Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211237.roa
File: AS211237.roa (raw, json)
Hash identifier: L4ueMZzBKQa4ffprWoRUO1iIFDOV5MAXna0TTfVxbrw=
Subject key identifier: E8:AF:DA:BF:67:E8:E3:0D:49:78:5E:F6:02:E4:F2:9F:5B:9A:9A:C9
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 6384D6EDFD9CB5E7E694D2A114E56C180817F118
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211237.roa
Signing time: Sat 26 Nov 2022 09:39:36 +0000
ROA not before: Sat 26 Nov 2022 09:34:36 +0000
ROA not after: Sat 25 Nov 2023 09:39:36 +0000
asID: 211237
IP address blocks: 45.95.13.0/24 maxlen: 24
45.133.171.0/24 maxlen: 24
179.61.249.0/24 maxlen: 24
181.214.90.0/24 maxlen: 24
181.215.28.0/24 maxlen: 24
181.215.171.0/24 maxlen: 24
181.215.212.0/24 maxlen: 24
181.215.213.0/24 maxlen: 24
191.101.143.0/24 maxlen: 24
191.101.168.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:84:d6:ed:fd:9c:b5:e7:e6:94:d2:a1:14:e5:6c:18:08:17:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 26 09:34:36 2022 GMT
Not After : Nov 25 09:39:36 2023 GMT
Subject: CN=E8AFDABF67E8E30D49785EF602E4F29F5B9A9AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:17:0a:05:0d:d4:2d:e0:dd:a5:fe:74:90:
4c:44:ed:15:fc:b6:72:d7:f2:07:84:64:65:3c:5d:
16:8b:2c:9c:19:01:42:86:a3:62:e2:dc:84:8a:f7:
38:3d:9f:61:56:17:d9:4f:5b:ef:07:3d:2f:89:a4:
8f:a6:4c:72:3b:4a:07:81:35:75:63:e7:62:df:b9:
1d:53:be:09:18:a4:0a:1e:ca:22:c0:3f:2b:6f:c2:
1d:55:c7:6d:9d:bf:42:05:9d:a1:3f:e6:e4:6a:d1:
2d:d3:4a:92:c4:c1:fb:5a:6f:9b:7e:2a:1f:4b:58:
58:8e:81:39:12:96:03:66:d0:cf:63:bd:f7:b9:1f:
e2:0f:cb:a4:64:68:2e:d0:c0:73:9e:4b:b0:fd:99:
32:d0:9e:58:43:a9:fb:d8:25:1d:d6:02:fb:27:a1:
a9:21:d5:de:62:99:d5:03:57:99:39:22:b3:b4:bc:
9b:29:d1:d1:9a:93:85:a6:53:d1:a9:38:31:c2:07:
ff:d9:cc:5b:80:ac:f7:a6:6f:6a:b9:42:e6:85:c4:
8d:ac:d4:00:d6:3a:38:f9:ec:af:24:a5:9e:fe:33:
85:8f:e4:44:8d:75:f9:3b:91:ed:1d:33:9b:e0:da:
76:01:58:43:dd:a9:d8:d7:24:1f:ab:ca:c3:ac:e6:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:DA:BF:67:E8:E3:0D:49:78:5E:F6:02:E4:F2:9F:5B:9A:9A:C9
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.13.0/24
45.133.171.0/24
179.61.249.0/24
181.214.90.0/24
181.215.28.0/24
181.215.171.0/24
181.215.212.0/23
191.101.143.0/24
191.101.168.0/24
191.101.181.0/24
Signature Algorithm: sha256WithRSAEncryption
74:98:5f:7c:a0:a3:ba:46:84:74:df:70:a1:07:96:04:a8:aa:
96:cf:7e:cc:75:40:cf:5c:56:b8:a5:bd:32:58:6d:10:bd:9f:
47:d9:8e:46:c2:1f:c9:f2:25:70:7c:a2:13:07:3b:82:dd:26:
6f:1e:95:a5:76:ab:d3:3d:4c:9b:0a:5a:60:92:0e:25:e7:67:
65:7b:49:51:03:bf:c6:e0:e5:53:40:52:65:f2:27:20:19:fb:
4f:1f:c5:2f:2f:d2:d2:ba:f4:02:3b:ce:73:4b:f3:7a:7c:5e:
67:38:a1:4c:1a:59:96:49:4a:64:fd:a3:e6:50:9b:5f:f7:9e:
1d:d7:f4:86:ef:60:29:56:0b:ac:da:7a:af:78:1c:0e:22:89:
f2:2b:ea:16:5c:68:2d:fb:dd:7a:a4:58:51:3f:a7:1e:16:92:
86:f8:44:89:89:d4:75:c1:d9:18:7b:dd:23:20:8e:42:92:ae:
1a:8e:3b:3e:83:d5:2c:64:d9:10:ca:8d:0d:23:2b:1a:a9:25:
28:70:7f:0c:3d:85:4f:51:6c:04:dc:86:e9:44:10:2f:20:81:
05:12:83:52:0f:63:a6:c6:c5:3f:5a:6d:73:e2:11:7e:30:a3:
a5:fe:2a:39:c5:84:23:db:9e:1c:b5:54:03:ae:bb:56:c5:25:
7b:51:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org