Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: ISSuMBJKHH9/VpYGb4mREgqtZIpT0ZpOMEcs7/SOdFE=
Subject key identifier: A3:B5:1E:D3:F2:9B:BC:8E:B5:A6:B5:ED:16:6B:1C:21:72:45:32:10
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 19BA6C9A377DC910FE09CDB9D3F58807EF15B023
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209737.roa
Signing time: Sun 06 Nov 2022 21:33:49 +0000
ROA not before: Sun 06 Nov 2022 21:28:49 +0000
ROA not after: Sun 05 Nov 2023 21:33:49 +0000
asID: 209737
IP address blocks: 191.96.146.0/23 maxlen: 24
191.101.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ba:6c:9a:37:7d:c9:10:fe:09:cd:b9:d3:f5:88:07:ef:15:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 6 21:28:49 2022 GMT
Not After : Nov 5 21:33:49 2023 GMT
Subject: CN=A3B51ED3F29BBC8EB5A6B5ED166B1C2172453210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:21:f9:ef:d2:4c:48:ec:ff:b0:1b:b6:00:
97:f1:8b:23:7d:8d:41:35:3c:ea:57:81:ef:83:d3:
90:9b:c1:db:e3:3c:7e:0f:96:bd:97:e1:d8:e4:3e:
aa:90:58:9e:13:ad:36:56:e1:c0:bc:f0:48:e4:39:
75:9e:e1:a3:f0:d5:b8:b2:48:af:18:45:42:4c:5f:
34:2b:8a:70:b0:a8:60:f7:64:ab:b3:25:53:01:22:
09:28:60:5a:50:d4:1c:00:90:36:ba:4f:9d:fc:22:
b0:22:c5:3b:35:41:e8:cc:3b:3f:97:7a:06:6f:1d:
dd:a2:fe:43:2c:c8:23:49:96:15:66:26:fe:57:cb:
70:ea:ef:89:69:52:06:e2:1e:10:18:fa:3d:95:43:
64:6a:98:cf:5f:63:53:fb:33:71:21:30:a4:9e:8a:
37:73:7d:40:b7:28:db:0a:c6:f5:1d:46:8a:c9:1c:
ba:03:c1:8b:d0:b7:fa:8e:63:8d:30:3f:d7:39:40:
2e:ec:05:66:51:32:fb:71:a2:1d:97:b9:36:ad:c5:
8d:30:06:8e:ac:f4:da:53:77:cf:14:0b:76:6f:1a:
78:9a:ff:29:15:c5:02:64:45:71:27:b6:66:c0:28:
35:e7:b6:ef:f7:eb:41:03:81:eb:6f:58:82:b8:7d:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:1E:D3:F2:9B:BC:8E:B5:A6:B5:ED:16:6B:1C:21:72:45:32:10
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.146.0/23
191.101.126.0/23
Signature Algorithm: sha256WithRSAEncryption
96:be:b1:27:fa:b7:6b:dc:6e:10:18:59:39:4e:82:7f:eb:2f:
b2:d1:9c:e7:b2:aa:7b:ab:96:5f:f4:68:25:02:47:5c:b1:91:
c8:8b:40:46:a4:72:ae:0b:88:20:78:65:62:0c:ee:ed:08:49:
b1:47:7f:f8:89:e4:38:78:da:f8:da:c9:a4:44:9a:70:ca:35:
fb:4d:57:58:11:5d:be:47:b1:f5:c7:82:cb:89:f8:d8:55:51:
d4:31:a6:8c:92:f9:8a:27:e6:5d:93:4b:b2:15:19:2d:50:8a:
fe:a9:73:ed:11:97:64:4a:3a:61:1f:c7:56:6f:f8:f6:6a:61:
1d:dc:bf:17:2e:db:ce:f1:a5:05:f0:9f:c2:93:51:b2:06:f5:
e5:86:35:c8:b1:06:31:d6:e3:11:27:18:6f:f9:80:88:12:bb:
21:ac:33:44:65:ed:d9:f4:4d:0a:a0:54:8d:5b:e9:23:39:0d:
78:a5:f2:94:8d:83:b5:11:e6:68:5d:8c:c5:aa:70:fe:8c:bd:
06:a8:d4:2d:8f:2d:ed:e6:12:5e:02:2f:e0:35:e4:e4:6f:a5:
29:ec:6d:b8:2c:bb:54:fc:10:6c:87:d2:ad:3f:ec:60:4f:db:
14:d6:b5:95:cb:44:72:05:10:f4:ce:a7:80:a0:9f:8f:b4:d0:
65:41:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org