Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30823.roa
File: AS30823.roa (raw, json)
Hash identifier: KES4WaNavUlIqSeoRPneCcFtmVHo1+0188tukl+glvw=
Subject key identifier: 2D:B2:B9:C1:E6:23:D7:04:81:70:78:B3:C7:58:4E:CE:FE:17:1C:42
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 5091D68E907DD01C69696D12DF9D25D537CCA73A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30823.roa
Signing time: Sun 27 Nov 2022 12:00:11 +0000
ROA not before: Sun 27 Nov 2022 11:55:11 +0000
ROA not after: Sun 26 Nov 2023 12:00:11 +0000
asID: 30823
IP address blocks: 45.137.116.0/24 maxlen: 24
45.137.117.0/24 maxlen: 24
45.137.118.0/24 maxlen: 24
179.61.237.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
185.173.34.0/24 maxlen: 24
191.96.15.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.58.0/24 maxlen: 24
191.101.74.0/23 maxlen: 24
191.101.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:91:d6:8e:90:7d:d0:1c:69:69:6d:12:df:9d:25:d5:37:cc:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 27 11:55:11 2022 GMT
Not After : Nov 26 12:00:11 2023 GMT
Subject: CN=2DB2B9C1E623D704817078B3C7584ECEFE171C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:cd:c2:20:4c:22:c6:5c:32:ed:72:4e:c2:
a1:24:f1:a3:08:4a:b6:c2:19:38:6e:32:99:0c:8d:
71:d2:e7:6c:04:e9:8a:09:46:4e:02:cd:a6:0a:73:
12:41:69:d3:00:19:2c:9b:e4:74:fe:f4:db:e8:8c:
cd:21:8e:46:55:bc:c6:79:b4:28:06:4e:0f:df:e2:
97:f0:c1:31:f3:8a:a5:f1:ad:cf:46:c5:1e:31:76:
22:9c:3c:13:2d:66:38:e8:04:60:d6:62:5c:54:94:
ca:05:2e:4f:8f:8e:c6:28:5c:e6:c9:40:35:68:4d:
b0:e5:1f:31:32:87:e7:50:80:02:af:9d:ac:5e:c0:
32:1a:fb:34:1c:e8:1d:39:ed:d9:71:ef:0e:70:c5:
d0:82:28:d3:7e:c4:01:ee:f9:6b:a9:eb:ef:18:43:
eb:11:df:91:84:cc:1e:50:4b:29:fb:cb:ad:b7:fb:
24:64:3f:70:36:8d:45:94:22:09:c7:13:bc:b2:fd:
3c:9e:de:12:a0:d9:7e:f4:02:f6:fa:2c:2b:b6:bb:
9c:78:c0:49:84:44:fc:b2:54:a1:6e:4d:84:8c:55:
b0:d2:9d:fc:bb:83:0d:68:fb:e1:c2:ce:71:a7:7b:
5d:5a:e4:51:7e:d3:8d:e0:25:d4:4c:22:55:c5:f9:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:B9:C1:E6:23:D7:04:81:70:78:B3:C7:58:4E:CE:FE:17:1C:42
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.116.0-45.137.118.255
179.61.237.0/24
181.214.240.0/24
185.173.34.0/24
191.96.15.0/24
191.96.24.0/24
191.96.58.0/24
191.101.74.0/23
191.101.206.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c1:cc:86:78:0c:ca:4b:9b:23:eb:1f:51:f2:ae:3f:13:56:
7b:50:70:df:a9:f9:2c:3f:fb:65:22:48:ac:57:04:2d:25:bc:
fd:00:07:31:80:0b:ab:2d:92:05:5f:41:7d:31:7d:87:be:de:
c3:58:91:18:50:2e:bc:5d:ca:af:bc:af:42:15:05:e9:b2:7e:
50:dc:f2:dd:4c:05:56:56:84:a2:9a:0f:44:cf:d9:ab:2e:65:
d4:a1:9d:52:a4:be:25:92:74:56:2a:8f:93:b8:6b:47:df:de:
26:0a:17:99:33:22:e8:2c:f2:1e:9c:80:1d:1e:e9:9b:a4:bc:
b7:c5:7e:c1:94:77:8b:81:da:10:79:40:be:ce:05:d9:a4:00:
e0:fa:46:61:f5:77:99:f9:16:46:7f:11:ad:57:98:58:23:d7:
f3:f1:cc:ac:83:de:3b:d4:28:4c:c8:22:e4:cc:c4:84:04:94:
81:01:26:ae:c1:02:2f:5a:da:24:ba:9f:5a:63:63:ab:7b:a8:
ff:68:4e:33:0a:9c:7b:ec:6a:03:8b:83:6a:60:fd:24:8c:51:
c5:1c:1f:8a:9d:d8:13:5e:a8:c5:97:a2:ca:3b:1c:dc:d8:d3:
f6:da:cf:1f:be:05:1f:f7:d3:e9:50:ea:27:25:23:26:ee:81:
e7:35:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org