Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa
File: AS33696.roa (raw, json)
Hash identifier: rr9h9XHhHlGIXhMntFCLFSbpl6vBvIxY18VyQW2gmXA=
Subject key identifier: DF:44:2F:89:98:2D:1D:55:F6:4F:39:E7:34:AB:A1:A6:87:30:AE:F6
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 51E17BAD9C63C22853912D9A4C1AD816D0234AB3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa
Signing time: Tue 15 Nov 2022 13:32:25 +0000
ROA not before: Tue 15 Nov 2022 13:27:25 +0000
ROA not after: Tue 14 Nov 2023 13:32:25 +0000
asID: 33696
IP address blocks: 85.209.179.0/24 maxlen: 24
179.61.150.0/24 maxlen: 24
179.61.154.0/24 maxlen: 24
181.214.39.0/24 maxlen: 24
181.214.41.0/24 maxlen: 24
185.170.42.0/24 maxlen: 24
185.172.57.0/24 maxlen: 24
191.96.197.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e1:7b:ad:9c:63:c2:28:53:91:2d:9a:4c:1a:d8:16:d0:23:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 15 13:27:25 2022 GMT
Not After : Nov 14 13:32:25 2023 GMT
Subject: CN=DF442F89982D1D55F64F39E734ABA1A68730AEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:30:b8:d0:ab:ff:57:5b:41:3f:d4:16:0a:
26:bb:af:6c:4c:13:5f:e9:30:6f:19:41:6a:fa:20:
1e:c2:5c:19:ca:68:72:d1:10:b8:d8:ec:fa:b3:74:
6b:d6:2f:1d:c2:16:da:7b:29:1c:5b:4e:f7:06:14:
6f:5b:ec:40:93:03:f0:ba:dc:eb:0b:1d:3f:fc:5b:
e2:54:75:cc:be:c0:83:6c:bd:4d:30:bb:3c:19:aa:
09:eb:0f:7d:16:46:8d:c1:4e:3b:2b:0e:b5:38:50:
cf:f5:5e:21:ed:11:bb:e2:21:2c:33:60:c6:a0:9b:
6a:ca:dc:3f:3e:43:f3:fe:b1:7b:18:85:9f:78:52:
9d:c7:cc:a9:dd:bc:87:be:67:92:8c:28:3b:3b:be:
9d:d6:80:62:1e:d6:d4:a4:ac:91:56:61:b4:b5:8a:
27:6b:60:18:5c:39:e2:6d:5c:5e:78:95:4b:ef:fb:
ca:dd:8e:90:76:06:05:72:ad:3c:9d:ac:6f:e7:32:
47:97:b7:06:8c:4a:7a:44:24:ce:6e:70:05:3f:3b:
2b:c2:48:cb:6c:ea:a3:09:6f:9e:0e:25:40:f9:f7:
6a:d2:0c:e7:31:5c:d7:40:6c:fb:78:9e:94:1b:53:
77:b7:28:cd:fa:2e:3d:2b:15:f4:83:d6:16:b0:f2:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:2F:89:98:2D:1D:55:F6:4F:39:E7:34:AB:A1:A6:87:30:AE:F6
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS33696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.179.0/24
179.61.150.0/24
179.61.154.0/24
181.214.39.0/24
181.214.41.0/24
185.170.42.0/24
185.172.57.0/24
191.96.197.0/24
191.96.204.0/24
191.101.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a9:9f:71:24:06:2e:c9:43:ce:2d:d7:3f:83:fb:98:4e:7b:
77:6e:fa:8c:5e:8c:2d:29:87:38:0f:1a:be:00:3c:08:8a:66:
05:ff:6b:5d:c1:f5:2e:42:98:2c:36:fa:90:9a:a5:d9:84:b8:
3f:94:b0:37:7e:0d:3f:72:07:e8:dc:4f:84:5f:d1:7b:04:65:
48:be:7c:f4:54:5b:56:5b:a6:9d:7b:ab:72:b9:ac:6e:f0:43:
15:04:8f:ce:2f:54:ed:48:19:38:51:90:de:b5:a4:48:6a:1b:
7b:a0:9e:91:54:fb:65:d3:c5:e8:8b:84:58:a0:34:d6:7e:11:
b4:df:1c:70:1c:98:15:ee:ac:f3:9d:f6:54:1d:c5:3b:fd:2f:
eb:f5:b5:c8:9c:ea:60:8b:fa:71:f9:62:4e:67:a5:06:ba:b7:
21:0c:93:10:ab:0d:27:a3:e0:a9:69:13:a8:38:87:aa:61:63:
1b:39:8b:39:e0:70:59:db:7f:d9:8d:10:ff:b0:e3:00:42:de:
ce:47:15:30:29:a5:c8:96:a9:91:87:d9:95:af:76:20:2b:07:
d9:86:bb:73:7c:fd:dd:61:ce:76:d7:4e:53:aa:fb:34:d4:87:
eb:4e:93:1a:29:5a:39:bc:c8:08:ce:fe:f0:4c:1a:ce:e7:55:
48:6d:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org