Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: 3HySyVUNKyIOgs0gbKzW93FJpxopR3GTmnFpxfEfXVY=
Subject key identifier: F7:85:12:86:44:AA:13:F9:D6:80:1F:92:E0:E8:70:DF:11:4E:3B:8C
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 2AA7F73896BED5DB5722195217A25E7CB434E1DC
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS1239.roa
Signing time: Fri 25 Nov 2022 00:15:39 +0000
ROA not before: Fri 25 Nov 2022 00:10:39 +0000
ROA not after: Fri 24 Nov 2023 00:15:39 +0000
asID: 1239
IP address blocks: 179.61.164.0/24 maxlen: 24
179.61.173.0/24 maxlen: 24
191.96.31.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
191.101.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a7:f7:38:96:be:d5:db:57:22:19:52:17:a2:5e:7c:b4:34:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 25 00:10:39 2022 GMT
Not After : Nov 24 00:15:39 2023 GMT
Subject: CN=F785128644AA13F9D6801F92E0E870DF114E3B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:ff:eb:e1:97:3f:94:47:f0:e7:f1:58:bc:
49:d8:79:4f:e7:2c:f2:be:60:84:d9:a4:d0:27:58:
80:b9:f5:e4:43:58:0d:e7:ab:da:0d:4c:74:6d:6b:
8d:02:18:f3:cf:b2:58:f9:f7:0d:55:96:6a:49:34:
e1:4a:d1:92:12:e1:b2:3d:41:e5:3c:e3:24:8a:a3:
ed:ce:4b:6e:70:1e:0d:c5:ce:23:bc:04:42:6d:2d:
08:72:18:c5:0e:4e:47:a8:5a:8b:03:06:80:65:ab:
e9:53:e4:f2:1c:44:3c:6b:cf:19:b6:09:e3:85:7d:
cf:fd:35:96:82:9e:18:60:d4:23:8c:18:28:d2:f1:
95:f7:a8:ad:86:64:5f:25:7a:76:dd:a2:2b:a7:d6:
96:21:3e:af:92:3e:ea:2f:78:81:3e:e2:26:d6:8b:
5b:7f:d2:ff:0e:57:54:77:47:35:ad:b2:c8:ae:2f:
6e:bc:14:44:93:d2:5c:ca:c0:8f:67:ac:43:2f:00:
66:aa:b3:04:1b:25:5c:33:e7:83:e6:b4:56:ee:2c:
d8:bd:c4:0a:d8:0f:e6:31:95:31:34:d6:8e:a0:c0:
c0:69:8b:e4:fc:f2:e7:55:08:d9:e5:1c:d7:32:10:
52:0e:6b:3b:cb:8a:ca:ec:ad:45:4e:a7:7d:1f:bb:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:12:86:44:AA:13:F9:D6:80:1F:92:E0:E8:70:DF:11:4E:3B:8C
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.164.0/24
179.61.173.0/24
191.96.31.0/24
191.96.134.0/24
191.101.202.0/23
Signature Algorithm: sha256WithRSAEncryption
88:09:10:09:88:ad:11:fb:c3:0a:c7:94:ba:c9:5f:2c:41:88:
b2:e2:dc:a0:0a:72:d5:0e:f8:c4:0a:26:9c:68:7e:bd:d4:cf:
10:7b:41:52:fd:08:f6:ad:53:48:b4:79:f5:34:7b:05:9a:38:
44:ee:e4:bc:fc:4c:52:e7:85:e3:fc:87:d0:81:3b:9e:d8:c3:
76:67:b3:cd:c6:40:36:84:c3:9a:90:80:08:8c:29:07:6f:80:
dc:11:68:4b:da:61:f0:2c:d9:e6:64:64:07:3f:73:58:68:6c:
7d:b8:7f:72:fd:f6:3e:98:a8:cc:93:11:ff:be:54:ed:0e:66:
21:3a:e0:a5:38:f3:a5:61:18:71:0a:04:65:18:e3:90:7e:a6:
77:7d:6e:a6:f6:a3:14:36:a7:11:08:6b:cb:57:fe:20:ea:d7:
62:2e:65:d9:de:74:11:ee:46:6b:e2:00:64:23:b0:17:d3:b8:
9d:d5:12:2e:b6:b7:d9:b4:40:99:69:d1:3f:69:56:9c:4c:d1:
f0:cc:29:c9:a7:02:f7:a5:61:a1:c4:88:3b:d4:cd:31:f8:ce:
1b:fb:a3:04:96:84:36:83:58:63:ca:34:3c:04:29:b3:ca:c6:
06:68:3b:45:ec:09:32:a9:3a:da:d0:66:7d:82:32:bb:31:9a:
8b:22:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org