Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: JOWnOVLoIxHH4q0XitvTPPlH4+39L6k5g6xYaXFm/Zw=
Subject key identifier: 99:7D:60:BD:18:C0:0C:4D:02:ED:67:B6:BA:2D:78:AC:B5:30:35:43
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 136AF64D49FE3DFC446D7D21156CCD5454E1AF09
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209181.roa
Signing time: Tue 15 Nov 2022 17:00:17 +0000
ROA not before: Tue 15 Nov 2022 16:55:17 +0000
ROA not after: Tue 14 Nov 2023 17:00:17 +0000
asID: 209181
IP address blocks: 5.252.160.0/24 maxlen: 24
85.208.73.0/24 maxlen: 24
85.209.176.0/24 maxlen: 24
181.214.53.0/24 maxlen: 24
191.96.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6a:f6:4d:49:fe:3d:fc:44:6d:7d:21:15:6c:cd:54:54:e1:af:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 15 16:55:17 2022 GMT
Not After : Nov 14 17:00:17 2023 GMT
Subject: CN=997D60BD18C00C4D02ED67B6BA2D78ACB5303543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:08:dd:7b:08:1a:0b:ca:7d:fc:1d:d4:29:
13:c7:1b:53:0e:13:b8:8a:25:7e:1d:62:cb:77:70:
e8:4c:95:79:3f:4d:59:42:9d:10:da:1f:ac:9e:44:
14:59:79:ec:32:ba:70:8e:73:a3:ea:ef:15:9d:3b:
a5:ea:9f:b8:ee:8c:19:91:be:72:bd:36:2b:c7:bb:
a3:97:c8:31:a8:54:f8:70:4a:3a:68:3d:8f:ad:2d:
81:48:3b:0f:ad:42:b1:cf:ff:a6:cd:92:93:ce:a1:
50:e7:a4:b1:51:16:a9:dd:a8:db:1c:d4:1b:d2:9a:
ff:b0:9c:55:64:20:e3:90:63:c8:eb:f1:c6:0f:ff:
b1:60:73:d6:07:4d:01:6a:06:bb:6c:a4:ff:8b:49:
4d:a0:e9:11:0b:87:ba:51:b2:c1:58:69:9a:31:de:
e0:2d:ed:da:25:f1:b1:0b:d8:2e:98:c6:1e:95:65:
3a:e4:56:fa:af:e6:d1:8c:51:2a:e3:e1:f0:15:93:
3a:cb:b6:3e:45:1a:ae:3c:f9:89:ac:24:ca:27:ee:
5b:89:46:49:e1:0f:b6:3c:3c:74:35:10:31:f5:22:
c0:76:21:6c:67:97:82:e7:c2:9a:1b:c9:82:d9:db:
5e:3b:e6:77:db:7c:e4:d1:82:1e:9d:ea:5e:07:e7:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:60:BD:18:C0:0C:4D:02:ED:67:B6:BA:2D:78:AC:B5:30:35:43
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.160.0/24
85.208.73.0/24
85.209.176.0/24
181.214.53.0/24
191.96.72.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e0:28:54:97:06:df:b1:dc:c8:5d:b3:b3:18:30:5e:80:d9:
dd:84:d2:d2:60:ca:34:98:fa:48:0b:be:e8:6a:b2:ae:95:91:
a2:25:ba:0b:97:8b:1a:1a:18:31:bf:b8:8e:62:ea:4e:d9:18:
12:53:29:3c:12:3d:77:4a:24:12:c1:a7:bf:e6:40:8f:9c:67:
90:2e:4c:e9:ce:30:c0:4e:19:cc:15:14:2d:51:15:05:32:13:
cc:8e:22:3b:e0:74:d4:5b:c2:03:27:f6:f8:bb:3e:61:66:14:
0f:82:5b:ca:70:98:fb:55:8a:fd:03:13:fb:a3:d5:1a:44:05:
e1:f0:3a:2a:41:b2:70:c5:ab:a3:e9:64:4d:1b:97:e6:cf:d0:
17:58:fd:bb:3c:d9:ee:2a:ab:ee:47:44:51:18:80:3a:09:78:
5e:2d:8d:3b:d9:bf:7c:7a:e2:49:80:9e:00:6e:d8:f2:23:dc:
57:48:dc:28:00:1e:dd:a2:b7:d4:15:54:18:66:77:82:08:17:
4b:94:9b:f9:88:ef:e7:92:57:79:8e:27:df:b9:b0:d9:58:a6:
12:59:30:99:21:73:48:ad:1f:6d:d7:fa:41:de:47:f3:15:2c:
23:2a:f2:82:ef:6e:4e:ac:9a:92:49:57:a4:cc:b5:48:80:78:
b3:ca:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org