Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: in5564yFvtTfm1oWRSULi0LbB4gTsVXhU9FvZFtV5F8=
Subject key identifier: 75:39:B7:EA:3B:14:47:D0:77:77:64:19:93:15:BA:86:76:C5:21:8A
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 4D49C17C8ED0794F905B2DD9956DDB5E24BD2DCE
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29802.roa
Signing time: Fri 25 Nov 2022 20:00:20 +0000
ROA not before: Fri 25 Nov 2022 19:55:20 +0000
ROA not after: Fri 24 Nov 2023 20:00:20 +0000
asID: 29802
IP address blocks: 179.61.170.0/24 maxlen: 24
181.214.72.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.235.0/24 maxlen: 24
181.215.251.0/24 maxlen: 24
191.96.170.0/24 maxlen: 24
191.101.200.0/24 maxlen: 24
191.101.208.0/24 maxlen: 24
191.101.226.0/24 maxlen: 24
191.101.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:49:c1:7c:8e:d0:79:4f:90:5b:2d:d9:95:6d:db:5e:24:bd:2d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 25 19:55:20 2022 GMT
Not After : Nov 24 20:00:20 2023 GMT
Subject: CN=7539B7EA3B1447D0777764199315BA8676C5218A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:8d:96:42:6d:47:73:5b:24:54:64:14:27:
77:52:a1:9f:49:c0:68:7d:2e:0c:c3:41:0f:4e:7b:
99:84:73:71:31:2a:d4:29:3c:47:14:cb:94:b7:fa:
16:e0:4a:9c:c7:46:0e:24:8b:47:13:46:c8:7c:5c:
2b:c4:a9:b5:99:d5:ac:7a:b8:85:f3:bc:4c:10:22:
1a:e1:90:a0:03:d4:31:18:43:8e:5c:03:9a:fc:9e:
b3:ff:44:c5:46:ce:6a:10:c6:1e:ee:e8:1a:0a:c4:
b8:e9:ff:97:a1:42:26:92:2c:4b:0a:ab:bc:dd:fd:
e1:aa:cc:db:3b:98:7e:d3:51:7e:e9:26:10:a2:8b:
f6:5f:07:7c:55:8d:9d:19:9e:f1:c8:99:cd:65:15:
09:72:51:10:da:f5:05:32:a3:6b:ef:76:7b:fc:fa:
39:a8:e8:e3:8d:6d:3c:61:02:a1:26:06:ae:00:ef:
50:ce:c6:9a:c5:2d:5c:e9:4b:6a:f5:52:b4:10:37:
02:58:77:0b:84:9c:a6:a2:0a:85:05:2c:f5:c0:2b:
28:2c:2e:b7:28:dc:60:97:0e:61:4b:4f:b2:f8:26:
35:b3:ab:62:bb:69:76:e0:05:52:86:11:00:f3:64:
87:7a:e5:c6:d3:82:ec:2e:e4:db:d3:0a:67:7d:9c:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:B7:EA:3B:14:47:D0:77:77:64:19:93:15:BA:86:76:C5:21:8A
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
181.214.72.0/24
181.215.228.0/24
181.215.235.0/24
181.215.251.0/24
191.96.170.0/24
191.101.200.0/24
191.101.208.0/24
191.101.226.0/24
191.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d6:af:3a:8a:b6:2c:e4:73:a4:9c:3a:72:af:5a:f6:7e:07:
f5:cb:80:af:37:29:b1:bf:fc:33:98:04:7f:05:39:21:b9:54:
08:6d:fe:1e:11:b5:bb:06:23:64:f4:aa:a1:1d:06:bd:78:1e:
3f:62:29:01:e8:8b:81:cc:ef:a8:9e:55:06:19:09:c5:5f:71:
da:6a:64:fd:7f:65:67:70:f4:ee:44:33:7d:de:98:26:a5:d7:
20:eb:e1:ca:0a:20:9d:cd:9e:50:bd:07:45:d5:61:7d:bf:65:
c5:a9:1d:6b:3a:be:44:6b:e5:3f:34:2d:a9:10:5e:41:99:46:
a5:89:5b:e7:8e:52:d7:1d:00:4d:5e:83:df:67:15:2c:0f:7d:
5f:b7:30:d2:ac:6d:90:df:95:e7:ac:4e:25:77:80:b4:73:1c:
c9:6e:b5:2f:6a:c1:a0:ec:5a:37:01:b6:8c:54:4b:55:f6:33:
c8:08:a1:53:5d:97:7b:59:c7:27:e6:f5:72:ec:40:3e:2e:9e:
0c:0a:1c:bb:4d:16:96:db:07:d4:c8:bc:04:05:9a:1b:90:6b:
82:64:bc:4e:9f:4f:34:ac:f9:06:94:b0:25:91:1f:4d:c4:4b:
27:3b:51:8b:f2:aa:92:94:1f:c7:84:07:aa:1c:3b:75:77:b9:
4c:4d:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org