Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa
File: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (raw, json)
Hash identifier: 7B9olT02WObGdKHKU6DykVkoZ/1OX8T0YmEeWU3iMwk=
Subject key identifier: E9:D7:FB:55:6C:AE:D4:99:63:D6:29:52:B2:7F:63:3B:BF:20:02:1A
Certificate issuer: /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial: 1F2147955A1A5106032C47970F45D03DA0A73211
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa
Signing time: Mon 05 Dec 2022 12:48:15 +0000
ROA not before: Mon 05 Dec 2022 12:43:15 +0000
ROA not after: Mon 04 Dec 2023 12:48:15 +0000
asID: 198345
IP address blocks: 2a09:d640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:21:47:95:5a:1a:51:06:03:2c:47:97:0f:45:d0:3d:a0:a7:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Validity
Not Before: Dec 5 12:43:15 2022 GMT
Not After : Dec 4 12:48:15 2023 GMT
Subject: CN=E9D7FB556CAED49963D62952B27F633BBF20021A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:c0:81:23:32:d2:88:0f:12:cc:ad:7e:c9:
6c:38:f6:59:5a:16:8d:29:fa:f7:a1:83:d9:57:9f:
87:e2:a1:83:b9:32:39:a6:d2:8d:f7:10:37:2f:87:
31:ad:93:97:91:1f:0a:1d:f8:c1:5c:23:0e:53:fb:
ce:65:a8:49:58:63:a0:0f:fc:e6:2e:cc:c7:c6:90:
7e:12:c9:71:3b:f9:bf:5c:1d:33:87:84:20:cf:8e:
47:19:d5:65:c6:f7:e8:2a:38:15:95:6e:e6:8f:86:
a0:a3:ba:42:ca:e4:58:9a:ce:78:6b:6e:62:87:d0:
62:7b:e5:2e:53:d2:77:e9:d1:64:83:e0:a4:f0:b8:
5b:9f:77:37:2f:40:f2:5c:af:eb:27:fa:e3:6b:db:
14:86:92:ec:32:3a:e8:c0:85:fe:80:5c:cd:07:f6:
a7:2b:65:35:9a:45:64:d7:a2:1f:c7:e0:d6:f1:8f:
28:2f:c9:4f:a4:06:f2:37:16:7a:04:2d:4b:92:4e:
eb:cd:2c:23:69:46:46:8a:72:56:ef:ca:57:ea:86:
8f:b3:8b:6f:c2:a4:4e:31:50:57:ee:8f:8d:59:77:
b4:3f:63:c2:e1:6c:19:41:0e:68:27:cf:e6:9a:fa:
6d:fb:e9:c8:b5:55:11:41:26:db:91:75:e9:4f:39:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:FB:55:6C:AE:D4:99:63:D6:29:52:B2:7F:63:3B:BF:20:02:1A
X509v3 Authority Key Identifier:
keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d640::/29
Signature Algorithm: sha256WithRSAEncryption
6e:35:60:31:4f:58:88:6f:45:53:c3:cf:a9:ea:f0:6c:61:17:
33:f5:76:23:a3:28:bc:13:d1:41:84:89:00:f2:5c:3b:7f:72:
12:eb:4d:e9:d2:e7:d0:24:21:fd:cc:6e:6d:5f:07:d5:89:b3:
42:b0:5d:fd:dc:51:ae:2d:74:c7:0a:e1:13:99:ff:cc:58:a8:
72:cf:d4:c3:6d:54:b9:74:2f:fb:cb:98:ae:d8:cc:64:ea:86:
a3:58:6f:35:56:4e:53:5c:29:fe:aa:d8:06:ef:3c:ec:15:90:
d9:49:ce:f1:4d:5e:71:14:54:83:bc:87:e1:f5:e3:27:45:68:
26:29:01:5b:01:14:ae:80:cd:34:04:a0:23:20:b1:fa:55:d0:
95:f5:6e:5d:9c:99:63:f0:cd:48:c8:bf:0a:89:64:a1:33:c8:
2c:84:80:b2:47:3e:60:ed:db:e0:c2:b1:26:ab:e4:12:5f:eb:
63:44:bd:cc:6d:0f:86:35:99:9b:80:2d:0f:38:14:6f:7d:b2:
51:34:f2:18:22:df:ab:c7:76:47:de:e7:7c:fa:62:ae:3e:3e:
81:8a:e4:ae:a5:e2:f0:c5:25:99:2e:1d:13:b4:2f:ee:a7:12:
16:b4:85:a5:9d:32:e8:83:fd:e0:57:76:c4:fc:8d:67:ca:aa:
94:f7:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:38 2025 by rpki-client