Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: jCyNCRghd/a2Vr9fPwZIaeSW3/DabdNmIh44iIEQafc=
Subject key identifier: C8:7D:C3:E7:43:1A:C0:F0:8F:28:6C:5A:C7:11:72:8A:DF:49:29:D1
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 4DDDD77321661687758A0EAE21D7202D066D2511
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa
Signing time: Mon 18 Nov 2024 09:29:30 +0000
ROA not before: Mon 18 Nov 2024 09:24:30 +0000
ROA not after: Mon 17 Nov 2025 09:29:30 +0000
asID: 16276
IP address blocks: 86.38.156.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:dd:d7:73:21:66:16:87:75:8a:0e:ae:21:d7:20:2d:06:6d:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 18 09:24:30 2024 GMT
Not After : Nov 17 09:29:30 2025 GMT
Subject: CN=C87DC3E7431AC0F08F286C5AC711728ADF4929D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:83:a0:4d:7d:d7:15:05:fd:70:86:48:ad:
23:e2:7e:74:74:df:59:59:83:55:ac:ea:55:b6:c5:
ef:55:fc:94:97:e2:b1:21:f2:10:86:a0:0e:f5:6b:
6f:5d:1d:fb:93:16:85:b7:fb:4f:83:3d:a4:63:4f:
f2:34:43:4f:5f:57:bc:dd:62:b8:0e:64:8e:f8:08:
17:4f:95:a5:10:12:5c:24:c3:55:16:bc:d7:88:86:
e5:0a:2c:3c:3e:24:10:6e:cd:6d:15:cd:56:c6:37:
45:91:f7:1a:8f:26:a0:4b:65:ed:03:47:72:dc:b1:
27:16:29:97:e3:8e:ea:80:7e:79:a4:80:2d:7e:67:
5d:2e:44:77:e6:8f:2f:fc:11:6f:df:d7:6f:44:dd:
18:33:f9:82:0a:5f:b2:7f:8d:83:ce:26:2f:b6:da:
58:42:a9:9e:1e:81:31:56:24:5c:e5:65:d1:f3:f8:
a1:b8:90:71:ba:d5:c9:5d:63:ad:4d:03:2c:2d:f6:
7f:39:c4:83:53:cc:ea:81:5c:f2:c3:c9:58:b9:02:
98:1d:7e:a7:e9:5f:6f:07:d6:f8:54:55:75:83:78:
5b:f8:9c:b7:67:76:c8:ac:18:33:b8:ed:0f:fa:f1:
1e:e6:41:ad:6b:b8:49:fa:cb:57:27:b5:1d:da:c6:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7D:C3:E7:43:1A:C0:F0:8F:28:6C:5A:C7:11:72:8A:DF:49:29:D1
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.156.0/24
89.116.237.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0e:18:59:75:57:8b:76:e3:e7:56:98:a5:13:1f:22:95:65:
99:58:b2:16:2a:c6:d0:c3:63:2e:d7:48:bc:8c:e1:91:bd:aa:
df:89:a5:41:79:b1:ab:e1:1b:42:2b:0a:39:6d:7a:f0:1d:44:
bb:a1:2d:69:5c:15:4c:ed:9d:93:ad:49:eb:0c:d7:9b:2d:2c:
0d:10:f8:47:a2:42:8b:a2:8d:ef:bb:e3:f3:5f:5a:7d:75:40:
35:e6:2a:2e:7b:3e:51:ec:bd:9b:f4:89:b4:d9:11:21:54:cd:
c6:b0:ac:07:92:c0:81:cb:4c:03:25:ed:bb:d1:c6:56:0b:5c:
5b:21:81:ca:6b:85:76:90:ed:68:5a:f0:95:75:46:d9:6f:c8:
ae:af:f7:5c:04:70:34:f5:26:5e:66:a2:46:ec:c9:12:dd:d4:
22:e2:bb:9d:85:41:2b:b7:18:fd:eb:63:a4:36:0b:ad:60:f0:
8b:ce:75:5c:0a:23:c8:f0:8f:ce:1c:59:c7:6f:98:12:a9:df:
5c:12:44:d9:3c:25:ee:da:e1:77:80:ec:02:3c:16:16:54:e5:
67:ed:9f:d6:00:13:b4:31:b0:d5:e1:ff:36:c4:03:74:90:b8:
c1:c7:b5:49:c6:bb:67:b5:78:9f:67:87:c5:fd:43:f6:ff:f4:
61:67:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:18 2025 by rpki-client