Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
File: AS46450.roa (raw, json)
Hash identifier: BSJt4/3+6Um7gBOL6OXhsLTTLLg/4VNY1Y+f3Jd85mo=
Subject key identifier: 23:6A:29:7E:B3:30:79:ED:6B:DD:0F:97:1B:25:88:BC:83:E5:E6:5A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3CC75465A2C22159988041BC34D59F4C4D5EEC66
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
Signing time: Thu 05 Sep 2024 14:05:20 +0000
ROA not before: Thu 05 Sep 2024 14:00:20 +0000
ROA not after: Thu 04 Sep 2025 14:05:20 +0000
asID: 46450
IP address blocks: 89.116.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c7:54:65:a2:c2:21:59:98:80:41:bc:34:d5:9f:4c:4d:5e:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 5 14:00:20 2024 GMT
Not After : Sep 4 14:05:20 2025 GMT
Subject: CN=236A297EB33079ED6BDD0F971B2588BC83E5E65A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:ad:83:48:b9:70:79:50:1e:ea:12:9e:71:
e0:65:43:ec:63:04:f4:61:a2:5d:39:1d:32:1d:fc:
10:4f:cd:25:2c:11:b2:8e:1a:47:59:8f:46:e7:cb:
00:b0:d4:a1:a7:7b:8e:a1:4f:8e:37:eb:d0:6c:e3:
78:11:24:31:7a:3a:dd:2a:59:12:df:00:c6:22:de:
fb:8e:62:66:fa:02:91:81:2b:15:89:f1:cf:50:ba:
d8:16:76:54:66:bf:5c:3d:47:45:88:dd:57:d7:8a:
39:80:49:d1:24:88:99:94:fb:54:a2:7b:20:8d:10:
9b:a5:be:40:c3:e9:6d:ba:43:f6:31:f6:3b:92:da:
9e:50:b8:f0:86:1f:94:6a:dc:85:28:0c:8c:13:ab:
b9:d6:84:a6:f1:58:bb:f2:78:54:39:72:59:7f:db:
8a:2f:e7:33:26:51:47:8e:65:38:65:e7:51:47:bd:
9f:20:8e:85:8c:e7:10:53:93:a5:f1:bd:06:85:20:
74:34:3f:9b:98:5e:b2:3e:df:bd:1f:bb:fe:d4:76:
ac:3d:5a:a1:81:69:95:07:60:ab:24:25:0b:3f:1f:
f6:81:e8:5f:7c:46:0b:1c:65:56:ac:e8:83:da:64:
de:d2:a3:76:6a:54:88:53:ba:f5:16:4a:51:8f:35:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:29:7E:B3:30:79:ED:6B:DD:0F:97:1B:25:88:BC:83:E5:E6:5A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.80.0/21
Signature Algorithm: sha256WithRSAEncryption
60:18:f6:69:be:da:f2:cf:1c:84:b5:ce:49:5b:82:90:61:01:
63:05:67:72:7a:ee:5b:6a:ca:fd:07:7f:a1:8c:2c:11:0c:83:
43:55:ef:ca:ca:b4:1c:a9:95:05:a3:04:67:0a:d9:0f:8c:7d:
5d:2a:4e:70:0c:ac:27:ae:bd:15:76:66:5d:8d:7e:a0:6f:45:
58:b2:8b:b0:6b:c7:1b:99:60:62:da:35:74:0b:25:15:41:2f:
4a:4c:85:17:1b:30:44:02:2d:ee:28:82:48:eb:2b:44:82:96:
ff:75:9b:a5:ec:0c:6d:3a:1a:ea:ab:bc:4c:36:99:33:59:ee:
f1:a4:a9:c2:f0:cc:44:0b:6e:99:3a:26:4e:f2:bd:d6:cd:cd:
82:51:a3:cc:9f:c6:bd:cd:55:52:16:49:88:78:14:38:21:33:
bf:8d:15:24:2f:dc:25:df:39:a1:b1:ac:9b:bd:99:7f:de:d6:
b9:fb:b3:60:02:74:39:03:40:ed:eb:d7:63:01:81:f2:f0:36:
8b:f1:3b:46:7a:86:19:37:e4:a1:62:06:b0:25:19:d1:77:a3:
d7:40:3d:dd:9e:b2:bd:3c:f9:81:5b:9c:d9:0e:c4:48:49:ca:
5e:cd:35:e2:16:35:30:66:46:91:f4:7d:b0:66:5e:e8:bf:82:
3c:d8:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:12 2025 by rpki-client