Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: flX+7Pt1aUYju2+uqUTUryxvNpNMhXv0C7mZtsGASgA=
Subject key identifier: D7:7B:ED:16:4A:FE:C5:DC:F6:9F:B4:DA:10:31:C3:57:E8:E5:45:5D
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 6713AD4FB64934E47D5680A368AB1511EBFA6405
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3320.roa
Signing time: Sat 29 Oct 2022 09:25:15 +0000
ROA not before: Sat 29 Oct 2022 09:20:15 +0000
ROA not after: Sat 28 Oct 2023 09:25:15 +0000
asID: 3320
IP address blocks: 92.118.161.0/24 maxlen: 24
179.61.160.0/22 maxlen: 24
185.174.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:13:ad:4f:b6:49:34:e4:7d:56:80:a3:68:ab:15:11:eb:fa:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Oct 29 09:20:15 2022 GMT
Not After : Oct 28 09:25:15 2023 GMT
Subject: CN=D77BED164AFEC5DCF69FB4DA1031C357E8E5455D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:d2:b6:61:bd:2e:1d:4f:00:2b:a8:15:80:
49:8c:b8:c5:f9:66:3e:e4:80:f5:a4:36:25:dc:c7:
45:ff:4e:ab:d0:af:00:eb:99:21:5f:14:76:a4:be:
91:bf:41:5f:4a:c5:ef:59:79:56:f3:0a:6e:24:0a:
83:82:87:44:1c:43:7b:bc:15:47:a7:f6:0a:51:7a:
ae:40:f4:8f:30:bc:87:bc:43:73:38:d4:a0:d5:7f:
b0:f9:a8:e4:c9:51:20:14:15:aa:b1:f2:ea:27:97:
14:df:01:95:ea:86:e7:78:8f:19:18:31:3a:17:86:
6e:f5:5d:69:3b:b7:e8:39:a3:54:cf:9e:0f:bd:7d:
72:a6:b6:13:6b:53:56:b6:f6:f2:59:da:a6:6d:0b:
2c:d0:b9:6a:63:91:2e:92:ae:be:2f:df:2d:8a:3f:
7b:9a:d5:d5:f3:df:12:df:d2:50:02:17:40:93:e0:
21:68:8c:9c:46:84:d2:7d:78:47:e2:d6:c3:74:26:
46:4d:d1:4f:18:86:07:a4:c6:0d:c9:18:0c:53:1e:
9d:c0:94:87:c3:91:38:cc:e4:2f:05:14:c4:d1:45:
8b:cc:23:a1:86:ea:48:cd:0e:0c:db:ca:97:3b:5a:
2a:c8:c4:01:43:6f:45:1d:68:f1:b7:5d:09:37:1d:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:ED:16:4A:FE:C5:DC:F6:9F:B4:DA:10:31:C3:57:E8:E5:45:5D
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.161.0/24
179.61.160.0/22
185.174.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:37:7c:79:7f:65:9c:50:ea:f3:09:8e:ba:4e:20:d3:77:f5:
75:45:a5:49:13:a1:c7:03:2d:4f:5a:8e:5d:e5:91:72:d0:8c:
05:33:5e:31:a0:9f:36:45:a4:e9:c7:2c:08:ad:9e:bd:a5:36:
fc:e9:42:87:b1:d2:70:22:0e:e3:de:79:e5:f7:70:c0:14:46:
4f:6e:6e:56:dc:13:43:d6:05:6e:c8:fc:3c:1a:a0:1b:54:d6:
ab:a2:74:6f:8c:b4:94:2d:95:91:99:42:4b:a9:fc:d6:27:26:
e1:62:ad:b7:1e:6b:69:f2:2d:6f:b2:bc:a0:54:2f:dd:07:5f:
10:47:99:bd:8d:fd:f2:83:48:59:15:3e:5f:5b:2f:7e:e1:1c:
33:30:b9:2b:97:7a:56:61:cc:d6:01:a6:b3:39:a2:51:49:c4:
2f:35:00:2c:64:a1:3a:60:47:d1:59:02:6b:be:cc:ea:d4:10:
34:e2:ce:d3:d0:74:24:2d:54:a6:cd:74:bd:6b:a4:59:70:a7:
81:22:7d:f0:30:69:7f:58:1b:d6:c5:5a:db:c1:5e:c7:c1:8d:
e7:dd:94:4d:98:69:eb:46:1a:41:89:01:3c:2f:07:38:55:b6:
ae:06:6d:eb:6e:1c:1f:b8:f7:43:0d:ce:49:fb:0e:3d:35:ef:
4a:a3:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org