Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400040.roa
File: AS400040.roa (raw, json)
Hash identifier: iOFA/UmdpYNtjDyz4LbMv7PSN0920ZSTWTI5vJohBic=
Subject key identifier: AE:4E:AB:5A:0B:2B:11:09:C8:59:FF:CC:18:C3:81:1F:12:64:62:39
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 4F4B6E35A77D0340F1FD339575D2AC018DF54F2B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400040.roa
Signing time: Sat 27 Aug 2022 09:48:01 +0000
ROA not before: Sat 27 Aug 2022 09:43:01 +0000
ROA not after: Sat 26 Aug 2023 09:48:01 +0000
asID: 400040
IP address blocks: 149.62.40.0/24 maxlen: 24
181.214.84.0/24 maxlen: 24
181.215.198.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4b:6e:35:a7:7d:03:40:f1:fd:33:95:75:d2:ac:01:8d:f5:4f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:43:01 2022 GMT
Not After : Aug 26 09:48:01 2023 GMT
Subject: CN=AE4EAB5A0B2B1109C859FFCC18C3811F12646239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:da:03:2d:7d:25:cd:a4:19:68:5a:d2:6c:
65:72:b9:92:d4:eb:1b:40:85:2f:35:b9:5d:ae:14:
d5:8b:a4:a2:0e:cd:27:c6:7e:24:df:c0:3d:08:31:
04:14:aa:92:25:cb:79:af:cb:b2:f3:c3:fc:de:35:
d5:09:f0:93:e2:89:7b:f8:bb:8a:55:e4:72:d5:b2:
1a:c1:3e:8b:8d:46:15:6b:69:9e:b8:c2:fe:54:ac:
ec:35:bb:c0:4e:fc:25:4e:60:74:55:39:9c:c8:e9:
0e:05:32:1a:a9:97:81:31:55:95:56:8f:87:7d:d4:
fb:1d:33:88:84:1d:7b:88:64:6f:b5:47:a8:ba:de:
60:c0:83:2b:c9:99:71:1c:b0:52:41:c2:d2:11:fe:
7d:6a:d9:31:b0:b6:03:68:1e:33:63:bd:eb:43:41:
9e:de:91:31:d7:bd:0a:49:03:6c:4d:b3:76:09:0c:
b5:1b:54:df:52:37:23:a8:43:66:b2:4d:89:30:d4:
b6:2e:24:a6:6e:1a:86:a3:5e:51:5f:e8:81:45:e9:
8c:98:f8:a8:db:04:cd:a6:b3:a0:f9:19:86:02:58:
39:da:c2:a5:46:05:38:03:bd:8c:d8:65:4e:08:ab:
5a:27:44:0e:47:2f:ba:41:50:c2:7c:e4:1b:1e:63:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:AB:5A:0B:2B:11:09:C8:59:FF:CC:18:C3:81:1F:12:64:62:39
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS400040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.40.0/24
181.214.84.0/24
181.215.198.0/24
191.96.61.0/24
191.96.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6e:d7:3b:de:c9:82:80:3f:e5:e4:5f:a0:c7:9e:0d:57:b7:
d3:9b:34:bb:08:ba:40:28:62:ad:ab:ba:d3:41:1e:47:1d:e8:
ff:c7:39:38:1b:79:8a:4e:60:fd:73:bb:b7:1d:e1:f0:0f:90:
f5:46:a2:f9:5c:55:09:fa:16:b4:43:fc:e4:76:f8:42:8f:d2:
66:a1:2a:59:f3:4d:99:d2:72:b3:99:2b:13:c3:a6:0d:91:20:
e8:ab:60:df:b9:58:54:89:f8:b7:de:66:9c:a4:ee:f9:5c:ce:
85:d5:e5:fc:ed:e4:12:3e:21:10:f8:9c:44:1c:c2:de:03:f4:
1f:62:9f:60:93:69:d8:96:73:fe:4c:cb:b3:f3:2b:3b:ef:10:
84:6f:85:a3:b3:df:4d:b4:b9:3c:cf:87:f8:02:ac:bb:03:5f:
75:5b:18:27:03:ca:1a:b8:81:ea:e6:4b:0f:b5:97:5d:98:d3:
cc:61:b7:6e:c5:7b:21:89:f0:7d:5e:b3:8f:4e:a8:df:1d:e1:
d7:ad:2f:4c:5e:84:6b:5e:87:39:3f:14:b5:ca:03:5f:da:e5:
8c:c2:0c:fc:58:4c:30:76:88:42:1b:2c:48:59:55:99:67:08:
43:fd:5b:a6:2f:f0:f7:76:12:d9:fd:97:0c:2c:56:12:c1:12:
58:71:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org