Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323134383238.roa
File: 33372e312e3232362e302f32342d3234203d3e20323134383238.roa (raw, json)
Hash identifier: lI7+2GGYEmWOIqPeCKm4J1Or58k9jZ1kcbn4yPCC8Fs=
Subject key identifier: A6:F7:B4:9A:3A:55:BB:15:46:17:03:0B:3B:3D:34:97:3E:6D:41:7B
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 7E199F8A4862AD6600202F6E05759190114D4BF3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323134383238.roa
Signing time: Fri 28 Mar 2025 16:12:05 +0000
ROA not before: Fri 28 Mar 2025 16:07:05 +0000
ROA not after: Fri 27 Mar 2026 16:12:05 +0000
asID: 214828
IP address blocks: 37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:19:9f:8a:48:62:ad:66:00:20:2f:6e:05:75:91:90:11:4d:4b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 28 16:07:05 2025 GMT
Not After : Mar 27 16:12:05 2026 GMT
Subject: CN=A6F7B49A3A55BB154617030B3B3D34973E6D417B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:f5:84:07:02:27:e3:37:b2:ab:7d:1c:6f:
2a:99:58:52:07:2e:fe:cd:bc:00:74:d2:ac:dd:d5:
81:fc:84:c4:36:2f:0a:50:c4:87:1a:76:8c:0d:8d:
3e:cf:b5:a2:24:3d:e2:51:ce:84:d4:4e:8b:b7:fb:
8d:38:26:69:1d:6c:80:61:b8:52:ac:05:06:e7:f8:
18:00:98:1d:fa:6b:86:d9:4a:2a:6d:79:c6:88:a5:
e3:52:77:86:48:9a:06:02:a6:c6:ac:ab:1f:67:8b:
4e:f0:2b:d5:ee:89:85:93:12:da:ae:30:e0:0f:0a:
eb:b6:71:66:c3:90:89:56:ff:1e:0c:70:f3:99:30:
cb:b0:af:b6:f2:c1:24:6a:b4:55:87:b5:ea:fb:2f:
36:a9:db:04:92:13:50:7f:db:8e:65:17:33:b5:03:
53:9f:7d:58:aa:b9:ea:21:75:48:42:0d:8c:7c:67:
13:09:a8:50:ac:8c:10:56:65:06:bf:e5:2e:23:6a:
1a:41:56:7e:c8:b7:6f:3c:84:be:23:d4:3c:a8:09:
ef:ec:5b:06:d1:c1:f3:31:12:23:46:85:e8:7d:a6:
35:d5:cf:46:56:e2:3e:ad:e3:77:2f:0c:69:3b:b6:
0b:5a:c7:6a:8e:1f:fc:ff:86:16:92:29:d8:86:22:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:B4:9A:3A:55:BB:15:46:17:03:0B:3B:3D:34:97:3E:6D:41:7B
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323134383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b5:a6:95:72:f6:78:1a:df:71:0e:44:77:93:70:01:19:a3:
a1:cb:74:42:6a:b9:55:2e:a6:00:2c:fc:b9:d7:f0:60:5e:7b:
e3:5b:81:39:2b:fb:96:ba:cc:9a:60:0e:72:96:6d:ef:fb:1a:
90:a9:3e:b8:bc:6b:de:e4:5a:a5:e6:69:10:e3:f3:07:a3:67:
c9:d0:ec:43:a6:17:e3:04:50:c0:5a:20:d2:de:f8:14:5b:f1:
0e:07:85:d3:3e:7c:06:59:9b:b8:0b:4b:b5:70:9c:58:61:8e:
f3:45:c1:4a:e9:3d:37:d5:ee:33:b2:5f:3b:fa:36:69:02:a1:
d7:65:52:bc:6b:6c:ba:3e:77:94:c1:7d:de:5d:27:46:aa:a8:
e7:1e:4c:c3:ab:d8:1c:23:9a:ca:a2:4c:14:3c:e4:59:8e:5a:
1a:9f:5e:3d:fb:4a:27:ca:06:76:8c:be:4b:68:47:ab:ba:c7:
c9:bb:8e:8a:16:8e:29:ab:30:44:b3:fa:96:d3:57:38:bb:15:
66:74:b5:dd:91:89:66:6f:be:a6:c3:ab:de:0d:78:81:81:e4:
a5:04:ad:f6:8a:5d:25:fc:48:a5:92:54:5c:d4:66:18:5c:04:
78:c6:e8:17:e0:4c:79:15:08:5c:8d:d8:2d:31:9c:02:69:22:
a5:51:27:69
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUfhmfikhirWYAIC9uBXWRkBFNS/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNTAzMjgxNjA3MDVaFw0yNjAzMjcxNjEyMDVaMDMxMTAvBgNV
BAMTKEE2RjdCNDlBM0E1NUJCMTU0NjE3MDMwQjNCM0QzNDk3M0U2RDQxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgs/WEBwIn4zeyq30cbyqZWFIH
Lv7NvAB00qzd1YH8hMQ2LwpQxIcadowNjT7PtaIkPeJRzoTUTou3+404JmkdbIBh
uFKsBQbn+BgAmB36a4bZSiptecaIpeNSd4ZImgYCpsasqx9ni07wK9XuiYWTEtqu
MOAPCuu2cWbDkIlW/x4McPOZMMuwr7bywSRqtFWHter7Lzap2wSSE1B/245lFzO1
A1OffViqueohdUhCDYx8ZxMJqFCsjBBWZQa/5S4jahpBVn7It288hL4j1DyoCe/s
WwbRwfMxEiNGheh9pjXVz0ZW4j6t43cvDGk7tgtax2qOH/z/hhaSKdiGIopzAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUpve0mjpVuxVGFwMLOz00lz5tQXswHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzQzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlAeIwDQYJKoZIhvcN
AQELBQADggEBABy1ppVy9nga33EORHeTcAEZo6HLdEJquVUupgAs/LnX8GBee+Nb
gTkr+5a6zJpgDnKWbe/7GpCpPri8a97kWqXmaRDj8wejZ8nQ7EOmF+MEUMBaINLe
+BRb8Q4HhdM+fAZZm7gLS7VwnFhhjvNFwUrpPTfV7jOyXzv6NmkCoddlUrxrbLo+
d5TBfd5dJ0aqqOceTMOr2BwjmsqiTBQ85FmOWhqfXj37SifKBnaMvktoR6u6x8m7
jooWjimrMESz+pbTVzi7FWZ0td2RiWZvvqbDq94NeIGB5KUErfaKXSX8SKWSVFzU
ZhhcBHjG6BfgTHkVCFyN2C0xnAJpIqVRJ2k=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:38:37 2025 by rpki-client