Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS18345.roa
File: AS18345.roa (raw, json)
Hash identifier: exkXfxKIiG68b7OI6xOlzq0ryVkor3Xe34v8rr4ales=
Subject key identifier: 12:04:A2:49:37:FF:28:FD:2D:C0:FB:01:DE:C3:44:32:0A:B6:5D:77
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 11DA02D96ACB3122E90F789CA6F9377BA6673B34
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS18345.roa
Signing time: Tue 18 Oct 2022 09:39:37 +0000
ROA not before: Tue 18 Oct 2022 09:34:37 +0000
ROA not after: Tue 17 Oct 2023 09:39:37 +0000
asID: 18345
IP address blocks: 181.214.23.0/24 maxlen: 24
181.214.51.0/24 maxlen: 24
181.214.104.0/24 maxlen: 24
181.214.199.0/24 maxlen: 24
181.214.215.0/24 maxlen: 24
191.101.210.0/24 maxlen: 24
191.101.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:da:02:d9:6a:cb:31:22:e9:0f:78:9c:a6:f9:37:7b:a6:67:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Oct 18 09:34:37 2022 GMT
Not After : Oct 17 09:39:37 2023 GMT
Subject: CN=1204A24937FF28FD2DC0FB01DEC344320AB65D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:44:d2:3d:cd:47:45:c1:03:81:74:6e:f3:
1f:44:72:18:cb:63:f4:3a:94:fb:43:51:7a:34:b4:
6a:5c:0e:77:89:3e:a4:f6:51:81:76:72:6f:ed:60:
9c:31:12:73:dd:36:4b:60:96:e6:c4:01:42:49:f2:
b8:17:e2:bc:54:aa:66:3d:57:0b:82:93:e4:3d:9a:
6a:8f:7e:70:8d:f6:2e:1c:8a:eb:5b:e7:fe:86:85:
9c:12:e8:8f:fa:d1:4e:fa:a8:dd:21:1b:f6:5b:fb:
be:09:cc:46:44:a9:49:88:a0:d7:e5:53:92:8a:ed:
07:78:a9:cf:fe:aa:69:d9:6c:b7:f1:4b:18:92:f3:
ba:94:8d:3a:f5:4e:47:5e:16:8d:e5:22:27:04:74:
07:32:a1:17:da:a2:8d:62:df:1f:1d:55:d4:f3:69:
89:67:01:7b:63:a8:e7:2c:cc:c5:f0:6b:2b:20:24:
35:2c:fb:61:0d:f8:f8:0f:24:48:05:d1:3b:d2:e7:
d4:da:dc:6f:27:1a:b1:b7:b1:87:39:5d:f4:5f:e2:
2d:c5:f9:5e:8c:73:4d:79:f4:71:b8:08:ab:b4:0b:
e2:7c:22:a3:d8:69:56:e2:f3:38:25:63:2d:9c:06:
ea:35:e9:93:c6:03:16:40:35:4d:6b:1c:20:b6:30:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:A2:49:37:FF:28:FD:2D:C0:FB:01:DE:C3:44:32:0A:B6:5D:77
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS18345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.23.0/24
181.214.51.0/24
181.214.104.0/24
181.214.199.0/24
181.214.215.0/24
191.101.210.0/23
Signature Algorithm: sha256WithRSAEncryption
02:54:30:1d:5a:9b:ba:a7:19:9c:69:56:78:ba:6a:25:cf:7c:
27:d1:7b:f1:85:29:d1:c2:29:68:bd:65:5e:74:63:f7:7e:8f:
00:62:d7:3f:dc:c5:9c:b8:36:9e:23:1a:d9:68:89:cd:cd:f5:
55:38:41:84:6b:72:72:43:5f:45:75:5a:20:45:30:0c:81:ac:
9e:ba:d1:8f:9e:4a:71:ee:29:60:bf:b5:9a:a5:cd:b7:e4:9c:
c4:9f:a4:a9:5d:6c:40:a5:a2:c1:d3:1d:53:fc:2c:75:05:b7:
b2:81:69:f4:51:ea:db:8e:27:1d:eb:41:66:e6:d4:11:e5:51:
d8:97:13:b9:46:f7:25:d0:f7:cd:7d:34:a7:ff:14:3b:eb:e3:
a8:c3:5d:3f:00:37:0f:5e:11:6c:c0:56:d2:ac:cc:2d:2a:af:
90:7c:fc:3f:f6:47:ef:18:c2:f2:47:4b:e0:35:77:eb:d5:aa:
7e:cf:95:0a:00:19:e7:1b:ca:19:ca:77:80:40:17:d1:db:c9:
b7:93:b0:5d:29:86:69:2d:c6:31:aa:c1:d2:fc:20:21:10:98:
08:1a:fe:2a:56:a5:fa:db:2a:cb:f5:43:ab:66:76:51:94:36:
c0:89:15:d6:9c:5f:26:fa:b8:e2:af:1a:21:cf:df:a5:b8:53:
fc:4b:76:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEdoC2WrLMSLpD3icpvk3e6ZnOzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMTgwOTM0MzdaFw0yMzEwMTcwOTM5MzdaMDMxMTAvBgNV
BAMTKDEyMDRBMjQ5MzdGRjI4RkQyREMwRkIwMURFQzM0NDMyMEFCNjVENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cETSPc1HRcEDgXRu8x9EchjL
Y/Q6lPtDUXo0tGpcDneJPqT2UYF2cm/tYJwxEnPdNktglubEAUJJ8rgX4rxUqmY9
VwuCk+Q9mmqPfnCN9i4ciutb5/6GhZwS6I/60U76qN0hG/Zb+74JzEZEqUmIoNfl
U5KK7Qd4qc/+qmnZbLfxSxiS87qUjTr1TkdeFo3lIicEdAcyoRfaoo1i3x8dVdTz
aYlnAXtjqOcszMXwaysgJDUs+2EN+PgPJEgF0TvS59Ta3G8nGrG3sYc5XfRf4i3F
+V6Mc0159HG4CKu0C+J8IqPYaVbi8zglYy2cBuo16ZPGAxZANU1rHCC2MP+fAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUEgSiSTf/KP0twPsB3sNEMgq2XXcwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMxODM0NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEF
BQcBBwEB/wQuMCwwKgQCAAEwJAMEALXWFwMEALXWMwMEALXWaAMEALXWxwMEALXW
1wMEAb9l0jANBgkqhkiG9w0BAQsFAAOCAQEAAlQwHVqbuqcZnGlWeLpqJc98J9F7
8YUp0cIpaL1lXnRj936PAGLXP9zFnLg2niMa2WiJzc31VThBhGtyckNfRXVaIEUw
DIGsnrrRj55Kce4pYL+1mqXNt+ScxJ+kqV1sQKWiwdMdU/wsdQW3soFp9FHq244n
HetBZubUEeVR2JcTuUb3JdD3zX00p/8UO+vjqMNdPwA3D14RbMBW0qzMLSqvkHz8
P/ZH7xjC8kdL4DV369Wqfs+VCgAZ5xvKGcp3gEAX0dvJt5OwXSmGaS3GMarB0vwg
IRCYCBr+Klal+tsqy/VDq2Z2UZQ2wIkV1pxfJvq44q8aIc/fpbhT/Et2Bg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org