Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323133303630.roa
File: 33372e312e3232362e302f32342d3234203d3e20323133303630.roa (raw, json)
Hash identifier: JnJyX3UTDqZzljDiqUy7+JO6WSgTffSLQ8lpKkN9030=
Subject key identifier: 80:6D:DF:1D:D0:98:9B:F0:ED:D9:C4:2C:B5:FC:8C:9E:6D:FB:39:A7
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 67C22DB1AF7F3D5E37DAEF7CC8D325169795D588
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323133303630.roa
Signing time: Tue 18 Mar 2025 06:19:39 +0000
ROA not before: Tue 18 Mar 2025 06:14:39 +0000
ROA not after: Tue 17 Mar 2026 06:19:39 +0000
asID: 213060
IP address blocks: 37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c2:2d:b1:af:7f:3d:5e:37:da:ef:7c:c8:d3:25:16:97:95:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 18 06:14:39 2025 GMT
Not After : Mar 17 06:19:39 2026 GMT
Subject: CN=806DDF1DD0989BF0EDD9C42CB5FC8C9E6DFB39A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:6a:be:a8:e0:ba:e1:cf:8c:3d:01:b4:25:
db:41:a9:17:0b:49:4c:67:53:94:d6:b5:cc:49:0b:
8f:fb:ff:0d:40:21:12:4b:9d:ae:67:8a:cf:ab:60:
5b:b2:43:17:04:22:0a:52:80:06:a0:60:3c:be:dc:
a4:00:67:22:90:81:ff:36:a8:5b:a1:ad:35:96:e0:
71:91:43:16:d2:a0:9e:52:f6:cb:07:01:1f:4e:54:
b2:ec:3b:41:a7:1f:49:78:2d:47:8a:56:2b:5b:39:
84:6c:46:c0:c8:00:08:59:4c:63:66:b2:a3:7b:f5:
5f:0e:4d:c2:ac:7b:1b:97:30:08:8c:68:0c:13:1c:
51:74:f3:e0:a0:01:b1:4e:1d:1d:d0:fe:ef:e4:6f:
0c:e4:d3:2c:cf:b5:1b:a3:8a:e5:e7:b9:74:6d:49:
90:f1:05:83:39:6c:74:95:11:6c:4c:57:45:ea:de:
62:07:66:aa:45:a1:91:b2:62:82:fc:75:0b:71:8a:
c9:11:ad:2f:38:92:40:0a:5d:72:c1:e8:8c:6a:69:
86:37:dc:84:0b:12:73:8b:de:93:6c:8f:20:51:9c:
08:3b:db:24:54:3e:0e:09:65:7f:04:a3:20:ab:85:
64:ed:c7:ea:6e:b9:4b:92:0b:42:ae:43:68:b1:75:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6D:DF:1D:D0:98:9B:F0:ED:D9:C4:2C:B5:FC:8C:9E:6D:FB:39:A7
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323133303630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5e:da:40:eb:86:0c:d9:ad:64:8f:20:1e:8b:02:ac:9d:12:
0e:6a:f9:55:c0:aa:4d:82:03:22:96:d5:87:5b:89:3a:79:04:
6a:fe:9a:8b:33:ac:4e:09:5e:f5:71:50:e8:3f:13:ba:26:34:
5b:c7:d5:21:2b:4f:e1:fc:cf:41:1a:54:51:96:1d:fd:ae:66:
52:93:97:05:dd:7c:ca:15:5a:6d:a1:85:a0:b1:60:5d:e2:43:
ff:43:b8:c7:7d:cd:08:18:f0:7c:58:97:bb:53:7b:4e:d1:62:
57:65:9b:47:ce:9f:1c:ef:98:7c:3d:93:31:b5:b5:65:54:fe:
32:ee:03:76:e0:f2:34:c5:66:b2:c6:25:cc:ac:c7:3d:65:d5:
e2:74:c4:c0:21:55:06:53:9f:94:f7:5b:75:0c:c3:07:0e:c4:
97:39:f4:0b:f3:e2:16:fc:b7:e8:07:07:3b:8a:d8:1d:eb:dc:
b2:b0:61:e2:b2:b8:7e:33:46:8c:1a:43:dd:b5:6d:c9:cb:65:
63:15:5e:80:78:21:30:5e:e5:88:22:a4:73:48:8f:77:94:d1:
a5:07:be:17:9c:17:82:51:eb:4b:98:30:4f:e3:5b:8d:a1:73:
5d:84:9b:17:23:06:6d:f6:8b:b1:b9:d5:1c:9d:2e:59:ee:1d:
b6:71:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:06:03 2025 by rpki-client