Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
File: 3139332e38342e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: h0x5lcIATIwvVWE2nv917PrUoDyeSH16+dD804mVMDM=
Subject key identifier: 45:30:D1:56:4F:95:A3:CA:DD:34:C2:E4:10:C1:10:C2:A4:37:61:84
Certificate issuer: /CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Certificate serial: 7911B289E26723447E10ABE6363B6319CAF2908B
Authority key identifier: 9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Oct 2022 14:10:58 +0000
ROA not before: Thu 27 Oct 2022 14:05:58 +0000
ROA not after: Thu 26 Oct 2023 14:10:58 +0000
asID: 834
IP address blocks: 193.84.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:11:b2:89:e2:67:23:44:7e:10:ab:e6:36:3b:63:19:ca:f2:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Validity
Not Before: Oct 27 14:05:58 2022 GMT
Not After : Oct 26 14:10:58 2023 GMT
Subject: CN=4530D1564F95A3CADD34C2E410C110C2A4376184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:da:9b:82:30:40:c5:91:97:2c:da:03:d7:
b1:4d:c6:e5:82:91:48:15:fb:35:20:ae:e9:46:33:
b1:e4:56:96:bb:c8:7e:dc:fc:45:4e:5e:fe:91:f1:
30:ee:3e:da:ea:5e:ed:58:6b:d3:5a:cc:6c:d6:9b:
ff:1b:41:a2:45:08:d0:15:81:da:8a:83:fe:5c:2f:
21:e8:2b:b5:14:ae:ad:20:14:4c:21:8e:eb:bc:4e:
67:75:d9:97:2c:4e:2f:7a:1f:14:0d:b4:dd:5f:89:
67:b5:f4:b4:6b:ef:62:98:9e:b0:f7:d4:f9:fd:45:
d1:7b:7a:b9:90:75:5a:12:f9:91:6e:82:14:ad:3f:
81:d8:6b:b4:9b:cf:dc:ea:38:45:f8:61:d5:56:b5:
e6:ef:81:7f:fa:64:eb:2c:26:18:6c:2c:41:d1:9d:
7d:ce:68:b4:1d:ac:6c:0e:eb:65:66:85:62:30:d8:
db:3a:cc:fe:4e:21:03:d4:7d:ee:b0:10:a2:3f:80:
9a:f5:5d:0d:14:58:b4:49:58:cb:f1:ce:fd:fc:5c:
88:63:3f:36:db:42:81:8e:a1:42:d6:00:26:ef:79:
da:fa:e3:24:ec:c7:38:dc:c2:bc:9b:ed:2a:db:a4:
2b:fa:0f:90:15:37:1e:fa:6f:62:f3:16:db:b7:41:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:D1:56:4F:95:A3:CA:DD:34:C2:E4:10:C1:10:C2:A4:37:61:84
X509v3 Authority Key Identifier:
keyid:9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/9C4E1AD14A6020BC070786E9464412EC4918F7EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:27:3b:78:9e:4d:4c:14:a4:86:8d:f3:84:66:78:50:89:f0:
8c:78:af:5b:30:64:a7:b3:ac:a0:fb:52:30:f6:45:79:d1:0e:
1e:c0:6e:d5:a0:2e:68:d0:d4:f7:e3:e5:ef:bc:28:f3:59:89:
6b:1b:1b:d8:0a:32:cb:3f:05:89:3c:8f:04:7b:61:a1:1d:c0:
d0:09:91:d9:99:9c:75:61:3f:c4:57:b4:d8:02:d9:a7:0d:e0:
c3:83:d6:d6:4f:05:8b:01:2a:cb:7d:2a:1f:c7:e5:f9:1d:85:
de:1a:64:26:9d:ff:99:0e:83:1a:d6:a0:30:10:8a:1e:ec:65:
97:73:c0:88:39:5e:b3:a4:e3:89:19:db:01:19:20:14:54:32:
8b:e4:06:d3:11:e5:8e:02:22:b9:bc:75:b4:2c:88:34:58:89:
72:a6:9c:ac:c3:be:8e:3c:58:a5:1c:30:1c:d1:f0:51:6b:00:
00:9a:f7:0e:74:4c:ed:69:93:8a:68:b0:2e:7d:d9:9e:14:9a:
38:5d:bf:18:9c:12:02:39:c1:d4:6e:67:32:fc:dd:db:e7:6e:
f9:7f:e9:30:98:6a:4c:ce:9c:e1:66:df:29:3f:58:2d:d2:67:
52:e5:23:d2:6a:fc:4e:cf:fb:eb:11:10:f9:c6:f5:b2:bb:22:
f7:e1:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:10:46 2025 by rpki-client