Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa
File: 352e38332e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 030lXR5DJ2gWH8vTAelbUlrLFUowNDbYtKNyS+El66A=
Subject key identifier: F9:F6:5A:52:A0:FA:00:F4:17:0F:58:4C:55:59:91:E5:67:5E:1B:BB
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 5AFEFABBD8048127C2DEC7AB81C9179C6A658008
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Oct 2024 10:49:02 +0000
ROA not before: Wed 16 Oct 2024 10:44:02 +0000
ROA not after: Wed 15 Oct 2025 10:49:02 +0000
asID: 834
IP address blocks: 5.83.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fe:fa:bb:d8:04:81:27:c2:de:c7:ab:81:c9:17:9c:6a:65:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Oct 16 10:44:02 2024 GMT
Not After : Oct 15 10:49:02 2025 GMT
Subject: CN=F9F65A52A0FA00F4170F584C555991E5675E1BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:58:09:df:6a:9d:12:9f:27:f5:fe:66:9b:
c7:9d:cc:8b:4a:bd:b1:75:33:8a:27:10:42:a0:70:
55:c0:18:3a:7d:04:ec:92:d7:1d:78:93:82:93:6a:
77:6d:1f:f2:d2:0c:89:b1:da:7a:96:10:3a:a7:a0:
b8:9d:59:b8:ff:fd:06:f5:35:12:34:3c:36:ba:3b:
6c:8c:39:42:80:77:4b:d9:92:0e:eb:05:c8:de:50:
b3:da:27:fb:b8:31:a9:a0:ff:d8:12:5f:14:42:b3:
fc:27:83:d2:83:44:97:60:8f:da:78:22:e0:fb:f8:
6c:67:19:35:6c:c2:30:83:16:6f:de:8c:b4:9e:e3:
42:c5:69:f3:a4:47:3b:ae:e1:80:5f:c9:2d:68:f7:
2a:42:37:97:e0:58:7c:c8:49:b3:bc:f8:f4:0d:ef:
b3:af:0c:b8:1a:e7:34:9f:04:fd:c1:75:0a:98:24:
4c:89:b9:8a:08:75:76:c5:22:43:6a:bc:5d:de:b1:
01:5f:93:6c:57:c6:15:95:00:05:f8:03:5f:d3:9c:
9e:0e:5a:a6:db:ae:af:f0:66:96:75:9a:c2:31:1e:
10:8e:8e:87:a7:b8:92:2d:e4:37:c1:73:2a:ca:42:
6f:1b:82:84:6c:77:34:b3:6c:9e:79:88:50:5c:74:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:5A:52:A0:FA:00:F4:17:0F:58:4C:55:59:91:E5:67:5E:1B:BB
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e8:50:41:66:2e:c3:ca:0c:9c:78:85:f0:5e:9f:b1:3e:4c:
51:82:92:0b:8c:c8:7c:16:2a:5a:c3:72:24:d6:cb:fc:fd:ff:
bb:6f:1a:30:21:31:ac:86:df:e7:86:8b:0e:dd:fe:78:1f:fe:
4e:dc:1f:d5:15:85:d5:20:41:7f:0c:53:de:f9:59:fd:37:13:
ac:e3:e8:b7:a6:81:b6:11:bf:86:a7:2c:53:8b:b6:9e:a4:c3:
ef:3e:63:f6:3c:f2:28:82:ed:44:29:26:c6:9c:be:85:5e:2d:
49:92:18:02:67:84:eb:62:1c:50:ea:a0:88:fb:0f:87:8b:f6:
5e:9d:68:a4:0d:cd:d2:1f:f1:b0:81:62:c3:cb:57:2f:84:73:
8d:f0:69:17:a7:bc:e4:54:45:64:7b:7a:56:f3:e1:17:71:02:
ee:22:60:ae:df:b1:b4:72:e4:c1:cf:89:a0:02:1f:64:eb:e2:
79:de:37:5d:26:d1:26:1f:96:ee:13:ce:12:b0:c1:cc:c1:ad:
6a:bf:a8:b8:26:66:bc:a5:b6:f6:9d:18:5c:46:06:74:8c:fc:
b4:04:4c:8b:8d:ff:12:f2:a3:01:da:4e:6a:aa:04:d4:aa:f1:
5b:32:3e:a0:eb:93:ab:07:8a:7e:43:29:1f:93:50:7d:cd:d3:
34:0e:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:19 2025 by rpki-client