Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: SqZq386H2pNQKT5lDNExaIemm62EbrFN57RYkjZllmM=
Subject key identifier: 20:F8:C0:1E:C6:3E:92:1C:67:C4:07:ED:29:82:2A:71:32:C3:45:76
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 4D2EE09F4CD8A2C5CAA85285ECE0C86CA7D62469
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
Signing time: Thu 28 Mar 2024 07:53:10 +0000
ROA not before: Thu 28 Mar 2024 07:48:10 +0000
ROA not after: Thu 27 Mar 2025 07:53:10 +0000
asID: 55720
IP address blocks: 89.116.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2e:e0:9f:4c:d8:a2:c5:ca:a8:52:85:ec:e0:c8:6c:a7:d6:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 28 07:48:10 2024 GMT
Not After : Mar 27 07:53:10 2025 GMT
Subject: CN=20F8C01EC63E921C67C407ED29822A7132C34576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:25:21:9d:41:5c:12:b9:05:50:39:90:c2:
d5:c3:97:4f:f6:aa:b2:94:24:12:f6:f0:4c:ee:11:
7d:9e:89:41:81:e9:85:04:86:3d:9a:05:2a:31:98:
74:ff:e1:34:28:f7:0e:d1:68:6c:b2:b5:b1:83:b6:
7d:a1:cf:d9:3d:fa:96:e9:f4:6a:ab:db:39:a4:6d:
49:0d:05:2d:60:c3:94:2d:aa:d3:86:75:48:f5:8f:
71:da:85:f9:5c:8b:64:eb:8f:d7:a9:fb:74:ad:e3:
e1:93:e3:e9:98:3b:dc:51:ca:4d:b1:d3:2e:bb:38:
1e:9f:ff:ed:a2:1e:71:79:aa:b1:f6:25:dd:0b:82:
f6:15:63:57:25:09:49:78:86:b6:24:56:cc:9f:e5:
ef:f5:42:a0:d6:63:20:8e:29:c0:c2:a0:ec:1f:93:
1f:66:9b:19:70:f1:a9:a6:d3:32:7b:b6:9d:bd:43:
74:3e:55:c7:b0:12:68:19:ee:8d:ec:2f:27:19:74:
01:5f:78:ad:ca:27:87:2c:b1:1e:50:05:82:54:d0:
fc:10:5d:7e:ab:82:f7:be:9e:57:a1:6f:9e:a6:55:
0a:b5:8e:8c:e3:5e:85:51:7e:46:82:53:8a:24:c7:
9f:3f:94:fd:7a:4d:ca:de:f2:b1:5d:0a:91:80:c2:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:C0:1E:C6:3E:92:1C:67:C4:07:ED:29:82:2A:71:32:C3:45:76
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a9:0c:67:4a:ba:04:2b:44:f7:c4:d0:17:4f:21:8a:53:2c:
be:cc:86:fd:c5:e3:00:f0:64:74:f0:3b:f6:75:82:06:9c:b3:
70:8b:46:1c:e8:b2:ce:af:30:8f:16:79:04:4a:97:64:b6:58:
4b:4b:91:65:bd:7f:8d:4e:e5:66:c6:9b:cc:94:48:f2:38:f9:
14:34:84:5b:2c:52:5b:f1:69:13:58:67:84:86:61:f6:7f:26:
31:d2:e1:00:9e:2b:47:7d:53:8e:b0:e6:f4:f2:5c:7e:a3:b4:
9d:0a:64:88:1c:d0:f4:4f:91:cc:ec:04:d7:0c:20:2e:06:7b:
b7:50:3f:e3:30:59:07:58:87:52:30:bc:10:3c:9b:96:01:e6:
bf:df:48:d3:a1:59:ce:61:8f:ff:b7:5f:d0:fc:02:ae:f7:33:
74:bd:40:02:89:d6:83:1c:f3:5b:02:2f:92:5e:55:74:8d:1d:
e2:a9:6d:83:7b:71:a5:80:49:cc:a6:7c:93:9e:7e:4d:25:a2:
21:2e:6a:99:0b:9c:3a:dd:f3:d3:c9:1b:d0:0c:f0:54:67:d3:
0f:f7:70:16:b1:66:25:c5:d7:f9:1a:f2:68:b1:f0:f1:81:c4:
85:f0:ef:a4:ca:2b:7b:2d:55:9b:dc:74:11:bd:f8:cb:1c:7e:
9a:8f:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:32 2025 by rpki-client