Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210703.roa
File: AS210703.roa (raw, json)
Hash identifier: YaRvrtm8lBaB2XLptCPeCmAdOZ6RifhP7COhmpfKyZc=
Subject key identifier: 2E:D8:A5:E8:46:23:F5:21:51:F5:C2:D6:8A:DD:F6:AB:82:61:9B:39
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 268D67F8D1DF3A0CCD2276F105AB1673F9D2DA60
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210703.roa
Signing time: Fri 25 Nov 2022 00:08:00 +0000
ROA not before: Fri 25 Nov 2022 00:03:00 +0000
ROA not after: Fri 24 Nov 2023 00:08:00 +0000
asID: 210703
IP address blocks: 179.61.142.0/24 maxlen: 24
179.61.243.0/24 maxlen: 24
181.214.96.0/24 maxlen: 24
181.215.6.0/24 maxlen: 24
185.143.230.0/24 maxlen: 24
191.96.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8d:67:f8:d1:df:3a:0c:cd:22:76:f1:05:ab:16:73:f9:d2:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 25 00:03:00 2022 GMT
Not After : Nov 24 00:08:00 2023 GMT
Subject: CN=2ED8A5E84623F52151F5C2D68ADDF6AB82619B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:3b:86:f9:70:85:e2:af:d7:68:9b:57:77:
3c:95:4c:a0:3f:23:80:ce:55:2d:a8:41:a6:05:98:
b7:c2:8e:da:01:d5:ac:04:e7:ef:8c:18:30:cf:88:
ae:2f:23:76:ae:38:e2:9d:ac:e1:5d:f6:ed:3f:f8:
5e:4a:15:8e:b5:5a:3f:1a:d6:37:7a:e0:42:7b:3a:
49:62:6c:4b:46:68:c1:51:38:3f:76:bf:25:4f:20:
9e:10:7c:22:00:80:7e:e1:83:cb:f2:98:28:cf:54:
f7:92:e8:d8:43:48:4e:09:98:e4:a1:86:90:37:23:
c8:48:a1:d8:ac:9e:6d:db:34:c0:b5:8f:78:d1:5d:
23:c7:be:a8:c2:91:f6:4f:d1:40:52:11:c1:1e:59:
8a:91:51:b7:df:a3:50:c4:49:05:82:9e:ba:04:b5:
96:d2:e1:f8:42:d2:f7:c2:33:f8:fc:09:4c:2f:bb:
88:95:e3:b3:ee:6b:4e:31:2a:15:2d:b1:58:b1:e3:
3d:51:9d:d2:48:66:c4:bf:16:e1:80:6e:73:bc:e2:
1b:9b:c1:8d:2b:3f:de:3c:4c:97:74:f2:44:72:cc:
79:14:ca:9e:1d:63:85:b6:e9:77:74:1d:1f:4c:fe:
c1:43:1c:ef:c6:a2:5e:70:ea:98:78:e6:f9:18:ef:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:A5:E8:46:23:F5:21:51:F5:C2:D6:8A:DD:F6:AB:82:61:9B:39
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS210703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.142.0/24
179.61.243.0/24
181.214.96.0/24
181.215.6.0/24
185.143.230.0/24
191.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9d:88:eb:11:b1:a1:93:b4:71:e8:4b:a7:41:3b:dd:ed:e6:
4a:a7:40:a4:19:2c:bb:98:d9:74:79:50:48:a5:65:93:d6:68:
b9:c3:58:aa:25:60:67:19:5d:0d:82:8d:dd:ab:6c:31:c1:d3:
e8:a0:a8:fa:a5:59:86:01:fe:7d:c3:01:7d:5a:94:ef:2b:ab:
69:ed:78:22:c5:ed:8b:6b:f2:ae:0f:05:a7:ea:fc:ec:c7:0f:
9e:f5:1d:63:1c:58:e3:77:63:ce:a6:8f:20:98:14:4f:24:04:
b8:3f:33:a0:c6:0f:39:bc:cd:5c:e9:45:1d:28:b9:a4:1b:31:
61:0f:86:95:21:a6:2c:a9:69:6e:fc:f2:09:c9:40:95:9f:9a:
16:27:85:08:f2:8b:f4:75:40:c2:75:4e:53:dc:67:ed:f6:f5:
0c:05:d8:18:9c:a9:1c:92:f9:fd:17:da:af:e7:15:37:d3:08:
62:1b:42:1c:79:0f:eb:c0:b0:ad:be:41:63:40:31:b5:48:1d:
04:1d:88:2a:60:b1:f9:b1:a1:79:7c:ef:3c:0b:77:2d:c0:a2:
d2:53:1b:3d:3e:e5:58:61:56:1b:60:85:66:f9:b3:e8:9d:32:
7f:39:08:c5:0f:96:ad:35:d8:f2:93:75:fd:2d:5f:28:94:41:
8b:08:9f:6d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUJo1n+NHfOgzNInbxBasWc/nS2mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjExMjUwMDAzMDBaFw0yMzExMjQwMDA4MDBaMDMxMTAvBgNV
BAMTKDJFRDhBNUU4NDYyM0Y1MjE1MUY1QzJENjhBRERGNkFCODI2MTlCMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+DuG+XCF4q/XaJtXdzyVTKA/
I4DOVS2oQaYFmLfCjtoB1awE5++MGDDPiK4vI3auOOKdrOFd9u0/+F5KFY61Wj8a
1jd64EJ7OklibEtGaMFROD92vyVPIJ4QfCIAgH7hg8vymCjPVPeS6NhDSE4JmOSh
hpA3I8hIodisnm3bNMC1j3jRXSPHvqjCkfZP0UBSEcEeWYqRUbffo1DESQWCnroE
tZbS4fhC0vfCM/j8CUwvu4iV47Pua04xKhUtsVix4z1RndJIZsS/FuGAbnO84hub
wY0rP948TJd08kRyzHkUyp4dY4W26Xd0HR9M/sFDHO/Gol5w6ph45vkY74aFAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQULtil6EYj9SFR9cLWit32q4JhmzkwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMTA3MDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYB
BQUHAQcBAf8ELjAsMCoEAgABMCQDBACzPY4DBACzPfMDBAC11mADBAC11wYDBAC5
j+YDBAC/YCYwDQYJKoZIhvcNAQELBQADggEBAAKdiOsRsaGTtHHoS6dBO93t5kqn
QKQZLLuY2XR5UEilZZPWaLnDWKolYGcZXQ2Cjd2rbDHB0+igqPqlWYYB/n3DAX1a
lO8rq2nteCLF7Ytr8q4PBafq/OzHD571HWMcWON3Y86mjyCYFE8kBLg/M6DGDzm8
zVzpRR0ouaQbMWEPhpUhpiypaW788gnJQJWfmhYnhQjyi/R1QMJ1TlPcZ+329QwF
2BicqRyS+f0X2q/nFTfTCGIbQhx5D+vAsK2+QWNAMbVIHQQdiCpgsfmxoXl87zwL
dy3AotJTGz0+5VhhVhtghWb5s+idMn85CMUPlq012PKTdf0tXyiUQYsIn20=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org