Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
File: 33372e312e3232342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TLUmVL7hoB/SsnbZ119I//0l1Dt51RWNHHHNbJZZCmE=
Subject key identifier: 27:47:CE:DF:E5:B7:D1:F7:22:1C:E8:45:06:F2:7B:AB:81:30:DF:15
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 11EB7EB086BCA61AB95439ABAD0A285F1CBFBCAB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
Signing time: Tue 08 Apr 2025 00:05:00 +0000
ROA not before: Tue 08 Apr 2025 00:00:00 +0000
ROA not after: Tue 07 Apr 2026 00:05:00 +0000
asID: 834
IP address blocks: 37.1.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:eb:7e:b0:86:bc:a6:1a:b9:54:39:ab:ad:0a:28:5f:1c:bf:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 8 00:00:00 2025 GMT
Not After : Apr 7 00:05:00 2026 GMT
Subject: CN=2747CEDFE5B7D1F7221CE84506F27BAB8130DF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:32:a9:b7:2f:de:22:65:11:b8:49:09:8c:
de:ad:1f:1a:16:00:d7:24:6f:0e:98:d2:a9:b2:73:
e4:19:a8:48:74:98:72:4a:06:4e:2f:7c:22:96:38:
76:e5:6a:2e:9b:df:71:7d:bf:43:58:9a:77:02:6f:
eb:2a:c8:7c:5f:cf:b2:26:76:d0:a0:67:54:ce:cb:
22:fd:a8:44:c8:f7:1d:48:6a:8e:96:f1:4f:ad:8f:
88:df:ce:a8:5d:19:3f:63:15:6e:f3:3d:e7:5c:51:
b5:c6:b9:6a:4a:41:0b:69:97:12:99:84:0e:7f:10:
91:ab:75:20:00:6c:58:97:22:c5:9c:5f:bf:e2:fc:
20:e6:5f:dd:ff:59:36:04:1d:94:60:54:e3:fd:bf:
c2:78:dd:5d:29:e1:bf:8e:34:65:13:f7:b6:07:88:
e4:91:20:b9:e7:e1:27:40:95:89:ad:9e:14:dc:08:
fd:ea:ab:66:74:62:ca:a8:5f:4d:4c:99:de:a9:26:
ef:d6:62:c9:71:0c:d6:9d:ba:4e:f8:d8:12:72:26:
5e:7b:b7:07:4f:3e:2e:aa:c7:52:3c:79:c3:0a:82:
6f:b5:a6:5b:f9:e9:47:24:ad:a6:a9:d6:6c:94:23:
25:d1:35:1d:eb:61:60:05:be:c5:98:43:34:6c:cf:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:CE:DF:E5:B7:D1:F7:22:1C:E8:45:06:F2:7B:AB:81:30:DF:15
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:74:f5:8f:78:6e:1c:96:36:50:6b:29:e8:eb:82:60:d5:de:
43:55:46:49:b3:c0:ce:51:4c:54:eb:8f:b4:ce:ee:ac:6d:6a:
14:8f:f1:09:eb:2f:30:f4:b0:6c:cb:4e:ad:5b:09:e9:09:c6:
bb:a8:66:51:71:83:0f:cd:a2:b4:25:aa:0b:d2:e6:de:08:17:
b9:b6:95:ae:19:8a:9f:dd:b2:d8:22:77:22:d8:4a:69:d2:c5:
8e:e9:61:90:f2:0d:75:f5:8b:85:e7:ce:a5:ed:9d:54:60:dd:
e7:62:a5:23:b1:06:e8:13:84:48:89:95:d8:fd:26:06:fa:df:
0c:c8:be:7c:80:1e:77:79:6d:f7:6d:9d:77:3d:c3:ac:d9:49:
5b:b0:a9:bc:70:6e:d7:d7:33:89:c6:cc:a8:20:50:1a:c0:72:
28:e4:03:fd:f4:61:94:75:c5:6c:92:43:6d:cf:c6:ce:c6:04:
bf:3b:cc:32:2e:1f:50:c4:bc:1a:62:2c:42:8c:76:4c:0c:bc:
dc:0b:c4:a4:e1:14:11:d4:12:3d:6b:0a:2b:8e:6c:de:d1:cf:
ff:1f:dc:5d:bd:18:73:6a:aa:aa:f3:12:24:dd:69:15:51:91:
d0:a6:19:6f:ec:db:7c:11:71:93:8f:ba:3c:97:03:96:74:33:
67:fa:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:06 2025 by rpki-client on console.sobornost.net