Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
File: 352e38332e3139322e302f32302d3230203d3e20323037363435.roa (raw, json)
Hash identifier: VbLAW9rpMB9gq+pl+Mb6UXJ72VfekgTcLixDBG6SrdU=
Subject key identifier: 4C:85:82:7D:60:DA:A6:F0:06:74:70:5D:72:D5:C6:A6:5C:C7:0C:61
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 04573A8787C96CE39751D407047E37F50A47FF51
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
Signing time: Thu 10 Oct 2024 16:43:25 +0000
ROA not before: Thu 10 Oct 2024 16:38:25 +0000
ROA not after: Thu 09 Oct 2025 16:43:25 +0000
asID: 207645
IP address blocks: 5.83.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:57:3a:87:87:c9:6c:e3:97:51:d4:07:04:7e:37:f5:0a:47:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Oct 10 16:38:25 2024 GMT
Not After : Oct 9 16:43:25 2025 GMT
Subject: CN=4C85827D60DAA6F00674705D72D5C6A65CC70C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:f5:6c:9c:54:01:47:f0:4a:25:0f:af:5b:
b6:3a:7b:6d:a2:e5:c7:16:2b:8a:a0:6a:ef:9e:e1:
b0:1b:4e:88:5a:e4:e3:e0:26:b2:e3:bd:63:34:63:
08:3b:c5:22:70:91:2d:8b:94:f1:5c:2d:57:93:b4:
a7:e8:1f:54:84:0b:f7:ad:85:81:d3:c8:41:4f:e4:
69:61:f6:0b:61:1a:29:b0:e8:c5:fc:71:83:8a:c6:
95:4d:b1:77:77:4c:d1:88:17:27:fd:50:f8:74:ad:
1c:f1:14:49:7a:da:59:74:69:7b:1a:59:aa:5a:ef:
55:80:3f:86:13:60:6c:21:eb:eb:ed:c6:82:44:91:
7c:fd:3f:39:02:a3:8b:75:d4:2d:d4:e1:60:cd:ae:
ec:40:2c:00:8b:30:d3:dc:5c:39:98:b3:5b:78:c0:
16:07:d9:1e:8f:b2:28:d7:6c:c8:39:d2:55:42:5e:
e3:62:80:15:28:48:19:fa:93:71:48:48:7e:09:26:
89:1b:67:bc:63:e3:37:c3:fb:fd:8d:ff:54:ef:03:
a6:d0:e8:be:c3:fa:43:e7:88:79:78:91:9f:54:f8:
83:71:31:f3:de:1b:6d:92:7e:37:99:59:37:00:af:
19:7b:5f:9f:97:dd:41:33:c0:b3:54:78:3e:40:f8:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:82:7D:60:DA:A6:F0:06:74:70:5D:72:D5:C6:A6:5C:C7:0C:61
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/20
Signature Algorithm: sha256WithRSAEncryption
80:b9:9f:4f:ef:87:d7:23:7c:42:24:b1:2e:4b:c6:cc:6d:22:
5b:10:35:1b:49:7a:33:55:b1:99:0a:57:6b:e8:93:86:53:2d:
db:5e:68:87:9c:fb:86:86:d5:b0:ae:74:43:6d:9e:3c:22:97:
79:a5:90:c6:80:f2:24:be:8b:ca:3c:fd:38:1d:ee:d3:70:93:
60:6d:b2:83:d6:62:e2:d5:ae:d2:ee:60:36:11:22:ea:0f:78:
88:8d:c8:ac:5e:04:b3:e4:3b:48:39:28:d0:e6:7e:74:b9:4c:
88:43:22:8a:e6:65:e4:35:b8:9e:9e:62:c0:47:ca:90:84:d5:
a9:e8:6b:5c:1d:bc:8b:4e:f4:f3:bc:3b:59:4d:e7:a8:ec:97:
7b:aa:62:89:d0:90:34:57:e6:e7:a6:03:c9:0b:2f:08:53:5b:
90:81:53:cc:e3:4b:fa:6a:20:41:7a:fa:d1:0f:1c:42:df:76:
63:c7:fc:0f:cc:b9:e1:a4:27:fd:c0:27:b1:3c:9d:f7:7b:2b:
94:6e:20:e7:68:3f:c7:a3:c1:7e:9b:bf:5d:48:33:c9:8d:2d:
dc:44:fb:ed:54:f1:82:40:0b:91:af:f3:b1:fb:94:76:15:3b:
68:22:f3:5a:47:1b:3f:ef:35:4c:e6:6a:57:f0:3f:fd:31:19:
2e:30:8d:be
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUBFc6h4fJbOOXUdQHBH439QpH/1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDEwMTAxNjM4MjVaFw0yNTEwMDkxNjQzMjVaMDMxMTAvBgNV
BAMTKDRDODU4MjdENjBEQUE2RjAwNjc0NzA1RDcyRDVDNkE2NUNDNzBDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OfVsnFQBR/BKJQ+vW7Y6e22i
5ccWK4qgau+e4bAbToha5OPgJrLjvWM0Ywg7xSJwkS2LlPFcLVeTtKfoH1SEC/et
hYHTyEFP5Glh9gthGimw6MX8cYOKxpVNsXd3TNGIFyf9UPh0rRzxFEl62ll0aXsa
Wapa71WAP4YTYGwh6+vtxoJEkXz9PzkCo4t11C3U4WDNruxALACLMNPcXDmYs1t4
wBYH2R6PsijXbMg50lVCXuNigBUoSBn6k3FISH4JJokbZ7xj4zfD+/2N/1TvA6bQ
6L7D+kPniHl4kZ9U+INxMfPeG22SfjeZWTcArxl7X5+X3UEzwLNUeD5A+HFjAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUTIWCfWDapvAGdHBdctXGplzHDGEwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMTM5MzIyZTMwMmYzMjMwMmQz
MjMwMjAzZDNlMjAzMjMwMzczNjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQFU8AwDQYJKoZIhvcN
AQELBQADggEBAIC5n0/vh9cjfEIksS5LxsxtIlsQNRtJejNVsZkKV2vok4ZTLdte
aIec+4aG1bCudENtnjwil3mlkMaA8iS+i8o8/Tgd7tNwk2BtsoPWYuLVrtLuYDYR
IuoPeIiNyKxeBLPkO0g5KNDmfnS5TIhDIormZeQ1uJ6eYsBHypCE1anoa1wdvItO
9PO8O1lN56jsl3uqYonQkDRX5uemA8kLLwhTW5CBU8zjS/pqIEF6+tEPHELfdmPH
/A/MueGkJ/3AJ7E8nfd7K5RuIOdoP8ejwX6bv11IM8mNLdxE++1U8YJAC5Gv87H7
lHYVO2gi81pHGz/vNUzmalfwP/0xGS4wjb4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:57 2025 by rpki-client