Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: Z1zxoVeS87Iaf/sJKitqnwRtc+4AuzpwVqJ78K+IbrA=
Subject key identifier: CD:79:BE:03:3B:A1:F0:CE:0B:F2:9C:03:FB:35:1F:0E:FD:CB:B9:0F
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 0410433521EE276B8C9E139BD8FD1738F98C99B5
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397423.roa
Signing time: Thu 27 Oct 2022 10:25:46 +0000
ROA not before: Thu 27 Oct 2022 10:20:46 +0000
ROA not after: Thu 26 Oct 2023 10:25:46 +0000
asID: 397423
IP address blocks: 179.61.194.0/24 maxlen: 24
181.214.133.0/24 maxlen: 24
181.214.152.0/24 maxlen: 24
181.215.47.0/24 maxlen: 24
181.215.49.0/24 maxlen: 24
181.215.242.0/24 maxlen: 24
181.215.243.0/24 maxlen: 24
181.215.244.0/24 maxlen: 24
185.170.57.0/24 maxlen: 24
191.96.101.0/24 maxlen: 24
191.96.155.0/24 maxlen: 24
191.96.166.0/24 maxlen: 24
191.96.186.0/24 maxlen: 24
191.101.30.0/24 maxlen: 24
191.101.166.0/24 maxlen: 24
191.101.172.0/24 maxlen: 24
193.227.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:10:43:35:21:ee:27:6b:8c:9e:13:9b:d8:fd:17:38:f9:8c:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Oct 27 10:20:46 2022 GMT
Not After : Oct 26 10:25:46 2023 GMT
Subject: CN=CD79BE033BA1F0CE0BF29C03FB351F0EFDCBB90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:69:bf:22:f5:1d:d6:7e:24:43:5f:19:74:
14:7d:67:17:b6:ed:c6:78:81:a0:ad:e5:bd:bd:06:
81:b6:a7:94:dc:0c:b9:40:8c:f8:c6:08:e0:46:e5:
a0:70:35:fb:2f:90:ef:6d:e1:c6:03:41:2e:38:39:
77:90:15:5c:cc:96:a5:5b:65:b5:a1:6d:82:ce:9b:
e0:fa:e9:63:30:35:6f:29:02:c8:40:d9:0c:3a:24:
1c:cb:ef:15:7a:63:38:cf:dd:75:39:85:99:da:80:
85:2c:1b:47:ca:22:a2:10:82:26:83:32:21:fd:18:
43:a4:74:dd:d7:e8:c0:a3:6e:7d:76:c6:cd:f0:ee:
f6:73:bf:0a:a5:56:81:2e:87:87:78:97:8d:58:51:
52:ba:d8:47:d4:bf:94:91:25:1a:43:0b:24:34:d8:
1f:df:43:6b:e9:02:fa:ee:63:5c:fe:79:b1:0c:68:
50:72:7e:f7:61:ff:ef:59:61:d5:ec:92:b1:53:a2:
27:f0:dc:0e:35:92:4d:a7:60:f4:8b:1f:49:07:7f:
9e:2b:fc:9a:15:1f:e6:c6:42:75:d5:39:71:bc:c9:
a1:2e:d4:2b:5a:b6:4b:34:d7:5e:72:31:02:13:fa:
77:46:0f:e7:6b:b9:f5:12:40:8a:70:d4:62:85:27:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:BE:03:3B:A1:F0:CE:0B:F2:9C:03:FB:35:1F:0E:FD:CB:B9:0F
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.194.0/24
181.214.133.0/24
181.214.152.0/24
181.215.47.0/24
181.215.49.0/24
181.215.242.0-181.215.244.255
185.170.57.0/24
191.96.101.0/24
191.96.155.0/24
191.96.166.0/24
191.96.186.0/24
191.101.30.0/24
191.101.166.0/24
191.101.172.0/24
193.227.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:78:ee:3e:fc:c1:68:85:60:26:45:69:73:ba:e9:ce:b1:97:
14:e0:7e:27:9d:7a:e1:5d:49:9d:31:a9:6d:39:4f:6d:48:4b:
2f:9a:ca:81:89:0a:38:f5:53:fd:65:d6:5b:de:50:33:5c:20:
fb:79:5e:d5:a7:26:ab:44:42:35:99:98:68:c6:14:d9:b6:ee:
95:84:36:33:a5:6a:6f:34:6b:44:5d:6f:bd:ba:92:5b:30:da:
11:39:58:db:a9:4e:cd:72:66:fb:21:cd:73:a2:84:b8:e4:13:
bd:c0:f0:5b:66:f6:4f:d8:0e:01:50:01:e3:db:8f:41:52:77:
4d:48:d4:ab:b6:05:02:f8:e4:e6:12:c7:f7:ea:8b:14:d0:83:
32:b1:40:eb:36:98:7a:61:57:1f:50:7c:94:1a:d9:c3:4d:1a:
49:96:87:95:dd:16:29:93:57:75:c3:6f:dc:2f:de:20:6a:27:
9b:19:12:f3:15:52:56:ab:ed:0f:90:a5:88:21:ae:5b:48:af:
90:31:e4:8f:0e:51:9c:ce:60:32:92:60:ac:d4:ca:a5:76:8e:
41:95:39:d3:e4:ad:e5:37:e8:21:fa:5f:1c:5c:0c:18:c9:70:
7c:17:dc:cb:f8:3c:71:ee:16:34:56:21:4c:f3:d0:14:ef:dc:
cf:f7:d2:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBBBDNSHuJ2uMnhOb2P0XOPmMmbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMjcxMDIwNDZaFw0yMzEwMjYxMDI1NDZaMDMxMTAvBgNV
BAMTKENENzlCRTAzM0JBMUYwQ0UwQkYyOUMwM0ZCMzUxRjBFRkRDQkI5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zmm/IvUd1n4kQ18ZdBR9Zxe2
7cZ4gaCt5b29BoG2p5TcDLlAjPjGCOBG5aBwNfsvkO9t4cYDQS44OXeQFVzMlqVb
ZbWhbYLOm+D66WMwNW8pAshA2Qw6JBzL7xV6YzjP3XU5hZnagIUsG0fKIqIQgiaD
MiH9GEOkdN3X6MCjbn12xs3w7vZzvwqlVoEuh4d4l41YUVK62EfUv5SRJRpDCyQ0
2B/fQ2vpAvruY1z+ebEMaFByfvdh/+9ZYdXskrFToifw3A41kk2nYPSLH0kHf54r
/JoVH+bGQnXVOXG8yaEu1Ctatks0115yMQIT+ndGD+drufUSQIpw1GKFJ5XRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzXm+Azuh8M4L8pwD+zUfDv3LuQ8wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMzOTc0MjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwewYIKwYB
BQUHAQcBAf8EbDBqMGgEAgABMGIDBACzPcIDBAC11oUDBAC11pgDBAC11y8DBAC1
1zEwDAMEAbXX8gMEALXX9AMEALmqOQMEAL9gZQMEAL9gmwMEAL9gpgMEAL9gugME
AL9lHgMEAL9lpgMEAL9lrAMEAMHjgTANBgkqhkiG9w0BAQsFAAOCAQEAjnjuPvzB
aIVgJkVpc7rpzrGXFOB+J5164V1JnTGpbTlPbUhLL5rKgYkKOPVT/WXWW95QM1wg
+3le1acmq0RCNZmYaMYU2bbulYQ2M6VqbzRrRF1vvbqSWzDaETlY26lOzXJm+yHN
c6KEuOQTvcDwW2b2T9gOAVAB49uPQVJ3TUjUq7YFAvjk5hLH9+qLFNCDMrFA6zaY
emFXH1B8lBrZw00aSZaHld0WKZNXdcNv3C/eIGonmxkS8xVSVqvtD5CliCGuW0iv
kDHkjw5RnM5gMpJgrNTKpXaOQZU50+St5TfoIfpfHFwMGMlwfBfcy/g8ce4WNFYh
TPPQFO/cz/fSYA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org