Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20771.roa
File: AS20771.roa (raw, json)
Hash identifier: Bs9N0tpXb06P2WzXbgyJJVrtoeWu/NHBe18PEv1hvwc=
Subject key identifier: 95:49:15:E5:98:82:07:59:DF:DA:58:B4:80:DA:38:8D:01:F8:2C:03
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 76CA75FC3F63D587A2978705B8BC4C363DCABCBD
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20771.roa
Signing time: Sat 27 Aug 2022 09:40:13 +0000
ROA not before: Sat 27 Aug 2022 09:35:13 +0000
ROA not after: Sat 26 Aug 2023 09:40:13 +0000
asID: 20771
IP address blocks: 109.106.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ca:75:fc:3f:63:d5:87:a2:97:87:05:b8:bc:4c:36:3d:ca:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:35:13 2022 GMT
Not After : Aug 26 09:40:13 2023 GMT
Subject: CN=954915E598820759DFDA58B480DA388D01F82C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:b2:d9:d7:04:04:a1:b1:6d:cd:62:04:f9:
7e:44:2c:8a:72:df:0a:89:1d:f8:09:e6:f7:4a:56:
8c:8f:ab:7c:b2:21:7c:1a:a7:f4:46:ba:00:3d:6d:
6b:c7:22:82:19:48:78:57:de:eb:08:e3:95:8f:87:
be:6e:91:67:43:73:77:27:bc:6b:01:fb:03:3c:63:
c5:87:0a:64:53:5f:07:1b:6b:78:b6:9c:65:92:45:
3d:ec:e5:8c:2a:0f:e2:72:0a:15:65:cd:f5:60:5e:
7b:bb:38:70:98:a0:7d:2f:ca:b5:b5:8f:da:27:ac:
bb:9b:9d:63:a0:84:e3:f7:bc:d5:7e:25:20:7d:f0:
48:c7:cc:24:d3:9e:b3:a0:12:17:cf:e1:45:3e:59:
78:3a:6d:37:c1:c0:e2:89:3f:bb:98:94:6b:5a:99:
86:88:60:3e:28:03:04:63:0a:65:95:f6:1d:5c:d0:
da:f4:6c:28:d9:06:7b:fa:01:2b:cd:82:0e:c0:1d:
e5:8b:38:8f:29:36:b9:dd:25:6b:94:03:b8:72:41:
22:7a:b0:b6:ca:e1:ec:69:be:0b:6e:36:d5:d4:f8:
4d:2c:53:52:d5:c0:30:c8:c8:38:49:35:4a:f7:86:
58:e8:53:a6:ad:90:db:71:53:43:90:ca:54:12:4d:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:15:E5:98:82:07:59:DF:DA:58:B4:80:DA:38:8D:01:F8:2C:03
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:67:9e:8c:3a:93:47:6d:ec:2b:03:a8:c1:52:17:5a:45:b1:
23:23:76:55:9c:f8:7f:91:26:76:cd:e9:e1:d8:f9:6b:84:a1:
fa:67:7d:a7:ba:af:22:0f:da:50:fd:a7:fd:62:ac:c3:85:f1:
17:45:db:90:ab:f3:73:69:ea:30:24:cf:6c:a3:cb:f3:aa:90:
e3:aa:77:33:19:33:c4:e1:27:ca:8b:f0:83:41:d0:58:c3:b7:
18:42:cf:2e:84:6c:a9:a3:ba:64:fd:d1:49:27:36:05:4e:a6:
d5:30:f3:61:13:3a:ed:25:3a:2c:a1:d8:87:06:80:f0:af:f7:
10:81:3a:62:ff:57:38:a3:18:83:87:60:8e:6b:c2:18:fa:80:
c1:17:2d:c3:dd:96:30:14:92:09:ae:be:b6:9d:a3:03:47:90:
92:2f:40:3f:98:58:cb:f2:fc:76:a9:f4:94:85:bf:c1:28:3d:
9d:54:b1:50:51:ad:56:d8:b5:2c:49:62:6b:c3:05:d1:f7:21:
5f:d8:1a:ad:d8:d2:54:9d:02:40:84:c6:ee:87:de:07:9f:93:
39:74:7b:18:73:54:7f:7f:6e:fe:cf:41:47:dc:f8:8a:2b:be:
ef:8f:67:65:b3:f6:45:10:82:b1:39:98:d4:eb:b5:33:55:57:
49:4f:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org