Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa
File: AS204372.roa (raw, json)
Hash identifier: Ax00OoMn7AHyPn/qkdJZUIOlUuQ70+O9ibw+6iEB15I=
Subject key identifier: EA:80:EF:76:7D:FC:A1:D4:23:AE:19:38:63:68:8A:E4:F0:3F:F7:6A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 1719107C9900C059824D58AD26B1A5A4BC2A3E04
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa
Signing time: Sun 15 Sep 2024 00:02:00 +0000
ROA not before: Sat 14 Sep 2024 23:57:00 +0000
ROA not after: Sun 14 Sep 2025 00:02:00 +0000
asID: 204372
IP address blocks: 89.116.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:19:10:7c:99:00:c0:59:82:4d:58:ad:26:b1:a5:a4:bc:2a:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 14 23:57:00 2024 GMT
Not After : Sep 14 00:02:00 2025 GMT
Subject: CN=EA80EF767DFCA1D423AE193863688AE4F03FF76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:fb:95:84:98:8e:15:9e:19:78:84:b5:d8:
57:84:ec:20:7c:37:0d:b7:03:31:a9:6d:9c:06:d2:
6a:f1:74:ad:4d:ad:d0:c2:b5:d6:9f:8a:b5:20:fd:
e0:4d:ac:d1:dc:fa:da:f6:e6:e0:c3:92:d5:ff:f5:
43:c7:45:a8:dc:e7:e6:55:bf:dc:06:09:0b:74:4a:
78:40:7a:fb:fa:c4:1a:28:87:82:83:5d:c8:21:f3:
af:12:d4:8f:4c:ec:a5:8a:a5:44:8f:2e:c6:6b:da:
5e:20:c6:84:e6:b6:34:bd:83:e9:da:cb:63:bb:c1:
62:92:7c:09:69:5c:21:41:ea:dd:1b:c8:5e:43:f2:
5d:ca:fd:97:c8:be:56:d9:5f:b7:2a:53:53:05:28:
5c:b7:f1:95:87:df:f2:c7:2a:23:52:7a:25:d3:68:
93:0d:8e:40:c0:e9:ad:56:15:48:e1:65:74:9f:dd:
0f:7f:7f:fa:05:55:8d:ff:87:77:76:9c:78:81:56:
99:f6:2d:9f:fc:e5:28:29:5c:bc:45:af:dc:06:ff:
87:e7:eb:3d:30:0e:17:97:97:5c:fc:92:f1:58:2b:
23:90:c1:82:88:1b:ff:87:1c:24:2a:c3:46:93:a2:
89:36:7e:da:c2:3f:41:6c:31:69:f9:7b:66:73:00:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:EF:76:7D:FC:A1:D4:23:AE:19:38:63:68:8A:E4:F0:3F:F7:6A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:46:09:45:85:75:ad:f9:6e:24:2c:4e:c4:04:a1:dd:e2:08:
52:db:08:43:0a:4e:98:98:e0:d8:70:3a:5e:85:56:5a:2d:6d:
cb:30:ec:33:70:4e:ba:04:58:79:e8:d3:ef:6d:5f:c0:26:38:
4b:f5:94:6a:98:c8:5c:91:bd:f4:62:34:72:d1:44:42:b0:ab:
34:69:bd:57:23:90:0c:9c:b0:61:88:41:1b:50:6d:ab:fa:1f:
12:de:62:88:1b:cc:12:f1:19:30:14:c2:aa:63:59:29:bb:8b:
2e:d1:df:4b:62:69:37:12:27:17:2b:8e:07:cb:89:a6:2b:7d:
88:0d:e6:8c:4b:61:41:ca:3f:13:17:6b:f5:02:b1:3e:74:15:
ab:da:99:56:53:df:91:55:fd:2f:d7:3b:82:cb:71:0e:c5:87:
db:d2:df:ef:b6:74:d5:df:44:5a:0d:1e:41:6e:2f:8f:9e:ee:
8c:3c:10:16:55:d6:38:4f:61:d9:ce:a5:2d:a0:ff:f2:0d:3c:
2d:65:f6:f2:66:ca:7c:9b:4e:ed:b9:36:1a:d0:d1:a7:86:d9:
7e:8e:39:df:e4:fd:4f:4a:81:13:b6:1a:c7:91:29:28:34:fc:
5c:89:36:54:d3:61:20:7e:24:62:f4:d9:16:13:26:af:23:77:
29:08:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:21 2025 by rpki-client