:13:43:04:60:56:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 10 14:48:48 2024 GMT
Not After : Dec 9 14:53:48 2025 GMT
Subject: CN=281D29791AA6435368E8003258A68D3B721277DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:d3:fd:e5:e2:89:5b:f3:00:b9:1f:f1:33:
cf:9d:2b:6f:50:27:4c:60:d4:dd:33:67:f9:85:a3:
4f:81:6b:1a:2b:65:46:0e:54:06:83:bf:15:14:72:
28:19:9f:d5:e6:38:98:f5:6e:53:4f:d5:29:ee:40:
9e:f7:b5:7e:df:61:3c:d8:ea:76:ed:13:aa:7b:74:
79:f4:d0:b1:eb:66:17:66:72:45:97:ad:43:dd:3a:
c3:82:3f:47:3a:40:cc:51:47:c4:b4:37:f8:17:0f:
7a:ea:1f:e2:df:e1:a1:62:cd:c5:60:08:60:b5:f7:
02:f1:b0:6e:9c:f3:f8:8d:7c:a0:4b:40:f6:32:69:
3e:34:12:8e:62:3f:f7:92:07:84:5a:2e:1e:4a:f9:
14:cd:bc:1b:28:3f:df:01:81:5c:72:07:f7:75:00:
d0:61:6e:fc:bb:f7:33:32:e0:5b:0c:35:43:12:0b:
97:b4:b0:1d:c8:2c:b8:2f:a5:4f:cb:6d:34:cb:dc:
80:07:40:a9:2f:bd:e9:84:7a:fb:4b:40:1b:50:9b:
19:77:5f:4d:f5:a8:f1:1e:a3:6e:7d:ad:8a:c2:00:
3f:e8:2d:4e:c2:87:41:95:f7:34:47:6f:96:1d:33:
32:8e:1a:3c:78:ad:eb:e0:1a:01:20:da:d4:4c:4a:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:29:79:1A:A6:43:53:68:E8:00:32:58:A6:8D:3B:72:12:77:DE
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.24.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b5:46:fb:8e:0b:2a:b8:24:bb:77:af:7c:20:ff:5c:46:5d:
6c:30:f8:6d:2a:00:24:c0:8a:a2:97:2a:44:6c:ed:00:0a:2f:
35:1a:9e:03:c8:d6:0f:42:26:08:3a:10:e8:13:13:3c:6c:9b:
ba:c2:e9:7a:38:41:b8:79:41:d8:64:69:86:de:f7:53:c4:f0:
ab:b8:00:80:ec:00:4d:9d:65:87:a5:2a:be:81:02:cd:8b:10:
a8:4c:c3:92:10:37:4b:88:8c:64:67:d9:e7:ee:9e:7c:d1:fd:
c4:be:21:3d:19:ee:12:be:2a:e4:9a:29:d6:d0:c1:6f:65:8a:
9f:10:61:c5:22:45:f7:7f:b5:37:4b:79:eb:df:4d:cf:45:53:
c8:45:68:37:34:18:77:c4:d9:2d:d0:56:ad:92:01:89:c1:85:
97:87:3f:70:24:c1:63:41:f5:c4:e6:8d:ff:9e:9e:74:aa:bb:
b8:64:7a:a1:6c:b7:5e:45:da:1b:e7:5c:3a:12:c9:3f:f7:05:
8e:ef:c8:76:86:6d:87:9f:ad:58:f2:c4:f1:7c:8a:8b:7f:ed:
dd:5d:91:7d:84:6a:13:6f:fb:1e:8a:be:ae:f4:27:a9:b9:24:
7c:07:25:89:20:76:e7:e6:f8:63:29:ce:f0:53:38:c6:f4:82:
18:27:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:10 2025 by rpki-client