Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135752.roa
File: AS135752.roa (raw, json)
Hash identifier: ZjjD1A349hKfGShUhBR+VqN+37VgEBwMbEuTYnEyj8w=
Subject key identifier: 9E:0B:40:37:A0:44:67:61:6A:B4:DF:DA:91:6E:FA:4C:EA:71:C9:9D
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 7915885A766E4531B421DB877F7B99E525A16857
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135752.roa
Signing time: Fri 11 Nov 2022 18:17:22 +0000
ROA not before: Fri 11 Nov 2022 18:12:22 +0000
ROA not after: Fri 10 Nov 2023 18:17:22 +0000
asID: 135752
IP address blocks: 191.96.129.0/24 maxlen: 24
191.96.234.0/24 maxlen: 24
191.101.19.0/24 maxlen: 24
191.101.28.0/24 maxlen: 24
191.101.69.0/24 maxlen: 24
191.101.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:15:88:5a:76:6e:45:31:b4:21:db:87:7f:7b:99:e5:25:a1:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 11 18:12:22 2022 GMT
Not After : Nov 10 18:17:22 2023 GMT
Subject: CN=9E0B4037A04467616AB4DFDA916EFA4CEA71C99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:27:65:73:ee:3b:59:19:4c:08:f8:a9:5a:
f0:21:ba:1b:4a:ed:b2:94:9b:fd:cc:91:c4:be:42:
51:89:00:eb:65:e2:2f:51:f6:37:8c:58:09:f6:5f:
0b:54:2c:f2:50:63:d8:90:ec:3c:d1:b2:46:8e:2d:
06:62:21:0e:84:3f:00:87:80:8d:85:8a:c0:a6:a2:
98:5e:81:cf:14:8c:06:6f:60:1c:17:b0:c3:f7:ef:
ee:f3:81:03:be:fa:5b:7a:33:ed:bc:13:fe:40:49:
ad:5e:e7:16:3f:1a:15:35:9b:75:e7:46:5a:f9:b8:
7a:3a:2f:d3:a6:19:44:2e:6a:78:ec:b9:e2:04:c3:
fd:e4:47:00:c8:de:ea:db:9a:fd:14:c8:d4:ab:6a:
16:a3:a7:b3:78:ae:fb:a5:f2:5f:b4:6c:32:e4:70:
9f:49:88:7e:02:6e:06:8c:e0:5a:ad:99:36:e2:99:
3d:af:ee:c0:df:72:07:1e:ea:c3:d7:3b:57:fe:07:
db:be:9f:5f:80:d1:29:ce:68:f9:54:97:7d:0a:8b:
d1:13:6a:21:0b:53:0f:dc:06:ed:40:5d:07:94:95:
a3:67:1e:4a:48:c6:63:85:a4:ad:fa:c0:1b:b9:16:
c0:3d:94:9f:8d:ec:b9:96:49:96:a8:67:e9:9d:7c:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:40:37:A0:44:67:61:6A:B4:DF:DA:91:6E:FA:4C:EA:71:C9:9D
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS135752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.129.0/24
191.96.234.0/24
191.101.19.0/24
191.101.28.0/24
191.101.69.0/24
191.101.86.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6a:1b:97:2d:0f:59:19:e7:9b:92:88:59:da:42:49:b1:12:
ee:d9:69:f2:0c:09:78:9c:0c:36:68:5f:09:08:b5:ea:74:0c:
f9:14:5f:d0:e3:6d:cb:b6:1a:0c:a4:e6:1a:a8:5b:4f:d4:b9:
ca:76:8c:4c:bb:d7:2c:64:9e:22:57:8b:63:4d:b3:2a:6f:ea:
8c:07:3e:6f:51:06:72:a3:f9:d5:b6:30:db:b1:37:8f:9d:85:
ef:a2:6f:ed:3a:ac:dd:1c:b8:48:fc:6e:74:30:5a:30:d2:d1:
a1:39:b5:f0:5c:d2:e8:ef:b6:69:5d:74:d0:60:a3:46:27:e4:
b8:3b:dd:74:1b:cb:dc:d5:cc:c0:ef:57:ad:0b:ed:36:3c:cc:
39:8e:7d:a9:b3:79:02:a5:7a:f0:a5:df:63:d9:5b:b0:3a:0e:
ae:c7:a1:40:6d:fc:13:3c:ee:cd:ae:93:3c:a7:54:3d:ee:f5:
48:3d:53:7c:8d:f9:a4:2e:8b:3f:23:e7:2b:f2:ae:00:6f:d9:
d0:bb:35:39:39:74:19:f9:18:24:29:f1:35:7e:23:a3:c9:88:
eb:fd:11:63:0a:5d:28:fa:3d:d6:e1:47:7b:d2:f7:26:69:54:
72:b1:ff:f2:a4:89:d2:fe:2e:6d:a5:e5:8e:68:54:23:59:ef:
ed:37:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org