Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: eW+kLmSHTsxd30rX75tYtRjrJU5npa0736lZ1ig9eI4=
Subject key identifier: FE:B1:2C:AA:C0:20:EC:43:6E:9A:F5:1B:06:FC:E3:C8:D0:7F:EE:ED
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3138F8BC45FDD3C3FD845989CE5B45B04C43B494
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
Signing time: Sun 12 Jan 2025 00:00:36 +0000
ROA not before: Sat 11 Jan 2025 23:55:36 +0000
ROA not after: Sun 11 Jan 2026 00:00:36 +0000
asID: 212238
IP address blocks: 82.140.182.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.237.0/24 maxlen: 24
84.46.238.0/24 maxlen: 24
86.38.5.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.180.0/24 maxlen: 24
86.38.181.0/24 maxlen: 24
86.38.219.0/24 maxlen: 24
86.38.247.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.116.65.0/24 maxlen: 24
89.116.66.0/24 maxlen: 24
89.116.67.0/24 maxlen: 24
89.116.75.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.183.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.13.0/24 maxlen: 24
89.117.41.0/24 maxlen: 24
89.117.95.0/24 maxlen: 24
89.117.97.0/24 maxlen: 24
89.117.98.0/24 maxlen: 24
89.117.99.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.121.0/24 maxlen: 24
89.117.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:38:f8:bc:45:fd:d3:c3:fd:84:59:89:ce:5b:45:b0:4c:43:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 11 23:55:36 2025 GMT
Not After : Jan 11 00:00:36 2026 GMT
Subject: CN=FEB12CAAC020EC436E9AF51B06FCE3C8D07FEEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:22:c9:1e:47:2c:51:51:97:0b:5f:57:d4:
03:71:67:ef:3c:34:cc:7c:6c:9a:86:a5:ca:48:ac:
eb:92:20:a7:75:17:de:ba:00:dc:39:ef:00:62:c7:
17:83:87:ca:79:8e:7d:fd:6e:12:ff:e6:a1:d4:f1:
5e:2e:5a:87:8f:46:3f:4f:79:d5:67:bf:2d:51:f2:
57:69:57:73:48:46:0b:c5:fd:a5:5b:46:22:c8:c2:
dc:14:27:f3:fd:70:ae:b1:fe:84:9e:fa:87:48:28:
29:e9:2a:90:74:57:8d:e4:77:84:70:70:f3:40:5d:
84:ab:4e:85:92:e3:23:74:0d:cc:3a:b4:e3:a8:bb:
80:55:66:34:49:06:23:8a:74:50:11:a1:f3:b9:85:
b6:b0:b9:e6:1d:45:b8:06:37:34:d7:d3:b4:5d:fd:
93:bb:38:27:a7:09:3e:08:d5:90:c1:38:81:ef:9a:
11:eb:f5:4f:45:c6:25:ed:4b:f1:ef:b3:e4:74:04:
20:66:48:20:8a:4c:fc:a7:a9:96:f0:7c:73:78:d0:
c2:a8:29:33:11:20:3d:af:74:6b:d8:c3:2c:b3:74:
30:c9:9c:3b:66:ad:70:f4:53:e4:5a:0a:7a:d1:2b:
f2:7b:2b:d6:71:15:38:88:14:26:e3:26:66:1d:76:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:2C:AA:C0:20:EC:43:6E:9A:F5:1B:06:FC:E3:C8:D0:7F:EE:ED
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
84.46.237.0-84.46.238.255
86.38.5.0/24
86.38.177.0/24
86.38.180.0/23
86.38.219.0/24
86.38.247.0/24
89.116.56.0/24
89.116.65.0-89.116.67.255
89.116.75.0/24
89.116.103.0/24
89.116.168.0/23
89.116.183.0/24
89.116.255.0/24
89.117.13.0/24
89.117.41.0/24
89.117.95.0/24
89.117.97.0-89.117.99.255
89.117.109.0/24
89.117.111.0/24
89.117.121.0-89.117.122.255
Signature Algorithm: sha256WithRSAEncryption
8f:73:6e:4f:de:bd:24:e4:62:0d:0d:b3:45:c3:0f:d9:7c:e8:
48:38:d2:17:e9:df:5d:9d:56:3e:db:7c:60:80:af:ec:5e:d2:
62:6f:de:e8:d8:01:28:4d:fb:cd:11:f0:64:44:7e:0c:c3:c0:
56:70:75:0b:c1:51:5b:d9:79:be:88:6f:5d:a1:45:5e:2c:65:
a5:c0:b8:63:ce:38:b3:a8:75:8d:4b:74:54:52:49:0f:06:4e:
6b:0a:de:5d:5e:c0:c3:b4:86:50:69:0b:e4:89:6a:6d:42:0f:
b3:78:c7:d4:1e:5e:cb:b4:86:28:d6:aa:ab:50:5b:db:92:94:
15:6b:be:fc:bc:31:8b:61:05:ae:15:46:36:4d:c6:45:7e:11:
d2:9d:84:78:f2:a5:21:ee:f2:7f:43:f1:b7:98:0b:18:b9:d0:
a5:cd:50:fc:0a:14:9c:e7:b2:62:ba:a5:f1:96:4f:f5:7b:a0:
84:89:eb:05:9f:ec:11:ed:5b:cc:da:a9:bc:53:77:ff:3e:24:
cd:d7:a6:8d:4d:a8:4a:b2:9e:b6:1a:90:76:d4:88:cf:38:3d:
18:85:f1:92:1f:fd:22:96:d1:49:54:e8:b7:41:61:f0:14:1f:
43:36:2b:75:25:c5:f3:66:b6:3f:b8:31:3e:a4:86:1a:04:cb:
7a:85:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:33 2025 by rpki-client