Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32181.roa
File: AS32181.roa (raw, json)
Hash identifier: jmVfZdEX9dl7fl0Xj+gpP95HvlbfazIROlPmB3dw/04=
Subject key identifier: 81:A3:E4:81:C1:57:A3:E8:D7:74:27:06:E4:E7:89:05:14:F0:3A:59
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 79E5037ABC48B632F537D1492D1FDEDBA4912F81
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32181.roa
Signing time: Sat 27 Aug 2022 09:48:39 +0000
ROA not before: Sat 27 Aug 2022 09:43:39 +0000
ROA not after: Sat 26 Aug 2023 09:48:39 +0000
asID: 32181
IP address blocks: 5.252.79.0/24 maxlen: 24
5.252.163.0/24 maxlen: 24
181.214.77.0/24 maxlen: 24
181.214.146.0/24 maxlen: 24
181.214.157.0/24 maxlen: 24
181.214.161.0/24 maxlen: 24
181.214.207.0/24 maxlen: 24
181.214.237.0/24 maxlen: 24
181.215.23.0/24 maxlen: 24
191.96.62.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e5:03:7a:bc:48:b6:32:f5:37:d1:49:2d:1f:de:db:a4:91:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:43:39 2022 GMT
Not After : Aug 26 09:48:39 2023 GMT
Subject: CN=81A3E481C157A3E8D7742706E4E7890514F03A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:e1:33:a0:48:1c:07:c7:26:37:92:1d:8a:
4c:bc:d7:da:4d:8b:d2:2a:29:03:3b:81:32:b6:2d:
34:41:10:43:6c:7c:e6:93:d5:f8:c3:cd:6c:39:cd:
d6:4a:e6:f5:f7:2d:fc:3e:60:bc:25:85:79:21:85:
41:bf:24:82:14:22:95:53:45:37:8d:9c:13:74:d0:
1f:5a:eb:0a:80:34:6f:b9:1c:d1:ba:1e:40:68:33:
f6:6e:3d:6d:35:12:e1:a9:15:f8:fd:04:69:22:d7:
81:64:a6:b7:da:e4:45:58:2c:3a:b4:21:1a:77:26:
39:9b:9f:9b:4c:73:86:44:03:a4:9e:aa:cd:d2:f2:
43:99:0d:c4:3f:45:db:87:69:38:8c:23:76:ec:ac:
12:04:67:20:d8:ad:c8:29:ee:85:06:57:1d:eb:8d:
f4:5b:53:e1:33:aa:3c:df:81:c2:27:11:90:70:52:
f7:71:8c:ea:96:87:4a:64:f8:12:77:35:33:b1:24:
37:2a:bd:da:54:77:34:7d:5d:48:40:1c:f9:7f:31:
a6:78:a9:6d:be:22:b1:43:37:51:1f:48:ba:2e:a9:
93:75:11:39:08:a6:fe:68:64:25:d4:ba:ad:83:33:
b0:01:04:7c:cc:6f:c6:d4:65:89:56:e5:13:71:3c:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:E4:81:C1:57:A3:E8:D7:74:27:06:E4:E7:89:05:14:F0:3A:59
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS32181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.79.0/24
5.252.163.0/24
181.214.77.0/24
181.214.146.0/24
181.214.157.0/24
181.214.161.0/24
181.214.207.0/24
181.214.237.0/24
181.215.23.0/24
191.96.62.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
42:03:8d:18:97:43:c6:1b:e4:a8:31:ea:4f:91:32:66:1b:af:
e8:ca:88:28:50:da:1d:8d:14:20:7e:b6:c0:e5:f2:47:3d:db:
48:56:02:00:14:79:1e:7e:10:57:4f:ed:1a:a7:62:9d:2f:72:
87:94:37:34:25:10:52:64:36:bb:c2:af:93:62:15:96:a9:7e:
c4:fd:01:c7:31:30:ed:ea:87:b5:f2:4e:73:cd:5b:57:76:b9:
d9:bd:9f:72:9d:68:9d:30:ab:04:ff:a0:07:80:34:e0:b1:46:
91:40:0d:da:48:98:cc:e9:d4:d1:7a:27:c9:34:05:ea:a1:79:
aa:31:ea:f5:48:24:07:f5:3f:b0:5d:ba:8a:3c:c6:73:15:39:
75:10:aa:97:e9:45:c1:d2:7e:b2:7f:9d:f9:e9:fa:8e:c2:02:
5f:33:c0:38:a5:35:98:d3:05:d5:34:78:22:45:d8:86:c3:d0:
ad:a4:76:76:96:3b:bb:86:ab:ff:be:a7:ca:35:c5:af:c8:48:
2e:a8:6e:83:28:6e:56:6e:fa:20:a1:62:df:09:15:5d:51:23:
6f:d1:c1:27:ad:3b:3d:f3:7a:03:80:ba:9a:5b:9b:2a:69:b7:
a2:55:b4:2e:64:26:79:5c:2f:9f:3c:78:d5:1f:04:7b:1d:2a:
87:2e:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org