Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: MsL9Orgx+FL9H+hZkSORP17p4enFqWo8PxRxa/ZyPag=
Subject key identifier: 97:D2:DD:21:18:69:5B:FF:8F:01:8A:B3:60:F7:F3:98:B6:1F:13:F7
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3A51C33DCEB69D3755B03F7B5D2B798B3C1EB837
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa
Signing time: Wed 01 Jan 2025 00:02:05 +0000
ROA not before: Tue 31 Dec 2024 23:57:05 +0000
ROA not after: Wed 31 Dec 2025 00:02:05 +0000
asID: 13213
IP address blocks: 86.38.248.0/24 maxlen: 24
86.38.250.0/24 maxlen: 24
86.38.252.0/24 maxlen: 24
86.38.254.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.116.200.0/24 maxlen: 24
89.116.241.0/24 maxlen: 24
89.117.80.0/24 maxlen: 24
89.117.83.0/24 maxlen: 24
89.117.91.0/24 maxlen: 24
89.117.105.0/24 maxlen: 24
89.117.106.0/24 maxlen: 24
89.117.107.0/24 maxlen: 24
89.117.155.0/24 maxlen: 24
89.117.160.0/24 maxlen: 24
89.117.161.0/24 maxlen: 24
89.117.162.0/24 maxlen: 24
89.117.163.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:51:c3:3d:ce:b6:9d:37:55:b0:3f:7b:5d:2b:79:8b:3c:1e:b8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 31 23:57:05 2024 GMT
Not After : Dec 31 00:02:05 2025 GMT
Subject: CN=97D2DD2118695BFF8F018AB360F7F398B61F13F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:a7:0f:51:df:0f:af:94:03:6f:fc:6a:cd:
83:73:f6:d3:9d:e2:f1:77:1e:9f:43:37:f4:c6:a6:
f4:54:12:4d:31:34:52:f9:b3:2c:fb:80:3d:84:27:
f3:ff:93:96:7f:87:bd:98:e5:67:39:66:7d:64:b9:
a0:1b:d0:4d:cd:12:f7:0e:85:b4:8e:3e:b4:a5:24:
55:20:85:14:03:ea:da:bc:72:af:e0:ff:72:d7:56:
16:bd:63:b6:b5:29:14:b0:50:7f:e9:c3:40:1b:8d:
24:40:45:e4:92:75:66:2f:93:eb:6d:71:b8:a9:af:
01:15:72:18:14:35:1f:68:68:45:ee:4b:7f:ba:6e:
24:dd:44:fb:38:8e:e0:af:4e:15:38:cc:d6:7c:a2:
af:43:20:01:a9:f4:17:1b:e4:df:7b:19:a8:41:6a:
a2:20:0f:87:7f:df:59:1c:69:29:c3:7e:0c:ac:a7:
6b:e5:cf:89:62:e2:b2:d7:d7:55:9c:96:fc:06:b8:
38:4e:bd:db:4a:cb:13:13:29:45:df:22:71:fb:31:
cc:b4:7f:2e:16:0f:e7:5d:5c:3c:34:61:f6:ba:38:
23:bb:59:f2:b5:74:cb:6a:38:ed:96:5b:b3:09:2b:
d9:38:c0:3e:5e:12:e1:15:f4:a7:c0:bf:cf:5f:93:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:DD:21:18:69:5B:FF:8F:01:8A:B3:60:F7:F3:98:B6:1F:13:F7
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.248.0/24
86.38.250.0/24
86.38.252.0/24
86.38.254.0/24
89.116.62.0/24
89.116.200.0/24
89.116.241.0/24
89.117.80.0/24
89.117.83.0/24
89.117.91.0/24
89.117.105.0-89.117.107.255
89.117.155.0/24
89.117.160.0/22
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:37:fe:46:bd:66:c0:3e:f2:3f:7a:4b:47:a7:2b:97:7d:b3:
dd:3e:96:c0:cd:aa:ee:36:43:ed:19:1d:47:5a:5e:2b:2c:04:
07:48:98:55:41:99:fb:12:04:a2:e7:dc:a6:7f:6c:80:eb:3b:
ed:4d:15:53:dc:8d:5c:44:63:36:f7:e8:c5:c2:af:ce:b1:89:
26:9b:4e:8e:03:48:43:b4:2c:0d:38:6d:f6:71:cb:e6:10:b3:
33:08:89:31:e2:07:01:c4:98:40:f1:c4:a1:d6:c0:ef:4d:42:
51:15:fb:4b:12:84:7c:ec:a9:90:02:a7:26:0d:7f:22:24:a8:
23:bb:5d:4c:70:f4:99:06:5f:18:cf:7f:89:81:26:b8:fd:e9:
bc:29:8b:90:9b:9c:da:9e:b1:91:c6:b1:9f:96:16:fb:f5:e0:
91:fa:38:b2:f3:4c:c7:96:70:63:17:e8:6f:51:d2:c1:98:1d:
a4:16:f0:ac:68:ca:bb:e7:45:8f:80:a3:1f:66:37:d6:aa:ed:
fc:a7:e0:7e:26:3a:8b:ff:96:83:4b:94:3b:46:6a:70:1c:68:
22:15:a8:4c:94:65:db:dc:9d:05:ba:6d:36:b3:86:ca:44:c5:
c2:dd:f0:06:90:3a:be:3d:46:89:39:8f:82:c6:a8:d9:80:bb:
71:bf:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:18 2025 by rpki-client