Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e20383334.roa
File: 37372e37352e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: y3+DglwJBdFTykov4Q/j+FEUIBdyDRGi5XLqXgtU7Hc=
Subject key identifier: B0:1D:70:A2:1C:AA:4E:8A:CA:97:80:DC:B4:F3:00:67:F6:A8:08:C0
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 204950704CF63CD14CBDD6FEC37651BE1EB53AAF
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e20383334.roa
Signing time: Fri 21 Feb 2025 00:04:17 +0000
ROA not before: Thu 20 Feb 2025 23:59:17 +0000
ROA not after: Fri 20 Feb 2026 00:04:17 +0000
asID: 834
IP address blocks: 77.75.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:49:50:70:4c:f6:3c:d1:4c:bd:d6:fe:c3:76:51:be:1e:b5:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 20 23:59:17 2025 GMT
Not After : Feb 20 00:04:17 2026 GMT
Subject: CN=B01D70A21CAA4E8ACA9780DCB4F30067F6A808C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:a1:5b:1c:07:a4:9a:bc:78:8d:3b:2f:4d:
f0:73:ea:e4:22:86:a9:ba:78:30:31:51:0c:3a:19:
bd:d2:f6:3a:c5:12:82:13:28:a7:fd:af:ad:e8:0b:
1b:aa:a0:f7:3d:02:01:e5:80:88:43:7d:e3:d3:40:
65:68:43:1a:67:7e:aa:e8:8c:ab:ec:57:17:27:17:
e8:6f:ce:49:d6:f2:a4:42:7c:38:08:18:62:c9:d2:
3a:a8:f3:4d:b5:bf:af:86:94:ba:31:49:59:aa:15:
8c:50:53:ff:4f:02:1f:be:39:2f:44:a5:77:16:1c:
a3:68:50:80:8d:17:5b:4e:ec:b4:49:09:b0:b7:3c:
45:90:e8:ae:68:ca:49:8d:6b:a2:d1:92:6e:c7:bc:
ee:f9:48:b6:02:6a:38:37:b8:5e:46:b1:c3:f3:f0:
e9:c7:9b:9b:84:83:68:bf:59:a9:b2:27:73:89:72:
08:00:c4:3d:5b:70:73:3c:05:66:04:d7:4c:ad:96:
e9:04:d8:ab:8a:39:19:27:b4:4b:6d:98:3e:32:14:
06:b0:31:a1:87:c6:c0:52:10:bb:1e:c3:0f:fd:98:
6f:ef:1c:98:df:7a:0c:17:ff:d1:5f:3f:d3:70:01:
cd:76:d7:98:f9:89:b7:0c:70:52:05:9c:3d:ae:99:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:70:A2:1C:AA:4E:8A:CA:97:80:DC:B4:F3:00:67:F6:A8:08:C0
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1d:45:d4:fd:cc:9e:38:ef:bc:f7:0e:f4:c3:53:3e:c1:33:
dd:07:4e:11:e2:a0:2c:bd:88:50:7a:36:1a:66:21:1b:27:2d:
20:e4:7e:71:46:31:39:a3:95:21:74:cb:2b:83:bd:98:6b:74:
1f:e9:5d:c7:6a:ba:a9:02:9c:c1:0c:10:c0:ec:13:3b:e5:ec:
f1:41:a9:6d:17:80:5c:07:dd:2a:cc:b5:28:3e:d2:c8:9a:4b:
ab:3f:05:a3:1d:4f:e1:65:6c:20:d8:ff:70:19:6e:58:ae:c6:
d4:d0:b0:77:3b:cf:62:c7:77:50:f5:9d:21:33:71:7d:6f:dd:
43:ea:12:11:82:ce:94:7c:cc:50:57:e1:80:36:91:14:28:0d:
4f:0b:e9:cc:c5:3d:89:f6:32:52:0d:04:08:ca:f7:59:70:86:
85:2f:29:0b:ed:e8:d4:e4:34:c3:1c:cf:9e:24:f6:be:65:62:
b7:04:db:8b:f7:09:e8:73:08:e6:d2:23:2e:47:f6:87:cc:55:
04:ef:47:bb:74:1b:e6:c8:ac:ea:9f:7c:b3:60:21:dd:66:e9:
0e:dc:0d:f9:c6:ee:06:f1:a1:fe:4f:8e:0c:20:66:3d:fc:8e:
1f:60:9c:10:7e:ba:c2:40:84:29:2b:0f:df:26:51:e5:05:d8:
2f:2d:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:37:10 2025 by rpki-client