Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: ncrVHsw3Qnh6Pu9hmQxX7BOBNvUsFQ3UuiGYw3XlRRw=
Subject key identifier: 57:6C:0B:C3:B5:56:6F:4F:28:D1:10:0C:7F:30:B1:6E:A0:19:88:50
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 61D85D298111EEEA6EC1D830B26F1EBEEC9A9ECC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa
Signing time: Mon 27 Jan 2025 14:51:01 +0000
ROA not before: Mon 27 Jan 2025 14:46:01 +0000
ROA not after: Mon 26 Jan 2026 14:51:01 +0000
asID: 7018
IP address blocks: 86.38.187.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.172.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
89.117.104.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d8:5d:29:81:11:ee:ea:6e:c1:d8:30:b2:6f:1e:be:ec:9a:9e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 27 14:46:01 2025 GMT
Not After : Jan 26 14:51:01 2026 GMT
Subject: CN=576C0BC3B5566F4F28D1100C7F30B16EA0198850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:12:c3:1d:e0:7f:43:23:c0:fe:83:87:33:
72:87:82:8a:4d:90:a2:a2:1b:fa:27:ae:c4:45:8d:
91:e7:1a:80:83:02:f8:d6:2a:4a:a1:1c:3a:34:5c:
12:31:58:40:f8:0f:39:ff:2f:b7:0f:36:82:dd:dc:
40:32:13:b2:11:11:6c:a9:fd:6b:03:3d:7a:3f:d6:
bf:0d:f2:8a:ee:84:85:b5:39:64:e7:56:4c:c3:e3:
20:d0:62:41:f3:d5:cd:c8:17:63:31:d9:18:77:d2:
64:e0:55:6f:57:6c:c6:e4:b2:4d:3b:8c:a2:37:93:
4d:33:e1:01:65:ec:3a:5e:5c:38:83:61:dd:5b:81:
83:e6:7e:ec:fe:2a:8d:19:cf:b9:aa:70:77:68:36:
14:11:da:ca:47:ae:40:26:ee:12:bb:37:ea:53:a4:
d8:5c:15:3f:5b:e7:1d:97:4a:ec:c6:12:97:8a:80:
83:ca:0f:9d:23:27:a4:b7:c2:64:55:e2:d6:e5:62:
21:59:c1:db:a3:b5:0a:6f:ad:76:0b:5c:b6:f0:89:
5f:44:c9:b1:f9:5c:4c:fa:53:04:ab:bc:d3:1c:30:
70:66:c2:08:1b:6e:7f:16:8a:91:aa:52:49:34:3f:
5d:01:b6:78:58:62:90:50:bc:07:60:c1:06:47:11:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:0B:C3:B5:56:6F:4F:28:D1:10:0C:7F:30:B1:6E:A0:19:88:50
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.187.0/24
86.38.246.0/24
89.116.141.0/24
89.116.172.0/24
89.116.244.0/24
89.117.104.0/22
89.117.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:63:e2:43:52:55:2a:f0:63:aa:f6:e5:d0:80:9d:e9:18:6c:
3d:ff:c4:3c:ee:51:58:ca:95:13:45:40:3a:8a:e2:bc:be:4c:
97:16:50:4b:fd:81:7f:a2:e8:fb:ec:95:3e:9f:98:79:8f:80:
87:30:8c:c8:27:ec:a6:5b:c1:27:18:e0:fe:3e:72:6c:57:f2:
9d:68:0f:42:0f:eb:3a:36:eb:7f:8c:78:70:1f:c3:7c:ee:c4:
6c:0a:fe:8d:8f:ff:5b:d8:eb:da:ec:48:bf:4f:eb:37:e2:e9:
2b:c5:35:86:e5:de:c9:29:36:d3:59:cf:cc:dd:00:f4:bb:c4:
5a:a6:ea:bc:1e:1a:d2:ad:fe:cd:99:0b:74:54:52:0c:50:60:
a5:f7:ec:cf:06:58:d3:3b:57:e2:69:3b:2a:65:c7:93:8b:46:
cb:e1:51:30:8e:d4:90:0d:f7:2f:c7:1c:02:1d:a2:8f:5d:99:
b7:d1:16:f8:db:cd:9e:ce:27:0f:ca:10:41:9d:7a:1b:ff:fe:
7c:33:57:16:23:b6:2b:8e:36:ef:23:ce:6a:b8:64:52:6b:19:
d4:66:8f:1e:ff:44:ca:a1:83:cf:56:c0:b1:de:eb:13:2f:4c:
4a:6c:98:9e:d3:79:f7:53:6b:71:55:80:e0:bd:27:07:d2:e1:
57:30:cb:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYdhdKYER7upuwdgwsm8evuyanswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTAxMjcxNDQ2MDFaFw0yNjAxMjYxNDUxMDFaMDMxMTAvBgNV
BAMTKDU3NkMwQkMzQjU1NjZGNEYyOEQxMTAwQzdGMzBCMTZFQTAxOTg4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwxLDHeB/QyPA/oOHM3KHgopN
kKKiG/onrsRFjZHnGoCDAvjWKkqhHDo0XBIxWED4Dzn/L7cPNoLd3EAyE7IREWyp
/WsDPXo/1r8N8oruhIW1OWTnVkzD4yDQYkHz1c3IF2Mx2Rh30mTgVW9XbMbksk07
jKI3k00z4QFl7DpeXDiDYd1bgYPmfuz+Ko0Zz7mqcHdoNhQR2spHrkAm7hK7N+pT
pNhcFT9b5x2XSuzGEpeKgIPKD50jJ6S3wmRV4tblYiFZwdujtQpvrXYLXLbwiV9E
ybH5XEz6UwSrvNMcMHBmwggbbn8WipGqUkk0P10BtnhYYpBQvAdgwQZHEcYhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV2wLw7VWb08o0RAMfzCxbqAZiFAwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBABWJrsDBABWJvYDBABZdI0D
BABZdKwDBABZdPQDBAJZdWgDBABZdYEwDQYJKoZIhvcNAQELBQADggEBAE5j4kNS
VSrwY6r25dCAnekYbD3/xDzuUVjKlRNFQDqK4ry+TJcWUEv9gX+i6PvslT6fmHmP
gIcwjMgn7KZbwScY4P4+cmxX8p1oD0IP6zo263+MeHAfw3zuxGwK/o2P/1vY69rs
SL9P6zfi6SvFNYbl3skpNtNZz8zdAPS7xFqm6rweGtKt/s2ZC3RUUgxQYKX37M8G
WNM7V+JpOyplx5OLRsvhUTCO1JAN9y/HHAIdoo9dmbfRFvjbzZ7OJw/KEEGdehv/
/nwzVxYjtiuONu8jzmq4ZFJrGdRmjx7/RMqhg89WwLHe6xMvTEpsmJ7TefdTa3FV
gOC9JwfS4Vcwy94=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:14:53 2025 by rpki-client