Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22822.roa
File: AS22822.roa (raw, json)
Hash identifier: heteL3zOVpcrkbmPfWcW7qhp3igqMTBTNEtXjN8v524=
Subject key identifier: A1:11:72:97:A6:2A:1C:FD:A6:3E:B7:15:E9:32:DD:11:C2:C2:96:04
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: E56DEACB4A7230D39AC34DBA5A238B7A20B4D2
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22822.roa
Signing time: Fri 25 Nov 2022 12:25:45 +0000
ROA not before: Fri 25 Nov 2022 12:20:45 +0000
ROA not after: Fri 24 Nov 2023 12:25:45 +0000
asID: 22822
IP address blocks: 179.61.170.0/24 maxlen: 24
191.101.200.0/24 maxlen: 24
191.101.208.0/24 maxlen: 24
191.101.226.0/24 maxlen: 24
191.101.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e5:6d:ea:cb:4a:72:30:d3:9a:c3:4d:ba:5a:23:8b:7a:20:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 25 12:20:45 2022 GMT
Not After : Nov 24 12:25:45 2023 GMT
Subject: CN=A1117297A62A1CFDA63EB715E932DD11C2C29604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:3e:21:e6:15:3f:60:e3:e4:fb:5b:73:aa:
e4:96:9e:e3:66:0e:ea:bf:ee:09:26:b1:35:e1:39:
4c:16:22:cc:29:58:0f:38:63:c3:2f:55:35:0f:77:
44:33:b5:48:97:4a:1c:1d:5c:9d:1d:28:b7:76:3e:
88:d7:e6:97:68:29:7f:23:28:2f:65:ff:2f:08:e8:
75:f1:ed:af:d7:d7:40:1c:ff:32:7b:49:65:0d:fb:
f3:38:e6:7a:37:3e:a7:e5:bb:b2:1b:dc:40:de:41:
9c:20:d0:b1:88:e3:7b:c8:e1:98:77:a9:21:8d:65:
69:dd:e2:00:dd:f0:cf:8a:d1:d5:07:f7:25:c0:9e:
c9:df:1f:23:e1:6a:84:69:9b:54:11:d0:9d:e2:60:
e0:25:3b:1c:da:49:01:00:5b:34:12:c2:5a:93:17:
be:0d:59:97:38:fa:43:be:75:e2:dd:b9:09:4c:47:
72:47:ab:a3:34:41:af:75:6a:bc:1a:33:ec:c3:a0:
3e:e9:6e:2c:8f:e5:cb:64:16:82:b7:ca:cd:9a:b0:
da:4c:31:7d:e2:de:2d:15:aa:0a:09:3e:cb:b0:62:
87:32:95:8c:ec:15:33:b5:1b:9e:1d:33:0d:9d:fa:
3d:20:27:fd:78:f6:16:fa:e9:13:de:f7:b8:41:50:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:11:72:97:A6:2A:1C:FD:A6:3E:B7:15:E9:32:DD:11:C2:C2:96:04
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
191.101.200.0/24
191.101.208.0/24
191.101.226.0/24
191.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:70:1f:c0:1b:28:fe:ab:3b:6b:f6:46:5c:42:03:ef:cb:
99:86:3a:c1:80:c6:e5:e5:4f:30:04:d4:56:8c:df:a2:fd:61:
0d:8a:b7:bb:d4:d9:d7:83:57:89:ba:d9:28:c6:a9:c7:65:2d:
a6:4c:60:62:86:79:40:17:fe:7c:2b:d0:f8:77:e2:8c:21:2b:
dc:35:ae:eb:53:82:85:82:96:ee:c0:5a:ec:a6:94:0a:6c:8c:
8b:9a:cc:8b:8b:2c:a7:56:26:88:e8:40:e1:9d:54:20:2c:77:
46:54:30:9e:e6:2a:02:c1:fe:4f:2b:78:cf:1a:0f:6b:85:55:
47:68:37:b5:6d:1c:e1:7a:11:4a:10:23:2b:9a:28:4d:ed:1e:
09:d8:e3:61:95:cc:d9:9a:2a:9e:bd:39:73:3e:92:ba:ea:33:
26:43:49:d1:c0:60:3a:b4:a8:e9:51:35:c6:e1:7b:97:36:53:
b7:bf:67:00:b9:8f:2b:45:b9:f8:9a:5a:70:6e:32:e6:88:46:
5b:9c:4c:2a:f9:f3:bb:eb:e4:ec:b6:e2:bc:54:be:4f:d5:9c:
8d:b2:50:1e:7a:2b:f4:ba:6e:c6:a6:ce:7b:48:e9:a7:06:7a:
37:57:29:cd:69:c4:db:c7:50:d6:1e:25:44:69:42:6e:17:e8:
df:12:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org