Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: SwH+SNJV2wHboqlpdFLksGS4hT/1r+frmtjO1McDED0=
Subject key identifier: 4B:D4:87:C6:CE:AD:1F:D1:D4:58:AF:2E:B2:45:06:7C:8C:43:A2:37
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3E253B9CA28E14196208FAEFFB5AC88891C231AD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
Signing time: Tue 31 Dec 2024 12:53:48 +0000
ROA not before: Tue 31 Dec 2024 12:48:48 +0000
ROA not after: Tue 30 Dec 2025 12:53:48 +0000
asID: 7029
IP address blocks: 86.38.4.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:25:3b:9c:a2:8e:14:19:62:08:fa:ef:fb:5a:c8:88:91:c2:31:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 31 12:48:48 2024 GMT
Not After : Dec 30 12:53:48 2025 GMT
Subject: CN=4BD487C6CEAD1FD1D458AF2EB245067C8C43A237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:44:29:de:bb:1a:e7:b3:fe:25:b3:77:13:
33:64:01:4e:94:63:f1:66:a3:70:a6:05:84:a6:f6:
5c:d3:3e:07:31:d0:f6:a0:b0:d8:27:6e:e4:c0:7b:
cc:61:df:95:b4:77:62:ef:76:9e:d2:3e:ab:ba:97:
da:cb:c1:a6:53:14:06:2b:ce:95:64:97:e3:b0:c4:
69:10:d4:d5:dd:8c:d7:62:34:18:dc:a4:32:ad:2e:
58:04:45:2c:2a:ce:3d:12:96:cd:02:34:67:b8:f9:
70:75:f8:7b:95:8a:b0:c3:c5:74:a5:0d:2d:79:2f:
88:d3:26:74:8a:9a:3a:b9:e2:36:b6:12:54:90:31:
c9:d6:53:e0:4e:e0:95:56:0d:13:70:24:37:e6:73:
5c:64:0b:47:3b:99:a0:89:08:46:de:dc:d9:c6:a8:
c6:00:28:e3:6e:42:c7:d0:1e:35:0d:3b:f7:0d:7f:
82:9d:78:f2:34:0e:31:41:b1:c3:ca:93:7b:0e:87:
c2:52:7c:c6:72:95:1a:34:0a:48:4e:5c:87:ba:58:
a6:9d:f9:7e:8f:be:f3:65:6b:93:90:b4:9e:4c:13:
7f:60:78:75:3d:78:ee:bf:b7:e5:e0:f2:a7:c7:53:
e6:7c:13:1a:77:22:df:13:30:d5:a0:32:0a:6a:16:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:87:C6:CE:AD:1F:D1:D4:58:AF:2E:B2:45:06:7C:8C:43:A2:37
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/23
86.38.184.0/22
89.116.242.0/23
89.116.246.0/23
Signature Algorithm: sha256WithRSAEncryption
26:ea:52:a9:a0:27:25:ca:8e:f1:93:fa:bf:fc:ed:19:d4:9e:
3e:42:28:bc:4d:5d:59:06:87:23:43:24:eb:cf:b1:f3:71:c9:
da:18:2e:c9:82:66:9b:17:4c:25:98:31:28:d3:0b:be:b0:a1:
f0:37:9b:be:9c:c1:f2:62:cf:8b:a5:6b:f6:85:f4:46:99:25:
a5:30:e9:1d:7a:e9:c7:93:a2:4c:51:b8:1d:82:79:e7:54:a0:
ee:c6:52:c1:0c:d1:fe:47:c2:ca:47:de:03:47:90:06:c7:4e:
fc:4a:30:d9:91:6f:5f:86:a6:66:82:e5:9e:7d:58:27:30:9f:
6a:54:61:14:a4:f2:d8:6b:26:68:de:b5:05:35:86:1a:3d:59:
98:1e:5f:b6:93:a2:38:9b:c0:14:e2:a8:92:6c:db:d0:3e:80:
44:58:8a:f6:15:e8:d7:27:6a:46:a3:48:5e:ac:92:b0:5a:5d:
99:a7:ac:97:d9:0f:bd:b2:77:cb:4a:75:9e:f1:46:58:e4:1d:
2a:c2:a1:5b:b3:86:71:da:dd:e1:80:7f:66:12:bf:7b:7b:fe:
1e:df:c4:03:b7:a6:cb:fc:c3:ad:c9:98:48:8d:6d:6b:f5:af:
fb:ce:2b:37:ba:1a:0d:a2:1d:30:2d:b4:64:96:f5:dc:01:33:
2f:37:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:11 2025 by rpki-client