Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: 33zh7wYQOY8UfCQsjQSJpxcJgPLcssEdGQtgW2VM9ec=
Subject key identifier: D7:1E:EA:3B:F4:84:D7:47:2D:E6:5F:A6:C1:78:A1:22:A9:5C:BB:24
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 43D6A707CC2BBD1390E93E03A40405188A600870
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397373.roa
Signing time: Sat 27 Aug 2022 09:51:09 +0000
ROA not before: Sat 27 Aug 2022 09:46:09 +0000
ROA not after: Sat 26 Aug 2023 09:51:09 +0000
asID: 397373
IP address blocks: 179.61.223.0/24 maxlen: 24
179.61.252.0/24 maxlen: 24
181.41.215.0/24 maxlen: 24
181.214.217.0/24 maxlen: 24
181.215.5.0/24 maxlen: 24
181.215.248.0/24 maxlen: 24
181.215.249.0/24 maxlen: 24
185.172.64.0/24 maxlen: 24
185.172.67.0/24 maxlen: 24
191.96.25.0/24 maxlen: 24
191.96.32.0/24 maxlen: 24
191.96.131.0/24 maxlen: 24
191.96.177.0/24 maxlen: 24
191.96.194.0/24 maxlen: 24
191.96.221.0/24 maxlen: 24
191.96.246.0/24 maxlen: 24
191.101.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d6:a7:07:cc:2b:bd:13:90:e9:3e:03:a4:04:05:18:8a:60:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:46:09 2022 GMT
Not After : Aug 26 09:51:09 2023 GMT
Subject: CN=D71EEA3BF484D7472DE65FA6C178A122A95CBB24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:4b:8a:aa:a6:08:02:b6:a1:f8:f2:7e:8c:
ff:6d:24:fc:46:45:52:ea:94:30:57:15:09:f2:9e:
1c:b1:0d:df:c3:3a:3b:c0:34:bd:8e:85:b4:95:f6:
b0:c6:b2:3e:d6:8b:0b:98:c4:ea:15:d7:38:9c:31:
e8:32:f5:55:e6:55:96:05:d2:18:05:bf:00:64:d5:
16:75:c0:42:4b:63:46:d1:65:a3:e8:42:37:5b:83:
a4:21:0f:d8:a9:81:cf:2d:ac:14:30:28:1e:f7:1c:
3d:63:ac:7f:a9:d0:4f:d3:04:6b:48:65:9d:3c:42:
41:dd:0c:88:3f:e4:9d:a9:b6:dc:25:f5:0e:2b:d7:
34:10:fa:6a:54:da:40:40:e0:f6:f5:11:dd:7b:aa:
50:15:e2:03:44:de:23:84:be:a7:ba:ea:15:25:9a:
67:51:d1:f4:57:4f:5d:72:2b:f4:9d:1f:ee:26:ab:
3e:06:0e:43:d0:45:2d:c5:d7:7f:5f:64:60:8d:fc:
f7:8c:56:67:6b:90:4a:7c:dd:9e:eb:ba:0c:03:b1:
87:21:5c:a4:3c:72:e1:88:da:50:d2:b4:58:b0:4d:
19:44:c6:79:32:85:82:f7:f5:ff:c1:45:39:e1:3e:
84:8e:59:0a:31:d4:a5:5a:e2:14:c8:30:39:7a:be:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:EA:3B:F4:84:D7:47:2D:E6:5F:A6:C1:78:A1:22:A9:5C:BB:24
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.223.0/24
179.61.252.0/24
181.41.215.0/24
181.214.217.0/24
181.215.5.0/24
181.215.248.0/23
185.172.64.0/24
185.172.67.0/24
191.96.25.0/24
191.96.32.0/24
191.96.131.0/24
191.96.177.0/24
191.96.194.0/24
191.96.221.0/24
191.96.246.0/24
191.101.16.0/24
Signature Algorithm: sha256WithRSAEncryption
46:93:62:64:50:6f:1d:16:06:34:3f:56:9a:ed:5c:15:d7:66:
1e:2b:b0:fd:07:29:2a:1f:15:d4:4e:99:97:c1:36:64:30:69:
78:0e:29:66:27:2b:f3:4f:f2:83:e5:7f:e6:1e:f7:bc:e4:8c:
2e:2e:45:eb:08:ef:2d:34:5f:86:33:2d:3f:38:0b:e6:29:c1:
1c:d3:ee:5f:b6:fc:df:ba:0d:37:f8:01:42:5b:a6:c3:38:a6:
d0:b0:b2:6b:23:85:1c:ff:df:e6:dd:3c:50:cd:49:08:2b:22:
5f:02:46:cd:6d:2a:db:8d:ce:25:03:8d:a8:60:e8:d1:72:b5:
93:7d:b3:b3:3b:65:25:5d:33:96:4f:5d:cf:b6:ee:98:86:b2:
03:5c:57:2b:27:c5:13:3a:f8:87:b9:85:9b:7a:ee:05:24:4b:
1f:d4:b6:ab:41:6e:a9:68:26:13:70:c9:ea:9f:c2:f1:74:09:
76:d4:c2:3e:cd:91:58:09:df:f0:5d:f0:81:6e:3c:c3:54:98:
5b:7d:0b:30:60:c0:4a:7b:3a:71:84:d9:e9:8d:f2:f3:4b:97:
80:4e:d6:2b:4b:f7:3d:04:04:a6:12:1d:63:f3:c9:d9:68:e0:
77:06:ca:8a:bf:b4:65:e5:30:ca:c6:32:50:90:ee:a5:0c:b7:
fd:cf:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org