Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e203631333137.roa
File: 33372e312e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: bKc2AYuuS9T6I/ElMj6CpWBpUuhvY8QZ29MkQGQfKcQ=
Subject key identifier: EE:90:74:39:9F:5B:E7:24:4B:CA:DC:6C:7D:3E:50:77:4B:3B:1D:51
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 755D42FA068C323315B511E176DD28F59FAC832B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e203631333137.roa
Signing time: Fri 07 Mar 2025 22:37:02 +0000
ROA not before: Fri 07 Mar 2025 22:32:02 +0000
ROA not after: Fri 06 Mar 2026 22:37:02 +0000
asID: 61317
IP address blocks: 37.1.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5d:42:fa:06:8c:32:33:15:b5:11:e1:76:dd:28:f5:9f:ac:83:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 7 22:32:02 2025 GMT
Not After : Mar 6 22:37:02 2026 GMT
Subject: CN=EE9074399F5BE7244BCADC6C7D3E50774B3B1D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:b6:77:94:10:9d:99:9e:92:78:65:1a:3a:
36:97:59:9d:69:04:c0:1e:c1:19:13:4b:ea:bc:68:
15:7e:58:04:8f:6b:1a:c5:36:60:1f:97:ef:00:a5:
4d:28:d7:b0:42:9f:6d:61:69:f2:fe:a5:8d:4a:1e:
b0:46:76:8a:c0:92:19:1b:e4:70:bc:ba:0a:af:1a:
4c:a2:1b:1b:e6:8c:d6:76:7b:35:01:a1:5c:86:b2:
3c:0a:fb:69:e4:59:d9:ce:3e:14:38:b4:36:d7:75:
50:e5:7c:df:33:d4:49:94:e8:71:a8:c7:f3:68:18:
7a:d1:8f:18:4c:57:b0:9c:49:e5:9a:b1:df:02:49:
93:62:e6:bd:e5:d2:61:e2:7d:21:a2:be:48:09:f3:
5d:e9:13:14:e7:bc:1c:c9:a5:7d:b5:a0:95:68:4a:
e1:76:84:ce:af:01:ad:e0:de:99:9c:69:ed:9b:a7:
7b:f3:6a:f5:22:4c:ec:7d:03:ce:7a:c7:74:51:7c:
4d:39:be:ed:df:66:36:3b:d1:86:65:d0:7b:db:14:
df:d2:17:04:69:b9:41:53:4c:be:f1:7b:9f:7a:3b:
98:1a:be:ff:36:a0:af:db:06:4f:7c:38:6c:da:4a:
0f:e9:e2:e7:f1:d0:19:3c:7d:8e:c1:95:03:f2:42:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:74:39:9F:5B:E7:24:4B:CA:DC:6C:7D:3E:50:77:4B:3B:1D:51
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.225.0/24
Signature Algorithm: sha256WithRSAEncryption
28:04:00:06:ea:19:aa:c1:e9:ac:3c:55:3b:dc:10:d6:67:c9:
f4:37:26:a6:6a:fc:07:6a:48:07:c0:ca:61:2c:01:1b:af:7d:
51:4c:5f:de:66:b5:a6:05:6f:df:64:7c:14:84:b0:2a:a8:91:
2b:9e:64:2c:93:4c:80:3d:a1:15:82:92:bd:65:85:d4:b7:71:
81:7b:fe:21:c5:33:bb:85:64:bf:80:82:53:e8:c4:1c:4b:d9:
bb:86:98:5c:2d:fb:6d:1c:8b:6e:2d:87:52:be:c6:6b:d0:42:
bc:7b:ef:ef:5f:8e:25:b7:ff:36:a3:09:76:a6:e8:e2:b0:c3:
d4:bf:6d:56:bd:91:a1:02:85:da:3c:14:52:ab:2f:66:64:c9:
f7:c9:47:e0:d8:31:73:4e:6b:e5:d5:b4:86:ef:8a:fd:59:71:
2c:6d:44:79:3b:9c:6e:3d:88:17:39:f2:3c:88:43:fe:57:22:
65:09:76:70:b5:d9:03:6b:80:04:6f:9d:2b:92:9f:8c:b7:74:
18:c2:13:77:ad:d7:02:b4:cb:60:20:61:69:c9:bb:f6:a8:ee:
36:91:90:68:86:6b:66:9e:be:e4:e6:c5:b1:e1:1c:ea:77:41:
7d:a7:57:dc:55:54:68:91:55:a0:8c:03:c6:59:c7:e2:84:b8:
ab:a8:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:17 2025 by rpki-client