Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 3wz0FWs+zlVhPt86z+4O7RfqgFVKlzO+O4p7lYDlkTA=
Subject key identifier: 11:B6:4D:1A:FD:93:79:76:50:00:7E:A6:F6:DF:6B:E5:2E:A9:5C:18
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 46B4551806D09A08925B4FE3146A474F22001041
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
Signing time: Sun 13 Apr 2025 00:02:02 +0000
ROA not before: Sat 12 Apr 2025 23:57:02 +0000
ROA not after: Sun 12 Apr 2026 00:02:02 +0000
asID: 212238
IP address blocks: 82.140.182.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.237.0/24 maxlen: 24
84.46.238.0/24 maxlen: 24
86.38.5.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.180.0/24 maxlen: 24
86.38.181.0/24 maxlen: 24
86.38.219.0/24 maxlen: 24
86.38.247.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.116.65.0/24 maxlen: 24
89.116.66.0/24 maxlen: 24
89.116.67.0/24 maxlen: 24
89.116.75.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.183.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.13.0/24 maxlen: 24
89.117.41.0/24 maxlen: 24
89.117.95.0/24 maxlen: 24
89.117.97.0/24 maxlen: 24
89.117.98.0/24 maxlen: 24
89.117.99.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.121.0/24 maxlen: 24
89.117.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:55:18:06:d0:9a:08:92:5b:4f:e3:14:6a:47:4f:22:00:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 12 23:57:02 2025 GMT
Not After : Apr 12 00:02:02 2026 GMT
Subject: CN=11B64D1AFD93797650007EA6F6DF6BE52EA95C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:a2:56:eb:56:f9:6e:98:df:20:7c:0d:e6:
5a:4b:52:b5:56:4d:82:12:8b:8a:2b:61:0a:d0:46:
13:98:01:16:ba:6c:c4:81:30:87:99:9d:46:7c:ad:
b8:a8:60:e3:9d:d0:af:cf:85:6e:1e:cb:4f:60:ad:
f6:bf:eb:b0:a0:dc:c8:ae:00:ab:6d:f6:f0:f9:64:
9c:64:dd:b2:c0:63:f9:b6:21:f2:cb:01:ea:89:17:
41:bf:1a:b2:bc:cf:f4:c7:c6:bb:cf:8a:5b:10:cb:
ba:2c:41:98:dd:82:91:41:e6:d8:c6:70:aa:90:d2:
bf:12:3c:74:5a:63:b4:a0:61:cd:2b:7c:0b:e7:5d:
a0:12:08:18:f3:2e:0e:8b:8c:24:e8:74:9c:71:a6:
e0:21:bf:48:76:3c:04:18:80:a3:87:36:7c:20:e2:
d3:45:b1:61:ba:68:5e:ba:4a:82:00:d5:ad:c6:40:
6e:66:c7:56:7d:7b:c7:c3:87:82:22:9c:04:a7:ba:
33:35:e8:14:5b:89:f3:2b:f4:fd:9a:c5:ee:75:96:
9a:53:bb:5c:d7:5f:4a:7d:fd:5e:fe:ed:6b:54:4d:
91:4c:50:6d:19:4b:ff:f0:70:66:88:a3:35:12:64:
44:aa:5f:16:ff:f9:59:e2:7d:25:ac:1c:6d:00:03:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:4D:1A:FD:93:79:76:50:00:7E:A6:F6:DF:6B:E5:2E:A9:5C:18
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
84.46.237.0-84.46.238.255
86.38.5.0/24
86.38.177.0/24
86.38.180.0/23
86.38.219.0/24
86.38.247.0/24
89.116.56.0/24
89.116.65.0-89.116.67.255
89.116.75.0/24
89.116.103.0/24
89.116.168.0/23
89.116.183.0/24
89.116.255.0/24
89.117.13.0/24
89.117.41.0/24
89.117.95.0/24
89.117.97.0-89.117.99.255
89.117.109.0/24
89.117.111.0/24
89.117.121.0-89.117.122.255
Signature Algorithm: sha256WithRSAEncryption
d3:95:47:62:ea:ef:98:5e:e2:17:82:be:8b:b7:a6:23:0e:f5:
53:da:46:7c:95:63:93:91:51:b0:32:fb:a9:3b:fc:d4:91:54:
2f:73:06:92:cd:27:04:8c:3b:9d:5d:66:f5:5f:42:84:77:81:
ba:6b:50:c2:61:ed:b1:2e:6c:32:fc:10:fd:2e:71:4a:f7:52:
a8:03:9c:67:23:b3:c1:eb:3e:30:7b:00:65:94:8e:a1:fb:70:
8d:b5:e3:c1:bb:e4:4c:86:99:c9:d2:60:24:b6:4f:d3:10:d5:
06:5b:54:67:cd:0a:43:91:05:f4:e3:bc:a0:9b:cf:a1:e8:bf:
d2:94:54:bc:d6:7c:bc:08:2c:ca:f2:8e:34:4c:97:9a:1b:d4:
1d:2d:c5:72:f6:0c:5a:d6:fc:c6:5c:be:ea:1b:b8:71:e1:48:
3a:47:0d:ba:0e:31:db:b9:2b:0f:50:6d:8d:41:d5:5e:7f:76:
61:9a:e2:c0:87:5d:de:d5:00:8e:82:29:9e:41:c6:78:3f:3e:
ea:d3:48:7f:bb:f7:26:ba:b2:c2:bd:30:08:f2:a3:53:ba:5b:
35:fc:16:6d:17:f9:ad:78:55:db:bd:ab:d9:eb:ed:05:14:5c:
90:2e:2d:93:24:ac:97:86:e3:72:af:92:78:8c:9f:97:a3:2f:
df:73:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:06 2025 by rpki-client on console.sobornost.net