Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa
File: 352e38332e3231392e302f32342d3234203d3e20313939363134.roa (raw, json)
Hash identifier: 2Wtt/lW4SXo5PeW03SMtiO54PNwAjlL33RwBmYsNpDQ=
Subject key identifier: EE:A9:20:71:FC:D9:8B:3B:C2:48:5D:8F:3E:18:1D:94:B3:F4:38:F6
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 20B879EF8F64AE08561EE0B99969BC80FAC4C71B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa
Signing time: Sat 08 Feb 2025 20:53:53 +0000
ROA not before: Sat 08 Feb 2025 20:48:53 +0000
ROA not after: Sat 07 Feb 2026 20:53:53 +0000
asID: 199614
IP address blocks: 5.83.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b8:79:ef:8f:64:ae:08:56:1e:e0:b9:99:69:bc:80:fa:c4:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 8 20:48:53 2025 GMT
Not After : Feb 7 20:53:53 2026 GMT
Subject: CN=EEA92071FCD98B3BC2485D8F3E181D94B3F438F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:6e:36:be:80:16:ed:55:1b:59:04:ff:fb:
37:77:d9:0c:dc:d5:9d:86:0d:d4:6c:4c:5b:53:5e:
15:c3:b2:a6:f4:31:b2:20:dc:71:c6:8b:d4:37:24:
34:ea:05:04:ab:77:b5:c8:78:65:57:0a:2d:ff:74:
ec:93:4b:43:2d:fa:47:a0:bf:b3:41:82:c1:dc:ac:
f7:77:98:be:7c:55:df:fa:a8:b2:3e:67:f8:f2:e9:
f3:6b:75:ea:ab:49:aa:7c:5b:0b:d1:b8:34:fe:cb:
9a:c7:74:ce:03:07:37:7b:03:9d:42:2a:de:7f:52:
cd:35:35:fe:50:e8:ae:db:17:0d:c7:fa:69:a8:0a:
7b:bf:03:bf:4d:d5:24:6c:92:24:17:1d:38:eb:0e:
76:ca:71:90:06:64:00:45:66:b8:5c:40:e6:77:14:
78:3a:6d:29:f3:d1:42:f8:fa:67:6f:39:12:0b:c1:
ed:0d:1e:0a:2d:17:3e:71:4f:bc:56:7b:9d:89:cf:
29:ea:a5:35:6e:61:22:19:d1:21:54:ed:98:5e:49:
be:28:49:67:2a:2a:6e:42:ae:fa:b0:dc:5b:5e:79:
29:fd:fe:85:31:dd:e5:d5:49:39:ac:57:d7:f3:70:
d9:16:83:d4:d3:88:f4:5c:b7:ed:d7:fc:9a:f6:b8:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:20:71:FC:D9:8B:3B:C2:48:5D:8F:3E:18:1D:94:B3:F4:38:F6
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5e:a3:e8:71:59:fc:17:47:14:5e:68:91:c3:bb:78:60:11:
1a:03:3e:e3:d5:0c:ae:cd:af:de:b2:78:cd:09:da:61:b8:fa:
ad:be:ff:bf:10:1c:3c:16:f7:c9:6a:d4:2a:81:af:30:82:f8:
8a:35:73:07:69:6e:d4:c1:76:b8:e3:8c:7f:65:ce:fc:fa:67:
27:c9:ef:4c:cb:3e:b9:96:35:55:34:b5:11:2a:0d:27:6f:7b:
af:c2:72:e8:15:97:8a:33:0e:8b:a1:ba:30:82:4f:6d:a8:14:
11:3d:57:dd:17:48:28:f3:b2:72:23:2e:df:aa:3c:47:21:d9:
65:d9:fa:1c:cb:6f:d7:ec:03:e3:25:a4:86:68:5b:b1:21:7a:
d0:1a:d4:e9:3c:47:8e:24:66:6d:bc:55:68:b4:13:0c:1c:ee:
2a:48:0c:3d:1e:75:ae:83:2f:77:3f:16:60:60:cc:a6:32:1e:
87:9e:ee:7c:23:42:b9:4b:ed:16:e5:9e:ab:eb:2b:d5:d5:d3:
07:9e:92:b0:a8:85:3b:41:e0:43:82:00:24:68:61:81:0a:de:
49:c5:86:59:06:0d:3a:45:ef:e4:01:49:76:97:6b:95:ee:93:
89:ff:58:8b:6f:5e:a6:de:04:47:3e:6b:9b:12:67:7b:e5:7e:
c2:8a:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:06 2025 by rpki-client on console.sobornost.net