Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
File: AS49870.roa (raw, json)
Hash identifier: DY+yo6FVpa6OvcGynIeaeF1DAbEHfQQ7yT+l5gHvqOA=
Subject key identifier: 62:5F:44:77:DF:52:EA:E3:2B:B0:E8:EA:21:73:47:D8:51:39:C2:6C
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 172ADFEB8AA34FA5790143ED227452D875B64B7C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
Signing time: Sat 20 Apr 2024 10:05:16 +0000
ROA not before: Sat 20 Apr 2024 10:00:16 +0000
ROA not after: Sat 19 Apr 2025 10:05:16 +0000
asID: 49870
IP address blocks: 89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2a:df:eb:8a:a3:4f:a5:79:01:43:ed:22:74:52:d8:75:b6:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 20 10:00:16 2024 GMT
Not After : Apr 19 10:05:16 2025 GMT
Subject: CN=625F4477DF52EAE32BB0E8EA217347D85139C26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:03:9e:a7:4a:36:10:ae:ba:b7:92:40:e6:
26:d2:00:84:75:38:de:78:61:43:9d:01:96:c6:65:
62:11:f8:1d:80:92:27:63:db:33:ff:2d:22:f0:34:
b9:84:bb:76:6f:b6:48:2d:b9:9a:41:18:04:ce:1e:
a7:cb:96:9e:98:90:3f:9f:ec:27:f4:3d:4d:55:26:
be:9b:b2:c2:c8:6a:bb:ea:29:b8:26:d8:a3:49:00:
7c:da:22:8a:00:a0:76:a4:94:c6:78:53:62:88:31:
08:58:0e:db:06:be:bf:01:28:72:96:ed:68:29:10:
d8:9b:c0:a2:c8:dc:ed:3e:91:0e:c9:49:40:d5:97:
41:61:41:0f:62:0e:d8:7a:98:81:91:76:6a:3f:9f:
de:e5:7e:d6:84:6b:fd:4a:fa:94:57:2e:c0:cf:1d:
75:69:e1:31:6f:8d:79:b1:65:be:1b:12:92:12:c9:
d8:d4:6d:56:12:74:c6:89:22:e1:e2:84:05:2b:da:
23:d3:90:8c:c0:40:6b:1d:b1:cb:86:e9:63:aa:d5:
88:ba:8e:61:83:29:19:56:89:ad:ee:33:8f:d3:04:
c6:72:f4:bd:31:19:df:4f:9c:09:41:5b:9f:3a:07:
f0:2f:7a:a7:d3:8e:fd:73:42:2d:9b:83:e5:85:f4:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:44:77:DF:52:EA:E3:2B:B0:E8:EA:21:73:47:D8:51:39:C2:6C
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.202.0/24
Signature Algorithm: sha256WithRSAEncryption
28:90:c2:e4:ec:f6:90:19:47:9e:55:e9:0a:16:39:56:a2:63:
4c:40:9f:49:d1:6f:2b:8c:a8:ab:d7:17:63:8e:33:6e:8f:6d:
df:88:e0:44:4f:60:9f:14:cd:3a:66:ba:9a:da:ba:22:0f:68:
64:83:ab:72:36:96:cd:8f:31:9f:9f:26:4f:a8:f6:6e:0f:98:
dd:25:f7:8e:cd:d1:3a:8a:d0:9c:06:f0:2d:c8:bd:42:b7:ae:
45:50:3f:e0:6b:d7:05:86:ea:32:80:45:1f:33:75:56:d5:65:
b5:b3:f1:43:d5:b8:f7:c7:21:28:c1:8e:da:77:5f:f3:7a:72:
d8:6f:3a:05:32:46:40:aa:32:12:c4:43:1b:27:b0:32:36:c3:
ab:34:5c:9a:ec:88:bf:60:0b:b4:b6:c2:5e:c4:7d:7d:05:ff:
18:19:8b:76:59:74:a9:55:a0:0d:fc:a1:90:75:3f:3d:3a:ec:
77:e3:a9:1f:2e:18:01:6b:45:12:f5:83:ab:9a:55:02:7c:d7:
f1:32:6e:09:32:33:28:6c:a7:b5:58:ce:cb:08:27:c8:a5:f2:
2b:da:66:97:41:62:1f:7c:f5:ea:06:67:11:5b:76:c6:8c:57:
a4:95:78:80:75:73:cf:de:c2:89:b0:af:9d:da:42:b6:3f:3a:
ff:7c:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:47 2025 by rpki-client