Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: 9E1Q9aZKXdbuMkUT6en5ifXozJVfR+UGyan6hujZNZU=
Subject key identifier: F8:8C:92:23:2D:82:51:9E:25:F1:AE:CD:D9:D8:AD:6C:50:CE:A0:B4
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 60B8D4D42AE1968348AB59796CDB7D624B875BCF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42831.roa
Signing time: Tue 13 Sep 2022 06:35:55 +0000
ROA not before: Tue 13 Sep 2022 06:30:55 +0000
ROA not after: Tue 12 Sep 2023 06:35:55 +0000
asID: 42831
IP address blocks: 5.181.124.0/24 maxlen: 24
5.252.78.0/24 maxlen: 24
37.143.61.0/24 maxlen: 24
181.215.25.0/24 maxlen: 24
181.215.226.0/24 maxlen: 24
181.215.229.0/24 maxlen: 24
191.96.110.0/24 maxlen: 24
191.96.209.0/24 maxlen: 24
191.101.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b8:d4:d4:2a:e1:96:83:48:ab:59:79:6c:db:7d:62:4b:87:5b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Sep 13 06:30:55 2022 GMT
Not After : Sep 12 06:35:55 2023 GMT
Subject: CN=F88C92232D82519E25F1AECDD9D8AD6C50CEA0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:24:81:97:fa:ae:b2:3a:51:7e:3c:54:32:
be:20:05:d9:65:df:fa:93:f0:0c:f6:86:9e:e3:87:
ba:fe:67:ad:9a:0a:89:d8:cb:1c:b2:ca:17:22:56:
0c:53:50:09:97:38:ed:60:03:d5:3a:50:7a:66:34:
57:84:3f:34:0a:27:cc:0d:29:bd:a5:10:77:69:75:
96:3e:e7:53:eb:2e:85:30:97:61:3f:10:49:5a:af:
9c:65:5e:bf:af:d3:5b:e4:c0:50:3b:b8:26:65:45:
7f:10:9a:bc:ae:db:57:bb:3d:e8:71:97:d2:2e:76:
83:9e:35:36:2d:ff:24:c9:2b:98:6e:fb:49:7f:ec:
39:24:bc:8a:ab:f1:62:32:9a:87:59:b4:22:64:b6:
7e:9d:dc:75:57:c4:fd:42:41:64:e9:34:cd:f0:5c:
04:24:fd:84:a8:7a:3b:c1:f0:ea:dc:28:5e:3d:60:
df:0a:0c:71:48:59:a1:39:cf:1d:4d:bf:40:e1:56:
f6:d3:85:41:bf:95:2f:9f:b2:9a:1a:54:0f:d5:3a:
0c:69:4c:1a:df:4c:99:6a:79:bd:a4:bf:ba:26:d6:
c3:74:d2:3f:4a:a8:6e:ce:5f:42:bc:12:b2:ee:98:
9e:eb:7c:a5:65:80:3a:9c:4c:0e:2b:4d:bc:2a:36:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:92:23:2D:82:51:9E:25:F1:AE:CD:D9:D8:AD:6C:50:CE:A0:B4
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.124.0/24
5.252.78.0/24
37.143.61.0/24
181.215.25.0/24
181.215.226.0/24
181.215.229.0/24
191.96.110.0/24
191.96.209.0/24
191.101.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:75:fb:95:d6:4f:f3:67:dc:ea:8f:00:00:6e:47:d6:bc:56:
a3:7e:9c:0b:21:75:21:8d:a6:41:9a:47:4c:cc:ce:20:d8:fd:
51:2d:54:44:0a:f8:25:33:bc:a7:64:bb:52:62:44:68:33:18:
bb:1a:92:48:39:8e:cd:af:48:68:08:64:72:ee:c9:4a:c2:75:
ce:8b:fa:8a:b4:24:9d:3e:59:57:6d:26:18:6c:2c:36:69:fc:
0e:0c:3b:20:15:29:63:ac:b7:c8:cd:7f:51:77:c1:6c:8b:03:
14:ae:9c:65:65:87:a4:f0:28:93:a8:a8:ca:6e:2f:6c:b7:ab:
62:d5:77:89:cb:e6:16:5f:0f:e7:f6:4e:be:3c:7a:e5:9a:58:
86:1f:9e:89:70:8e:80:4e:e9:0d:fb:d6:bc:3f:fc:a2:7b:0a:
d5:df:e3:a2:d8:4b:e0:ca:a7:bf:8c:36:d4:ae:cc:7a:d7:f9:
47:ea:c0:9c:a9:fe:ed:2c:0a:16:36:1f:d5:92:71:97:ed:97:
37:38:ee:12:9c:bf:a3:61:07:f5:c3:f0:34:f8:7c:1c:e3:61:
7f:59:20:ec:25:65:4b:5b:dc:97:9e:38:4a:03:d9:63:34:7c:
e5:98:4f:bc:e0:e3:37:41:f2:7a:6c:bf:28:25:2a:7c:ad:ac:
70:1c:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org