Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa
File: 33372e3233302e36302e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: eXsKfL1mI2DridkNQDMo9JchWblLyfbxf+FSIBs7qE4=
Subject key identifier: 79:07:7F:75:FC:4C:1A:2F:1C:C9:52:20:C9:47:06:65:46:A7:F9:89
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4CC4BE3A535FB13A4F4AC1151A18F192A8F369E7
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa
Signing time: Thu 03 Oct 2024 09:23:06 +0000
ROA not before: Thu 03 Oct 2024 09:18:06 +0000
ROA not after: Thu 02 Oct 2025 09:23:06 +0000
asID: 16276
IP address blocks: 37.230.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c4:be:3a:53:5f:b1:3a:4f:4a:c1:15:1a:18:f1:92:a8:f3:69:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Oct 3 09:18:06 2024 GMT
Not After : Oct 2 09:23:06 2025 GMT
Subject: CN=79077F75FC4C1A2F1CC95220C947066546A7F989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:cd:19:18:11:3d:fd:f6:92:c1:a6:57:6a:
bf:a5:bf:a7:74:a0:47:d1:ea:16:4b:09:be:f9:c0:
9f:aa:d8:e3:d9:ee:7e:aa:9b:28:32:f5:5f:29:f5:
7c:8a:6b:e7:43:58:14:cb:51:a6:a6:16:3b:9e:a1:
10:f1:ea:3c:a6:c8:f2:30:f1:a0:7d:d1:9d:9d:51:
12:2f:28:f1:7c:3c:48:ae:67:16:1c:c1:31:15:0c:
2e:b3:9b:8b:5b:ae:ec:3e:c7:67:75:99:38:c7:c8:
1c:c0:64:00:d5:4d:0a:1c:39:80:f8:30:68:b6:80:
6f:21:10:b9:b7:05:8e:2b:a2:df:a0:42:6f:eb:3e:
ad:22:34:25:19:f4:07:dd:20:ad:fa:11:0d:f2:65:
29:03:50:f7:91:27:cf:b5:bd:8e:03:a3:e7:e9:31:
92:2a:5c:7f:90:07:90:1b:ee:9c:21:a8:25:a6:d7:
c3:ad:41:f0:a9:c9:fc:53:03:97:55:ff:23:27:58:
3b:e1:e1:b6:5a:a1:7a:c5:cb:4d:57:b0:57:59:f0:
53:8b:0c:60:7e:29:a0:99:08:1a:a6:cc:fd:9e:d5:
9b:7b:c5:fe:a7:72:dc:ea:3d:49:ee:3b:82:76:5c:
8f:cb:79:85:aa:c6:9e:3f:da:d8:62:0b:16:d5:e9:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:7F:75:FC:4C:1A:2F:1C:C9:52:20:C9:47:06:65:46:A7:F9:89
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.60.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a6:a7:40:fe:16:8e:6d:0a:6a:21:c0:8f:d3:8a:2d:16:2c:
c0:64:0e:53:0c:03:c0:38:5a:43:37:7e:bc:a1:03:1a:40:45:
26:37:2f:7c:69:5b:3f:b2:ea:db:22:7f:87:e1:fc:ea:51:4b:
36:63:1c:11:d5:14:4d:66:21:11:ae:5f:8d:d9:db:4c:42:a5:
94:3b:f1:00:d8:3c:ea:e1:a1:1c:5b:50:9a:bd:31:a1:99:ba:
a1:31:09:ba:84:ac:62:a0:38:86:a4:63:f5:26:7e:23:03:28:
63:0b:0b:f2:d3:c9:18:6b:d4:fe:03:c2:65:d3:68:cf:47:ab:
31:b0:ab:35:28:97:d2:ca:2e:e1:6a:bf:06:60:50:76:ba:04:
14:35:ca:9e:ab:77:46:29:14:b8:b6:ec:77:23:c9:d3:39:70:
ec:f6:5e:95:0d:2b:2a:d6:a3:72:54:75:1a:a8:b0:52:f8:d3:
8b:d7:d5:70:72:7f:2a:f9:4d:32:4d:22:58:cd:1b:5f:02:a2:
de:24:3f:42:c0:ed:12:b1:0b:4f:5e:65:d4:8a:66:61:9a:df:
23:f7:07:c7:45:b2:7b:a1:f5:15:a1:59:0a:a6:b1:aa:04:6f:
4a:2a:b3:6c:4a:2e:2b:e2:07:42:38:11:20:94:5c:a1:d2:78:
4f:fa:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:25 2025 by rpki-client