Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa
File: 33372e3233302e34392e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: ODSO6PE8lHsObtnFXP3qH2bSrsIJl4YlLmx16DoyJ/A=
Subject key identifier: AF:B6:66:B1:0E:F0:A7:56:FD:73:99:CE:7F:97:B3:E9:9E:DF:A8:95
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 187F30E736F60007126EED3FAB300F1ACA933748
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa
Signing time: Wed 05 Mar 2025 14:15:47 +0000
ROA not before: Wed 05 Mar 2025 14:10:47 +0000
ROA not after: Wed 04 Mar 2026 14:15:47 +0000
asID: 211415
IP address blocks: 37.230.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7f:30:e7:36:f6:00:07:12:6e:ed:3f:ab:30:0f:1a:ca:93:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Mar 5 14:10:47 2025 GMT
Not After : Mar 4 14:15:47 2026 GMT
Subject: CN=AFB666B10EF0A756FD7399CE7F97B3E99EDFA895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:53:82:e3:f9:72:5d:f3:36:b1:43:48:c9:
8e:c2:45:af:0a:51:54:09:3c:98:0f:5f:b7:b2:e4:
96:bf:9f:66:f3:5a:b7:f0:bf:89:08:a2:80:6b:46:
ec:01:ff:99:25:46:91:d7:21:cf:47:1f:08:d8:92:
b8:7e:9f:8b:b2:fc:f6:ed:e9:f7:e5:55:bd:c8:5d:
82:f9:b1:06:62:6f:9e:7b:fe:40:b0:41:9d:5d:66:
a6:e1:37:22:fb:8a:26:8b:ad:33:36:67:58:99:cf:
3e:ed:5f:3b:fc:48:f3:e7:ed:20:1c:16:b5:f4:8f:
2a:27:63:1b:d3:c8:c5:ad:46:6d:46:cc:57:17:61:
94:16:e2:4e:96:43:c7:59:fa:09:a2:27:7f:90:4c:
04:1e:d9:a2:88:fc:7c:dd:de:5d:b3:49:de:7b:39:
73:41:f0:90:5a:dc:a5:a1:87:04:c5:83:d1:c6:15:
ba:51:3e:34:c4:73:6d:c4:08:79:af:84:8f:5b:b2:
b9:66:f5:93:72:97:e6:a7:da:24:58:6b:88:86:96:
41:0a:6d:9c:91:c4:f2:fb:31:98:55:c1:43:95:07:
dd:1b:84:70:8f:1b:f6:e8:e7:77:be:8f:c0:7b:a0:
2d:2a:75:7b:da:46:42:9f:be:a9:0c:44:38:bd:31:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:66:B1:0E:F0:A7:56:FD:73:99:CE:7F:97:B3:E9:9E:DF:A8:95
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:85:46:06:c6:e5:3c:4e:fe:86:c4:f3:46:68:c4:35:57:30:
03:f7:8c:5c:0a:b0:44:8c:5d:41:00:56:d8:29:2a:b4:40:3f:
4d:74:8f:1b:17:e2:e4:5f:5a:4c:5e:51:d6:1b:c6:14:f9:d4:
3c:67:f3:d9:ea:21:f2:c9:ec:40:e2:e5:fe:ba:e5:25:32:b0:
4b:13:f6:72:40:ad:f8:ff:e9:1c:c8:1c:49:e9:7e:23:2e:03:
15:4c:71:d6:bd:a6:8a:04:75:1f:2f:9a:6e:cd:1f:57:3d:34:
34:02:b5:88:d8:b8:64:ec:4a:69:a1:04:51:42:4f:c3:5f:b9:
c2:d1:7d:be:0a:fc:0c:3a:6d:fd:71:08:73:9f:f0:9d:6d:14:
4f:1f:e9:32:50:9e:e4:95:c1:80:e3:16:05:e8:cf:0a:60:c7:
f0:a0:ee:18:f3:9e:a8:a7:b4:75:06:71:a3:a3:58:24:51:04:
b7:c6:f1:00:99:60:7c:b0:7e:c3:6f:aa:ba:25:37:02:63:bd:
d9:ec:69:8c:c9:14:e6:18:09:75:e0:34:30:33:f3:b3:34:24:
18:fd:e0:74:a1:69:19:52:64:f6:73:a1:b4:c7:38:0b:e4:ba:
95:a2:e2:cc:52:f8:05:6f:4c:f6:ce:fa:70:da:26:93:75:22:
1e:84:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:20 2025 by rpki-client