Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206995.roa
File: AS206995.roa (raw, json)
Hash identifier: CKpoZme1DjHcBEjGolft40GCm08xVc5lMEw81T1IuLA=
Subject key identifier: D0:E8:EF:A4:96:27:55:95:25:DC:45:B3:20:A6:A7:C0:82:FC:B7:32
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 5BD65397147505C63A1FE057F1804D98AA76A88D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206995.roa
Signing time: Fri 25 Nov 2022 00:33:39 +0000
ROA not before: Fri 25 Nov 2022 00:28:39 +0000
ROA not after: Fri 24 Nov 2023 00:33:39 +0000
asID: 206995
IP address blocks: 181.214.73.0/24 maxlen: 24
181.214.74.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.215.79.0/24 maxlen: 24
185.158.151.0/24 maxlen: 24
185.174.61.0/24 maxlen: 24
191.96.60.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d6:53:97:14:75:05:c6:3a:1f:e0:57:f1:80:4d:98:aa:76:a8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 25 00:28:39 2022 GMT
Not After : Nov 24 00:33:39 2023 GMT
Subject: CN=D0E8EFA49627559525DC45B320A6A7C082FCB732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:60:d2:86:eb:24:a6:cf:d0:09:9b:ae:4f:
82:05:28:dd:d1:34:7e:93:b6:81:05:46:80:be:09:
e1:0c:f5:4b:8c:a2:e1:90:67:2b:4b:7e:77:f8:a1:
c3:85:20:9f:2c:c3:e2:55:4c:91:25:d8:cf:bc:0f:
61:2f:72:98:aa:17:25:61:1d:41:21:21:30:bd:33:
25:d0:52:db:34:14:62:0d:f8:60:b8:b3:7c:03:3f:
a6:97:79:25:4f:2f:78:f4:ee:72:ca:90:9f:a0:63:
eb:e5:0e:d1:74:6d:7d:37:72:cf:4d:3d:26:23:25:
6e:17:df:fa:25:05:59:c6:42:bb:f4:38:52:83:65:
a4:34:7b:56:6d:00:80:52:ff:fb:1a:2b:b5:9f:f4:
fe:42:f7:02:51:59:98:f2:59:2d:56:4a:46:da:99:
70:49:94:c3:cd:04:dd:15:e6:88:d5:1f:d1:54:58:
b4:4e:6e:2d:b0:42:b7:da:a3:85:48:b1:96:f6:06:
2b:1f:27:dc:2b:a8:ac:6c:2c:39:69:06:af:f3:a3:
a2:ea:3a:04:e5:51:f0:a7:9c:a8:81:55:df:4e:f1:
7b:e6:a4:f5:7a:2f:81:26:8b:a8:18:ed:05:82:58:
4c:af:f9:d3:e0:f3:4e:eb:4c:29:29:27:f7:78:15:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:EF:A4:96:27:55:95:25:DC:45:B3:20:A6:A7:C0:82:FC:B7:32
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS206995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.73.0-181.214.75.255
181.215.79.0/24
185.158.151.0/24
185.174.61.0/24
191.96.60.0/24
191.96.111.0/24
191.96.154.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d0:f5:7f:35:77:95:d5:78:d6:9b:18:dc:ee:15:fc:46:f8:
9d:3e:52:67:fa:e2:a6:12:c1:07:13:d9:a1:a8:bf:99:b2:0a:
38:f8:29:de:52:5d:b9:d9:28:2f:4c:67:f4:08:a3:65:70:a6:
78:69:bb:22:4e:af:05:76:b4:c9:11:cc:4d:8d:c8:db:ee:a6:
29:dd:1d:5e:99:5f:75:d9:81:34:c7:11:0f:47:34:3b:52:54:
73:cb:97:a8:f5:b1:b3:46:f6:60:8d:6c:54:9c:c3:6d:81:2b:
30:2a:1f:a6:ec:c2:40:19:43:c6:b1:3d:d7:cf:36:63:c8:53:
3e:bf:c1:5a:cb:55:20:ec:c2:85:90:28:8d:e1:76:90:1d:b9:
fe:f0:fd:cf:8a:5b:1c:c6:8d:53:b8:c4:48:4f:19:cb:92:21:
74:28:00:08:1c:52:95:14:79:c8:e9:93:af:6d:a4:85:7e:91:
7b:b6:91:bf:02:74:da:87:2b:bf:b0:4c:7a:9d:17:20:7c:9d:
52:d9:9e:26:ec:76:d2:a9:08:a5:c6:36:4a:05:3f:1f:20:ce:
18:13:58:76:52:77:56:d3:54:e0:31:d1:cc:ed:55:0c:39:5c:
de:9a:93:cb:8f:40:1b:12:7e:f2:3d:48:44:40:cf:55:61:67:
a9:66:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org