Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa
File: 37372e37352e3139352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 4DS22zaVE3ZWcXwK7nTDP0LWt+y5Gvk68+2K81bCqoI=
Subject key identifier: 42:1B:79:9F:11:99:E5:53:24:5B:C2:6E:47:4C:71:E5:E4:03:5C:94
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4CE0623F7EB8FA06DE013CD396FBF1144F70D0F1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa
Signing time: Mon 17 Feb 2025 13:11:09 +0000
ROA not before: Mon 17 Feb 2025 13:06:09 +0000
ROA not after: Mon 16 Feb 2026 13:11:09 +0000
asID: 16276
IP address blocks: 77.75.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e0:62:3f:7e:b8:fa:06:de:01:3c:d3:96:fb:f1:14:4f:70:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 17 13:06:09 2025 GMT
Not After : Feb 16 13:11:09 2026 GMT
Subject: CN=421B799F1199E553245BC26E474C71E5E4035C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:5a:87:c6:0d:9d:86:32:ab:8e:36:45:63:
5a:0e:42:f4:a7:bc:5b:7c:4a:4e:27:5a:ac:2c:5d:
fd:91:86:ac:a7:d8:b0:16:46:db:6f:df:d8:51:10:
46:96:4c:62:cc:8b:0d:46:f4:ef:b1:72:fc:a5:ce:
22:96:8e:93:0e:3c:56:8e:0a:b1:64:73:7d:7b:c3:
bb:e5:e1:bf:79:ed:a5:37:45:3a:bd:85:21:76:96:
39:79:83:70:ff:ea:73:71:35:14:51:2c:42:07:df:
6e:13:90:70:e4:33:61:58:eb:5a:1e:c4:23:3c:55:
da:e0:fd:ca:a6:32:cd:9a:9c:bc:a0:e3:39:e1:88:
51:62:38:e9:52:94:46:9a:6f:f4:23:41:c4:fb:6e:
ae:7e:18:e8:8c:73:4f:86:7a:3e:f8:ae:01:5e:80:
71:ab:87:41:74:28:eb:66:00:80:ae:fa:cc:0c:eb:
49:7a:0e:fd:03:7b:98:68:59:20:61:f6:7b:47:38:
f0:db:8b:3f:22:21:60:48:c3:55:25:92:ce:ef:2a:
ad:a2:68:ed:d6:1d:db:71:bb:0a:ac:d2:67:87:ac:
72:d1:e2:65:3c:76:91:51:9f:4a:82:5a:8b:c0:a4:
8e:4c:7d:b2:c3:c5:b3:b0:ee:01:5b:b0:51:83:5f:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:79:9F:11:99:E5:53:24:5B:C2:6E:47:4C:71:E5:E4:03:5C:94
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.195.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ea:38:c7:19:aa:27:10:c4:31:24:59:aa:3f:54:92:10:9d:
14:80:3d:20:1f:95:98:23:26:06:65:14:13:b1:98:d3:ed:c7:
07:7b:20:79:73:82:47:93:e3:0c:b2:cd:fc:b0:5d:8e:b8:87:
ff:fa:3e:a8:c1:d9:84:21:c3:35:86:bb:da:3a:25:07:83:cc:
a6:16:44:63:fb:8f:50:cc:a8:f5:02:65:4b:07:57:e0:d2:2f:
0d:06:e8:bf:53:f3:cd:be:0a:6f:9a:1b:d2:a3:0e:62:14:45:
31:ee:cc:06:89:26:55:f0:0c:9a:5c:02:00:23:27:b5:5e:82:
41:06:ef:b2:23:7f:c8:00:87:54:aa:46:24:af:5e:57:08:9d:
89:ff:ad:d3:79:de:86:98:c3:4c:b6:5a:3b:ba:ce:31:0a:58:
ee:a5:fe:8f:55:96:83:47:bb:32:51:52:e8:e8:5b:94:a4:e9:
60:55:c8:db:c2:c7:2c:85:20:ee:3b:fa:86:73:40:67:4f:27:
44:ca:66:71:d4:e6:5e:63:cd:fe:c5:6a:a8:36:02:f1:fc:5b:
ac:37:8f:75:29:52:ee:8f:8d:ca:5d:a9:9a:48:6f:61:40:3c:
c7:a9:24:c1:46:14:f6:69:58:54:d0:d9:65:29:56:8f:d3:04:
e3:3c:30:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:07:06 2025 by rpki-client