Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3234203d3e20383334.roa
File: 33372e312e3232342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: wfvHPsAKSbQQbuUJzVf+VCdFTVezhzmm/IO6+kEz3ec=
Subject key identifier: 5B:23:80:83:22:F2:7C:90:0E:E2:45:CB:A0:1D:E8:62:7C:0E:21:6F
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 05C81D5FE894552B37C45B23E5FE6F79F0F2E448
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3234203d3e20383334.roa
Signing time: Sat 15 Feb 2025 00:02:16 +0000
ROA not before: Fri 14 Feb 2025 23:57:16 +0000
ROA not after: Sat 14 Feb 2026 00:02:16 +0000
asID: 834
IP address blocks: 37.1.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c8:1d:5f:e8:94:55:2b:37:c4:5b:23:e5:fe:6f:79:f0:f2:e4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 14 23:57:16 2025 GMT
Not After : Feb 14 00:02:16 2026 GMT
Subject: CN=5B23808322F27C900EE245CBA01DE8627C0E216F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:a6:78:1e:94:7f:97:7c:b0:2e:7c:b7:dc:
c2:a9:d3:6f:5a:ed:32:32:3e:e2:6c:bd:92:5a:a8:
b0:92:d8:e8:1e:e8:28:ac:34:d6:bc:5a:17:46:bb:
f5:a6:a8:0d:53:c5:42:22:6a:03:68:88:eb:f4:16:
59:c9:3d:55:5a:26:5f:6f:4a:4b:96:e4:94:1a:04:
d7:0a:70:42:cb:18:82:f0:87:19:37:f7:b6:84:c9:
df:db:14:4b:a2:0b:c6:ce:3f:ac:15:14:9b:1d:b6:
46:b7:73:38:00:23:99:90:1e:3d:e3:d4:78:4f:65:
30:f8:03:a0:ce:39:aa:6a:0f:31:d1:5b:9c:42:f7:
7c:1e:7b:f7:09:5c:ce:5b:98:e3:de:03:20:d3:2e:
d2:42:c3:96:19:c8:f8:ec:41:a5:ba:0d:3a:d6:62:
a5:06:79:8e:5c:5a:0e:83:5c:93:77:c3:d0:27:ce:
5f:56:1e:bc:8a:62:05:77:dd:f9:b9:a5:91:cb:7e:
ca:51:ff:1a:f3:3a:b7:95:a2:c7:76:22:b9:89:c6:
2e:f9:aa:69:14:59:63:91:27:c4:61:0d:99:42:00:
e1:1f:91:21:84:6e:1b:2a:de:53:10:44:e2:f0:be:
e2:7d:47:33:05:8f:f7:84:31:69:17:a6:42:e0:88:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:80:83:22:F2:7C:90:0E:E2:45:CB:A0:1D:E8:62:7C:0E:21:6F
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:fe:7d:c1:f7:81:f0:ee:30:8b:b4:4b:71:01:52:8a:80:6b:
81:6e:00:44:53:b2:4a:3e:ab:2c:21:12:ef:35:28:9d:7b:e6:
83:d4:8c:a1:5d:05:1e:06:aa:57:56:8e:ac:79:d9:69:30:b0:
8d:a6:41:a5:b8:a3:f4:92:20:e6:ef:e9:c4:cf:13:bf:79:b9:
8a:51:68:37:3c:30:9f:91:90:c8:03:b0:6a:22:0a:39:f4:a8:
c8:b9:92:dd:cf:0f:14:86:22:23:22:63:20:ab:96:44:34:cb:
50:8e:82:a6:59:59:af:8e:cd:85:ac:1b:e4:a6:2c:62:4a:ec:
1e:17:33:a9:53:83:63:3e:1c:5a:aa:a7:e7:75:7e:58:97:63:
7c:61:15:51:9c:e8:ec:d7:c3:48:d3:f6:53:f1:3c:bf:93:39:
47:38:40:55:c1:0d:2d:34:bc:89:22:f8:9f:c2:6d:6e:34:dd:
19:91:e7:c0:c1:44:58:9b:81:36:aa:c1:2d:a4:13:07:f7:0b:
9d:aa:d6:60:41:cb:f9:78:4c:f1:f4:48:16:f1:7c:ef:1a:76:
b3:a1:9b:df:19:a2:1e:15:83:fa:e2:13:9f:74:23:d5:48:bd:
2a:25:4e:0f:9c:2c:b7:50:e8:df:f4:0d:aa:61:cb:4a:56:a3:
5e:7d:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:25:40 2025 by rpki-client on console.sobornost.net