Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400039.roa
File: AS400039.roa (raw, json)
Hash identifier: LYfkem43HE1fU0fX3gUd3mJwB9Bf/MKz0GnRrsPKjqs=
Subject key identifier: 65:BD:23:80:32:E5:5D:B1:E0:B8:58:F5:7E:B7:2D:8E:78:5B:1F:1A
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 27D3C962C79125612829BAF337FFCF22A7360E2C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400039.roa
Signing time: Sat 27 Aug 2022 09:44:48 +0000
ROA not before: Sat 27 Aug 2022 09:39:48 +0000
ROA not after: Sat 26 Aug 2023 09:44:48 +0000
asID: 400039
IP address blocks: 5.181.129.0/24 maxlen: 24
181.215.245.0/24 maxlen: 24
191.96.197.0/24 maxlen: 24
191.101.57.0/24 maxlen: 24
193.31.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:c9:62:c7:91:25:61:28:29:ba:f3:37:ff:cf:22:a7:36:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:39:48 2022 GMT
Not After : Aug 26 09:44:48 2023 GMT
Subject: CN=65BD238032E55DB1E0B858F57EB72D8E785B1F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:f7:a7:9c:b3:47:32:b9:e1:5c:81:da:74:
3e:8c:b5:ab:2b:d2:ee:e7:a3:89:df:d0:2e:3e:ca:
38:72:d7:91:6c:2b:f6:b9:3c:59:72:1a:2a:cc:e5:
de:cf:91:7a:35:08:fe:8d:2b:e9:c0:7f:26:78:15:
f2:ec:e9:86:4b:8f:8b:ca:c3:b2:33:63:37:44:36:
7c:1d:1c:35:0e:cc:32:21:48:13:dd:77:92:23:94:
85:d0:74:5d:da:f3:3e:41:52:e0:ac:7d:20:08:1a:
0e:a3:c9:e7:60:ce:8c:6f:ff:34:25:49:aa:72:00:
5e:0c:51:58:ac:1b:28:50:be:a7:c2:8d:0c:37:ee:
f2:2b:d2:03:b4:18:59:75:dc:ae:aa:e5:41:23:e1:
99:22:73:fc:ff:4d:e1:73:0f:51:76:0d:d6:6b:69:
ac:e5:ca:c7:62:ad:a7:44:61:51:e2:b2:32:6d:3f:
51:90:90:33:a0:8e:e4:89:dd:a5:0a:a6:24:7b:87:
3b:1b:88:dd:38:9a:6b:1c:14:b7:85:05:cb:30:a8:
f3:26:cc:e1:0d:2b:20:aa:ac:52:ad:c9:34:0a:82:
70:84:7a:0e:f0:16:35:c3:ed:ad:08:f7:11:0f:e7:
60:2b:85:4b:5b:e3:92:fe:59:90:5f:5b:2c:68:9f:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:23:80:32:E5:5D:B1:E0:B8:58:F5:7E:B7:2D:8E:78:5B:1F:1A
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.129.0/24
181.215.245.0/24
191.96.197.0/24
191.101.57.0/24
193.31.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:79:d3:7d:57:4c:1f:13:ed:6f:ac:32:c9:98:e4:d1:8f:d6:
a1:8c:0b:12:5d:d2:d2:fd:06:ff:31:aa:38:f3:13:af:d0:3d:
3b:76:8e:50:68:ae:f7:42:0b:44:4e:44:98:1c:07:6b:42:13:
43:bd:0a:ee:e8:7f:e9:1e:7c:db:67:58:73:e7:d6:5f:ab:d0:
79:76:8f:ac:cf:ca:ce:05:5a:8c:d5:39:e5:b9:1a:1d:68:12:
c2:c4:15:82:f5:f7:ea:d9:d5:77:b9:4f:5c:24:cb:23:22:65:
1d:e0:66:64:65:8d:9a:89:e3:4c:b1:4e:20:24:b0:40:e4:2a:
2d:34:b2:f7:79:82:f6:af:af:bf:0b:ad:57:c2:9f:94:f5:08:
da:fd:fe:98:2f:0b:92:8c:e0:e7:3c:61:42:5a:65:20:0b:59:
0e:0f:a3:3e:95:f0:a5:47:f8:91:7b:4f:6c:44:f4:8d:32:9c:
50:4d:c8:db:05:aa:d0:b7:d1:9f:a5:cd:e2:b5:ad:37:e9:1a:
d1:c4:92:90:e6:1c:bd:b2:d8:ce:1f:f3:b0:0a:0b:d3:54:42:
ad:31:7b:82:d4:0d:01:d5:51:ad:4d:99:2b:02:6d:49:8c:1f:
33:69:48:09:22:de:95:d7:a1:19:a6:ff:57:4a:83:98:d5:c9:
5f:93:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org