Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e20323131343339.roa
File: 34352e38312e35362e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: 3yXlq/CzDDDAwgxHIMNaidUKgxNrPseCPdZIK0UHj/Y=
Subject key identifier: 88:52:A8:C7:B1:E3:91:4E:ED:8C:5F:03:26:71:FE:B2:23:FA:3F:78
Certificate issuer: /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial: 08F4A9CDAFD5297470940EB2410E1FAD2483770F
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e20323131343339.roa
Signing time: Tue 13 Dec 2022 07:37:46 +0000
ROA not before: Tue 13 Dec 2022 07:32:46 +0000
ROA not after: Tue 12 Dec 2023 07:37:46 +0000
asID: 211439
IP address blocks: 45.81.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f4:a9:cd:af:d5:29:74:70:94:0e:b2:41:0e:1f:ad:24:83:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Validity
Not Before: Dec 13 07:32:46 2022 GMT
Not After : Dec 12 07:37:46 2023 GMT
Subject: CN=8852A8C7B1E3914EED8C5F032671FEB223FA3F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:03:84:2d:c0:06:1d:ca:9d:5e:2b:ee:ec:
8f:ed:3e:88:0b:f7:cf:c1:29:97:6f:2c:ae:4d:b2:
be:4d:c3:df:3c:f4:02:78:a1:53:db:61:8b:b6:8a:
b7:d8:81:e6:59:a2:00:95:79:a7:5f:7b:0b:44:4b:
bd:5c:3f:5d:c8:c9:be:7d:ff:ec:4a:42:77:bf:77:
a0:db:b3:ec:1f:31:88:e7:b7:a2:05:cd:8a:d2:b6:
98:12:99:da:7f:b2:62:0a:85:5c:3c:97:d0:ed:4a:
ec:c7:c7:6a:2a:73:cc:a4:76:90:ec:f7:cb:7f:c9:
00:0d:a8:19:13:a5:f0:a4:f1:64:2d:53:d0:51:de:
ca:99:3d:4a:a4:a0:a7:43:cc:39:d7:a0:0d:4d:31:
7d:6f:a8:81:cf:b1:26:45:97:8b:a7:89:55:8f:62:
72:91:41:c7:21:81:d3:75:ce:b7:87:b9:5f:89:fa:
3f:cc:21:0a:84:77:04:e9:f3:b2:a1:61:90:3f:7b:
ad:b7:29:4f:f8:18:38:49:a6:e2:10:5c:5c:6a:73:
ff:61:aa:41:30:28:bd:85:91:d6:a9:7d:8d:16:ce:
04:0d:1e:a1:f4:cc:3d:72:bc:70:29:1a:cd:69:5b:
75:04:ff:12:12:48:3d:d8:0a:61:e1:ff:d3:9e:f9:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:A8:C7:B1:E3:91:4E:ED:8C:5F:03:26:71:FE:B2:23:FA:3F:78
X509v3 Authority Key Identifier:
keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35362e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/24
Signature Algorithm: sha256WithRSAEncryption
45:50:05:75:6c:ca:cf:76:8e:1e:5f:2a:e9:23:53:ba:93:04:
4f:48:e3:ed:f9:2e:51:3b:4f:e2:32:89:22:74:04:57:8b:b6:
36:fe:40:01:50:ba:71:ce:79:06:33:80:91:57:ea:25:d3:81:
2e:9b:67:8f:f8:68:06:e1:50:b7:b4:38:59:4c:49:03:9f:86:
20:32:52:83:39:e1:44:e8:b5:5d:db:74:23:1c:cd:79:39:d5:
fd:3a:c1:fd:7b:3b:a9:96:d6:20:10:76:87:f1:94:24:b9:eb:
0f:dd:34:ce:a2:9d:e6:0d:e3:41:68:3c:ce:9d:d8:a8:b7:ec:
fd:8b:3b:2d:0b:8c:a0:b8:42:36:82:ec:e7:a2:ab:25:1f:3a:
f4:89:32:ce:1b:e1:e9:c3:36:9e:67:b5:60:f2:02:1e:11:fd:
6e:17:c3:e1:c7:4f:ed:7c:24:b6:c0:96:29:b5:78:06:0f:9d:
4c:f2:11:ee:1e:cc:01:cb:1f:0c:e6:8f:27:2d:00:52:61:bb:
cc:15:23:61:57:18:23:ec:43:78:96:74:a8:e2:99:ed:19:6d:
42:65:a4:b2:07:10:70:bb:e2:46:51:e0:72:29:ba:9a:2d:ff:
1c:5e:6b:38:36:fd:0b:54:b0:12:bf:0c:02:ca:4d:f0:a0:c8:
a3:42:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:22:42 2025 by rpki-client