Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35372e302f32342d3234203d3e203630373231.roa
File: 34352e38312e35372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: JvwLEwLi8rWG8DRMv80jymRxqoHAFpV1WSfefQbT8n8=
Subject key identifier: F1:F2:5B:B7:BA:3A:21:FE:48:4D:0E:3B:57:F0:3F:98:DB:B4:F3:70
Certificate issuer: /CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Certificate serial: 132588188DFC76E1AB0CD7C8C961136B7CF48664
Authority key identifier: 10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35372e302f32342d3234203d3e203630373231.roa
Signing time: Mon 05 Dec 2022 12:32:09 +0000
ROA not before: Mon 05 Dec 2022 12:27:09 +0000
ROA not after: Mon 04 Dec 2023 12:32:09 +0000
asID: 60721
IP address blocks: 45.81.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:25:88:18:8d:fc:76:e1:ab:0c:d7:c8:c9:61:13:6b:7c:f4:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e0211b2245dcff8d663cb2c2798fa0f03af108
Validity
Not Before: Dec 5 12:27:09 2022 GMT
Not After : Dec 4 12:32:09 2023 GMT
Subject: CN=F1F25BB7BA3A21FE484D0E3B57F03F98DBB4F370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:5d:fd:49:dd:8b:be:fc:4c:b5:3e:9d:16:
60:bc:76:a6:36:27:4e:e2:80:63:96:03:3b:c0:ca:
fc:14:2a:14:1f:2f:b2:71:bc:fe:e9:44:3a:1b:74:
b0:7a:68:31:99:47:7b:be:18:ef:33:f6:67:99:04:
2b:d7:92:39:73:cf:e0:02:c1:fd:47:a3:6e:e2:aa:
46:86:b4:60:cf:af:45:53:ca:72:f0:29:7e:19:5b:
97:00:e8:d0:dd:c4:91:16:5e:38:4c:8b:48:f3:46:
d0:06:ad:c5:83:15:b9:08:88:5d:33:c7:a5:74:25:
b3:62:77:6e:aa:91:98:22:56:4a:cb:d1:50:d4:15:
06:31:1b:fb:cd:69:f8:f1:31:68:34:6a:d9:26:27:
3e:86:0b:1b:45:bc:c3:ee:de:2e:8c:c7:dc:a5:91:
b6:d1:f0:41:3c:b2:e4:17:85:f1:79:d9:a4:e6:3d:
49:bd:ad:b5:23:91:b1:36:46:61:eb:95:9f:c2:a0:
54:86:a8:ee:4c:7d:60:4b:b8:02:06:84:4d:72:04:
20:23:a4:6e:19:67:b5:18:ec:42:3e:8c:2e:ae:e4:
b6:0a:ad:1c:fd:f3:49:27:02:4b:59:33:77:7d:c6:
7b:20:23:08:87:a5:9c:8a:fa:46:57:81:9b:ad:04:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:5B:B7:BA:3A:21:FE:48:4D:0E:3B:57:F0:3F:98:DB:B4:F3:70
X509v3 Authority Key Identifier:
keyid:10:E0:21:1B:22:45:DC:FF:8D:66:3C:B2:C2:79:8F:A0:F0:3A:F1:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/10E0211B2245DCFF8D663CB2C2798FA0F03AF108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOAhGyJF3P-NZjyywnmPoPA68Qg.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ae9200a2-317d-448e-9538-9ab796e40300-0/0/34352e38312e35372e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.57.0/24
Signature Algorithm: sha256WithRSAEncryption
84:06:2e:51:8f:39:d6:1d:c2:f2:90:1c:4c:f2:f1:e0:b0:2b:
e6:22:2e:57:3a:3d:b8:08:5e:07:71:88:b3:39:f0:e3:4b:75:
08:f1:e4:06:bc:c1:79:48:f5:6a:08:86:01:3c:e9:68:3f:4c:
e7:69:91:fb:17:83:03:3e:1a:a9:10:d4:fd:e4:32:6e:32:59:
1d:9f:3d:62:a2:a7:5c:fb:17:23:0a:12:7f:72:36:69:21:3b:
50:93:7a:c9:b2:98:6f:52:16:e7:d0:0f:16:b7:33:65:87:e7:
5b:c2:40:17:07:e1:c2:a4:23:8c:92:8a:ee:78:07:82:57:50:
e4:6c:1c:58:93:a1:ae:ad:92:d1:6c:c9:87:fe:4e:ef:23:70:
56:ff:de:9e:60:f2:a6:78:47:de:2b:98:e9:31:0d:07:42:05:
e8:62:72:c6:c3:2e:39:16:99:4a:46:99:78:b9:f9:4f:d7:e8:
1a:73:a9:35:3b:3f:f2:77:80:86:ea:df:c9:49:34:f5:fa:12:
74:51:ca:c4:4f:85:ad:e3:c7:b3:73:19:49:12:68:fe:ad:f0:
b4:e5:db:13:15:af:12:62:ec:74:26:29:e8:33:4d:9d:05:06:
29:3d:91:93:d0:66:24:cf:8d:2f:ef:2a:37:a2:1b:ef:4e:d3:
a8:3b:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:41 2025 by rpki-client