Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
File: 33372e312e3232342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: dayI4OqtSjxWLDiLg7CnwdM3r1XtIg1H0lC+3FjhkP0=
Subject key identifier: 1D:31:9B:00:6D:06:3C:62:C5:84:D1:4F:10:C8:22:55:B3:71:80:04
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 13E1534D39DD14C6D8970BD0DD41B2E415805F39
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
Signing time: Sat 31 Aug 2024 00:02:38 +0000
ROA not before: Fri 30 Aug 2024 23:57:38 +0000
ROA not after: Sat 30 Aug 2025 00:02:38 +0000
asID: 834
IP address blocks: 37.1.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e1:53:4d:39:dd:14:c6:d8:97:0b:d0:dd:41:b2:e4:15:80:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 30 23:57:38 2024 GMT
Not After : Aug 30 00:02:38 2025 GMT
Subject: CN=1D319B006D063C62C584D14F10C82255B3718004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:2b:6c:30:b2:84:5d:54:cc:c8:00:7c:e9:
ad:b4:ef:2b:a6:fe:13:11:01:0e:d5:1a:51:16:bb:
10:e5:6e:26:e8:a6:fe:68:4e:75:f8:e2:6b:ff:f8:
c3:cd:24:42:71:36:ad:22:e6:3f:cc:8c:bf:38:69:
0b:d4:3d:31:92:33:2f:a1:47:61:9d:6c:c8:db:97:
e2:5c:5e:9d:6d:c4:3f:91:80:2f:18:b8:09:f9:73:
d8:fe:4a:4a:53:d4:4f:5a:4b:93:ff:26:df:c4:d5:
7f:0b:4c:07:7b:74:93:64:d1:da:fb:f8:f2:3b:86:
b6:3d:3d:f8:22:25:bd:89:60:4f:0c:89:e0:58:51:
ff:4f:9f:ac:1e:23:24:a1:5f:ce:b2:e6:11:ed:d2:
5e:62:19:12:ad:ad:cb:1e:d0:e0:8d:18:4d:d2:2f:
42:7d:98:e0:3a:7e:05:17:30:8c:07:f3:27:58:eb:
08:d7:73:d4:d7:52:69:74:89:a5:d9:5f:93:df:fa:
37:e0:50:46:3e:77:5b:26:1e:7b:ca:ae:b0:02:5b:
45:81:ba:12:4b:b9:74:57:df:4b:71:9e:e3:52:8f:
2e:22:ab:fa:af:32:7e:77:74:b3:a6:3c:05:bf:8c:
4f:e4:35:f3:62:fe:8c:46:00:e5:ee:3f:60:32:95:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:9B:00:6D:06:3C:62:C5:84:D1:4F:10:C8:22:55:B3:71:80:04
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
64:75:b4:5c:08:a3:47:69:f9:11:ae:ee:3b:0c:50:cd:16:7b:
9d:42:7a:53:90:2a:bd:99:0b:32:b6:3b:eb:53:4a:08:fd:7a:
ce:44:9a:74:44:9c:e5:70:1e:b6:e1:bc:e4:89:44:1d:fd:dc:
28:29:7c:2f:6a:52:18:0e:73:55:3c:5b:da:65:b8:e6:07:0e:
41:8b:bc:13:03:ac:5f:02:23:2d:6f:c3:71:f4:ab:e3:19:f8:
77:d0:80:7c:cc:e4:8c:9e:b5:df:78:23:57:5d:ef:a9:c2:b5:
b8:5e:01:bb:63:07:db:d8:ed:7b:19:63:4b:3f:f9:32:7c:66:
11:95:99:88:ec:d9:a5:1b:58:89:4b:84:42:74:43:9b:7b:9f:
ea:97:57:9c:e2:87:11:1a:79:8e:c3:9c:5d:80:bd:72:d6:59:
a7:7a:1f:d5:58:2c:f1:58:ba:76:77:03:d6:5a:67:d6:fe:37:
55:12:3f:9b:1c:ae:c0:77:82:02:88:64:6a:c0:4c:4b:41:47:
8a:b6:2e:52:d0:43:60:ae:cc:87:47:73:63:54:9e:1c:50:e8:
e0:77:22:56:d2:41:f8:6c:b5:a2:e2:3f:af:2a:b1:54:e0:ac:
75:b4:ce:7d:b0:2d:90:01:0a:05:87:9b:52:61:90:fa:7d:92:
09:e0:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:34 2024 by rpki-client on console.sobornost.net