Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: 2wj9Fswehn6H5OMP9tSSWnPC/+8/2sLhiZklEMrn7UY=
Subject key identifier: 6E:B4:FB:5C:E4:B3:AE:47:96:55:B9:D7:AE:DC:B6:CF:5E:2C:E3:A7
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 24CDE169D08B69D5F5B98A889037FFAE6EDB6F78
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa
Signing time: Fri 28 Mar 2025 08:16:19 +0000
ROA not before: Fri 28 Mar 2025 08:11:19 +0000
ROA not after: Fri 27 Mar 2026 08:16:19 +0000
asID: 20648
IP address blocks: 86.38.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cd:e1:69:d0:8b:69:d5:f5:b9:8a:88:90:37:ff:ae:6e:db:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 28 08:11:19 2025 GMT
Not After : Mar 27 08:16:19 2026 GMT
Subject: CN=6EB4FB5CE4B3AE479655B9D7AEDCB6CF5E2CE3A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:d5:2a:97:31:17:90:a4:ba:2f:fa:a4:14:
89:ae:f7:fb:6a:1c:4c:82:46:bf:51:46:48:96:79:
ad:03:b7:75:87:b1:b7:e1:1f:8b:5b:bd:0c:4b:2d:
5c:87:d5:be:a4:06:2a:ef:a2:34:b2:9b:9c:95:2b:
a2:1c:ed:f8:ea:19:14:39:77:2a:76:2b:51:c3:e2:
ea:a5:4c:dc:d6:c0:54:ca:f1:88:ed:e1:0c:74:7b:
f1:a1:3b:97:3b:1a:3c:89:33:40:97:05:d1:91:e8:
00:be:db:06:8f:f9:28:43:89:95:a9:da:f9:3a:f8:
f5:70:d0:cd:02:dd:c4:b4:2a:01:96:a4:da:c2:6d:
c8:8f:99:97:a7:54:16:20:23:99:7e:ae:cf:9c:b6:
e9:8d:8e:65:58:c1:40:c9:dc:f0:5b:43:00:2a:6e:
09:8e:69:42:99:aa:f2:6b:4a:e8:ab:4c:4c:bf:23:
0d:2d:21:ed:0b:32:b9:55:88:25:e5:87:e3:43:ac:
45:08:ef:49:4b:23:b3:15:cd:69:32:91:d3:f1:ac:
f0:39:5f:4f:e4:1e:a9:08:f5:6a:b6:ff:15:64:36:
40:a3:ca:e7:e3:a9:b3:7f:3e:8b:f8:9f:09:87:db:
90:0e:46:68:7e:3d:c2:66:1f:5e:e7:8e:03:53:6d:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:FB:5C:E4:B3:AE:47:96:55:B9:D7:AE:DC:B6:CF:5E:2C:E3:A7
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0a:a7:a1:a4:b8:3c:54:bd:51:f3:84:7c:f9:a9:2a:7b:31:
5d:4a:35:16:e8:5e:23:ef:71:ea:3b:3e:93:94:ec:7e:7e:1d:
b3:57:b6:6a:31:94:78:04:a8:5f:12:e6:9e:d7:56:82:55:35:
eb:a5:75:ed:cc:fe:8d:ac:8d:ec:04:2f:fe:fd:cf:ef:2f:d4:
43:28:30:9a:7e:30:81:8c:01:63:70:0d:b7:d7:30:0a:d3:89:
3f:f0:8b:2c:4c:c2:44:05:2a:f7:87:6c:0c:7b:94:f4:0a:31:
97:bc:ba:d3:48:80:fc:23:33:72:3c:ad:a5:24:04:eb:dc:f3:
4f:75:7c:6a:9a:19:47:69:bf:cb:53:fd:0d:7a:bf:6c:46:1a:
20:90:c3:f0:06:33:da:10:2d:8a:01:56:95:c1:f3:b7:b8:26:
4c:f9:50:8a:53:db:ea:96:4a:14:35:21:78:a1:f7:c8:60:22:
b7:2f:aa:8d:e5:b6:56:b3:a1:49:23:75:de:b2:b0:93:4e:12:
a1:0d:45:39:ac:ff:08:34:54:06:22:c9:b3:e4:1f:92:bc:7e:
3a:fd:e4:9f:4a:f2:87:98:88:1a:08:d9:8b:63:26:ef:86:65:
82:7c:12:42:58:de:fa:86:64:e1:8d:51:f5:78:2e:4a:cc:60:
cc:11:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:06 2025 by rpki-client on console.sobornost.net