Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323037333236.roa
File: 3139332e38342e3131312e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier: /dUHVn0+2Umj0JOAg9JqIlP2jps5/OfDfv4iLIPcCoY=
Subject key identifier: E7:16:AD:AA:59:47:03:A8:EE:F6:76:2C:AF:DB:D6:1D:B3:07:56:46
Certificate issuer: /CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Certificate serial: 68F0AD15110E79392CB95898CC481BB6003848F9
Authority key identifier: 9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323037333236.roa
Signing time: Tue 29 Nov 2022 20:00:07 +0000
ROA not before: Tue 29 Nov 2022 19:55:07 +0000
ROA not after: Tue 28 Nov 2023 20:00:07 +0000
asID: 207326
IP address blocks: 193.84.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f0:ad:15:11:0e:79:39:2c:b9:58:98:cc:48:1b:b6:00:38:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Validity
Not Before: Nov 29 19:55:07 2022 GMT
Not After : Nov 28 20:00:07 2023 GMT
Subject: CN=E716ADAA594703A8EEF6762CAFDBD61DB3075646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:9d:15:80:77:ac:13:00:5b:93:0b:57:65:
b1:38:7f:f3:13:c5:4b:43:8b:ee:bf:54:8a:49:37:
61:25:19:9a:f1:86:07:82:50:34:3c:cc:2e:33:f9:
8e:7a:35:52:e7:48:80:e9:7d:f8:90:53:64:44:fb:
c4:5c:f1:03:86:56:c9:5c:6c:8b:10:ef:0e:c2:29:
71:25:9d:b3:7a:0b:1b:25:d5:1f:57:9f:4f:2a:f0:
16:6a:60:f0:87:f8:4a:ce:89:93:d8:01:01:99:5a:
7d:2d:b1:1f:3d:eb:19:a0:66:2b:01:a1:73:52:5c:
d5:34:fa:f4:cc:87:8a:10:47:7e:72:12:dd:9a:b4:
56:50:eb:0b:8e:da:d4:69:6e:ff:32:f0:06:20:62:
ff:f4:5f:05:ad:ca:95:d0:fd:70:4a:d0:89:9a:50:
22:51:06:22:59:c1:25:92:59:6d:17:2a:48:e3:63:
d3:94:4f:e7:ad:ad:77:70:f8:7c:aa:54:b3:37:38:
94:a3:77:53:6d:84:64:39:d9:70:de:cc:e3:42:6a:
87:f1:fe:36:77:74:45:91:06:16:ab:d9:8c:09:02:
ca:91:02:0d:b5:98:e8:00:f5:36:c2:ce:bc:89:2d:
4c:95:95:b8:ab:65:e9:eb:0f:6b:dd:51:26:d0:01:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:AD:AA:59:47:03:A8:EE:F6:76:2C:AF:DB:D6:1D:B3:07:56:46
X509v3 Authority Key Identifier:
keyid:9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/9C4E1AD14A6020BC070786E9464412EC4918F7EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20323037333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ed:0d:52:0a:05:cb:c1:d2:9c:27:09:92:39:61:72:78:09:
a6:95:da:db:b8:b8:79:be:27:a7:26:91:3c:66:44:91:c0:31:
23:20:41:1b:15:f8:3a:d6:ad:c2:39:5b:a5:e5:8e:b1:34:63:
47:d8:88:de:e9:5d:5f:fc:f2:f0:da:03:be:b7:f5:3e:9e:80:
c1:4d:41:43:68:f2:33:c7:bf:34:4c:0f:0c:32:59:d6:41:c1:
36:82:a0:de:b1:de:64:84:9c:d2:c4:c3:b4:bd:0b:6d:9a:ca:
48:d0:b9:f0:db:d7:9b:73:47:ea:24:20:48:81:1b:6c:ef:a9:
cf:bc:a0:3a:29:ca:fa:e6:f3:c5:43:bb:ae:ae:86:85:ff:4f:
f9:83:f7:f3:4c:1f:1c:3a:4c:5d:8c:8d:c0:d4:18:23:d0:74:
f1:49:fd:a2:7f:59:a9:97:4d:97:11:1a:89:a1:2d:be:64:2f:
b2:73:56:a5:0d:4e:80:ee:60:79:f1:8e:91:16:c2:f9:7e:7c:
47:1c:d5:e8:d4:3f:f7:f4:fe:89:0f:78:49:78:6a:01:d3:30:
87:ec:27:77:ef:22:73:5e:e1:83:e6:6f:02:7f:bc:9f:e3:b7:
43:fb:f8:55:a0:38:ec:b0:c3:7e:88:94:3c:58:5e:aa:ca:32:
7d:09:62:44
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUaPCtFREOeTksuViYzEgbtgA4SPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWM0ZTFhZDE0YTYwMjBiYzA3MDc4NmU5NDY0NDEyZWM0
OTE4ZjdlYjAeFw0yMjExMjkxOTU1MDdaFw0yMzExMjgyMDAwMDdaMDMxMTAvBgNV
BAMTKEU3MTZBREFBNTk0NzAzQThFRUY2NzYyQ0FGREJENjFEQjMwNzU2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaZ0VgHesEwBbkwtXZbE4f/MT
xUtDi+6/VIpJN2ElGZrxhgeCUDQ8zC4z+Y56NVLnSIDpffiQU2RE+8Rc8QOGVslc
bIsQ7w7CKXElnbN6Cxsl1R9Xn08q8BZqYPCH+ErOiZPYAQGZWn0tsR896xmgZisB
oXNSXNU0+vTMh4oQR35yEt2atFZQ6wuO2tRpbv8y8AYgYv/0XwWtypXQ/XBK0Ima
UCJRBiJZwSWSWW0XKkjjY9OUT+etrXdw+HyqVLM3OJSjd1NthGQ52XDezONCaofx
/jZ3dEWRBhar2YwJAsqRAg21mOgA9TbCzryJLUyVlbirZenrD2vdUSbQAb8jAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU5xatqllHA6ju9nYsr9vWHbMHVkYwHwYDVR0j
BBgwFoAUnE4a0UpgILwHB4bpRkQS7EkY9+swDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
N2JiYWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTAvMC85QzRFMUFE
MTRBNjAyMEJDMDcwNzg2RTk0NjQ0MTJFQzQ5MThGN0VCLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvbkU0YTBVcGdJTHdIQjRicFJrUVM3RWtZOS1zLmNlcjCBpgYI
KwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3
YmMzLTAvMC8zMTM5MzMyZTM4MzQyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMyMzAzNzMzMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFUbzANBgkqhkiG9w0BAQsFAAOC
AQEAje0NUgoFy8HSnCcJkjlhcngJppXa27i4eb4npyaRPGZEkcAxIyBBGxX4Otat
wjlbpeWOsTRjR9iI3uldX/zy8NoDvrf1Pp6AwU1BQ2jyM8e/NEwPDDJZ1kHBNoKg
3rHeZISc0sTDtL0LbZrKSNC58NvXm3NH6iQgSIEbbO+pz7ygOinK+ubzxUO7rq6G
hf9P+YP380wfHDpMXYyNwNQYI9B08Un9on9ZqZdNlxEaiaEtvmQvsnNWpQ1OgO5g
efGOkRbC+X58RxzV6NQ/9/T+iQ94SXhqAdMwh+wnd+8ic17hg+ZvAn+8n+O3Q/v4
VaA47LDDfoiUPFheqsoyfQliRA==
-----END CERTIFICATE-----
Generated at Thu May 8 22:59:39 2025 by rpki-client