Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203020.roa
File: AS203020.roa (raw, json)
Hash identifier: ELQW7BXHHML/1QJmtDHjKql9DnKdFRauwHR3y45SDcc=
Subject key identifier: C4:96:E1:7A:99:75:9A:9B:7D:F1:3A:DE:C7:4B:4A:C5:96:ED:2C:16
Certificate issuer: /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial: 4F5A5D3F8FC83BABA5A161087C30841CAA1B5A93
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203020.roa
Signing time: Mon 11 Jul 2022 03:12:26 +0000
ROA not before: Mon 11 Jul 2022 03:07:26 +0000
ROA not after: Mon 10 Jul 2023 03:12:26 +0000
asID: 203020
IP address blocks: 181.41.216.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
191.96.6.0/24 maxlen: 24
191.101.9.0/24 maxlen: 24
191.101.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5a:5d:3f:8f:c8:3b:ab:a5:a1:61:08:7c:30:84:1c:aa:1b:5a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Validity
Not Before: Jul 11 03:07:26 2022 GMT
Not After : Jul 10 03:12:26 2023 GMT
Subject: CN=C496E17A99759A9B7DF13ADEC74B4AC596ED2C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:d7:87:b3:fb:d0:5f:1d:e9:4c:7e:c6:20:
2c:0a:7f:82:30:1a:4f:08:5f:ed:0a:3b:ee:23:3d:
2a:ff:dc:12:5e:a2:a4:a2:42:1b:7c:a0:2e:bf:05:
c8:d1:5d:f8:5f:4b:48:b2:95:09:30:7c:ea:5b:8e:
1e:b3:02:42:7b:a5:c2:be:23:1e:ed:fd:bb:72:7f:
97:fc:c3:6e:83:53:30:65:5e:32:bc:ee:22:66:64:
ea:cc:14:fc:8b:c3:e9:87:0c:3a:0b:14:4d:ef:84:
11:ab:95:32:75:d7:cc:7e:94:5e:b6:23:a3:75:c6:
23:3b:48:94:20:a4:95:0b:c6:1c:45:2e:29:bc:41:
3e:e4:3a:a2:e5:20:5a:93:e3:c9:07:dd:4a:14:99:
a1:df:9e:ef:f3:d1:35:9f:a1:0c:32:3c:f7:74:43:
fc:00:78:dc:80:5f:4c:1c:bd:9d:3c:eb:7f:cf:eb:
69:65:29:30:1b:a7:4b:1f:8b:d0:b2:7d:6b:fe:f8:
ec:6d:53:aa:f1:6c:52:8f:c5:98:06:8c:aa:e9:19:
d5:26:9a:56:f3:e9:66:23:7a:6e:f3:ac:4d:1f:8e:
76:89:fc:b4:3a:27:35:37:53:42:af:df:26:7f:7b:
7e:db:47:01:f0:a7:92:22:6f:7f:66:bc:a9:45:a6:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:E1:7A:99:75:9A:9B:7D:F1:3A:DE:C7:4B:4A:C5:96:ED:2C:16
X509v3 Authority Key Identifier:
keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS203020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.216.0/24
191.96.3.0/24
191.96.6.0/24
191.101.9.0/24
191.101.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:d3:ef:7e:9e:09:54:b8:cc:dc:1a:b7:c5:0b:f0:b2:a5:
bd:9c:97:f4:39:7f:34:05:67:51:79:7a:bb:1d:3a:50:9a:8b:
4f:10:3e:56:1d:a7:e2:9b:a5:50:87:05:f5:46:07:bb:82:35:
01:f7:0e:31:8f:de:df:ad:7c:e7:3e:52:fa:f6:6e:fd:84:d0:
2a:36:f0:37:cd:55:f7:0f:7c:68:c2:b5:e3:ed:ab:58:27:74:
dd:3e:03:91:16:5a:2d:e7:dd:84:6d:c2:d9:57:39:57:87:99:
21:00:87:7e:5f:97:66:58:f3:42:e6:b5:26:df:2d:50:ef:55:
b2:37:f1:20:11:21:a7:c0:55:fb:87:3c:66:1e:0a:2c:60:51:
0d:2b:c4:30:cb:c6:87:01:d6:81:9a:e8:d1:8b:a5:43:32:f9:
46:12:c8:1a:40:e8:40:e1:c3:49:9d:11:30:db:03:c5:43:2e:
35:d7:3e:65:14:33:e3:19:6c:10:71:6d:64:20:db:14:0e:73:
d3:fe:5e:75:66:c2:b5:a1:59:c6:69:8c:ae:ee:ff:c6:df:8e:
56:8b:4d:49:f9:41:c2:4f:67:15:24:2f:cb:97:cc:94:c9:48:
83:a2:3a:a8:f8:3a:2b:0f:4b:c5:95:17:24:47:2d:c1:10:a7:
77:65:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org