Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa
File: AS50565.roa (raw, json)
Hash identifier: ZMenujHx9MlBGRFMokH7pZ1xtXBeIaOId7KLrfXDJNw=
Subject key identifier: 88:FA:83:35:76:9F:B8:6D:F7:42:63:DE:98:AC:90:96:18:22:3B:3A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 11E1FD0BF0DC8D89B1DFC4763F715CA91E24DA37
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa
Signing time: Mon 20 Jan 2025 19:53:51 +0000
ROA not before: Mon 20 Jan 2025 19:48:51 +0000
ROA not after: Mon 19 Jan 2026 19:53:51 +0000
asID: 50565
IP address blocks: 86.38.184.0/24 maxlen: 24
89.116.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e1:fd:0b:f0:dc:8d:89:b1:df:c4:76:3f:71:5c:a9:1e:24:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 20 19:48:51 2025 GMT
Not After : Jan 19 19:53:51 2026 GMT
Subject: CN=88FA8335769FB86DF74263DE98AC909618223B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:e9:22:bc:56:c3:27:61:10:1c:bd:02:2c:
a3:95:6d:f9:57:7f:96:57:db:6c:3d:74:56:89:a5:
68:ac:c4:87:6f:d3:bd:99:eb:2c:d9:ba:c5:ba:9e:
af:06:ae:7f:de:6e:1e:3f:5f:9c:dd:2e:5a:6c:79:
97:75:f0:d6:82:f0:d7:da:21:ed:39:7d:1a:25:00:
69:6e:dd:4c:d6:d8:40:fc:e1:74:89:a3:e3:7b:95:
2f:bf:ce:ed:45:a8:ed:4b:b5:b1:ba:05:36:4f:84:
94:5b:3d:b9:47:4c:7d:36:ad:ce:6b:77:78:22:fb:
05:c3:b8:a0:1d:fd:97:e6:92:16:de:f7:85:8a:51:
8a:98:14:4d:68:a2:bb:83:70:db:93:b6:c0:68:05:
7e:79:8d:1b:d8:f1:b5:2e:ce:ec:53:12:ed:68:f7:
07:99:85:05:d9:5d:d8:8e:c0:ea:be:ec:83:b3:c1:
96:1c:25:0e:28:18:31:34:ed:a9:ca:2a:4c:e4:2d:
b2:67:de:b9:14:32:3e:b0:9b:44:a3:52:cd:d7:06:
37:21:60:1c:5f:18:5d:cc:70:08:32:eb:52:30:cc:
83:f9:a0:5b:67:c5:76:2c:6e:14:ec:3e:44:11:f0:
93:c3:b3:86:ed:d5:7f:dd:56:b8:bc:f0:4d:74:00:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:83:35:76:9F:B8:6D:F7:42:63:DE:98:AC:90:96:18:22:3B:3A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.184.0/24
89.116.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:14:55:96:42:09:60:eb:a4:f7:45:ef:3d:98:5b:11:df:ad:
4d:11:08:66:33:c3:cc:b7:af:95:b1:45:24:0d:69:ae:62:cf:
e4:45:4c:dd:c4:13:de:20:b1:43:eb:cd:78:32:65:9f:60:92:
a2:3b:95:96:cb:52:7d:ea:22:8c:d3:81:53:bd:37:7b:6c:b6:
47:2a:57:05:f0:9f:6e:b9:1d:9e:20:a6:db:79:65:d9:36:22:
e8:d2:8e:98:f1:a9:cb:af:84:8a:1d:14:42:32:ef:93:d6:0c:
8c:b0:97:34:9d:cb:3c:90:a4:c8:28:92:0c:1e:bc:80:aa:d8:
c7:01:18:26:e5:46:d6:4d:37:e2:cc:32:38:1a:0e:a7:27:85:
fc:70:d8:8b:6a:38:e1:67:00:f9:01:30:d3:70:75:96:f2:b0:
a4:c9:a0:e2:d6:d2:48:5c:f8:6b:9f:08:a4:32:b2:61:39:e3:
90:5d:c5:aa:b3:2a:38:60:d7:00:03:c8:0a:29:50:fc:c4:d4:
3e:cb:ad:18:fa:cb:ca:59:69:7c:c0:11:fe:8b:65:1e:d8:db:
63:81:a9:a4:30:00:d9:04:d9:f1:77:4c:c1:88:03:d0:34:cc:
64:b9:88:11:62:a1:d8:89:66:d8:a9:d0:1e:8f:95:a2:d6:12:
10:53:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:36 2025 by rpki-client