Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43043.roa
File: AS43043.roa (raw, json)
Hash identifier: D4J9xLxRKf42H31Zu71llFl7KJTZ2a4GXLY40oGVfo0=
Subject key identifier: 2B:91:D7:7E:B8:7D:CF:34:A2:1A:3B:48:BF:9D:62:F0:5A:4E:0D:C1
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 0748412D6CAAF4F461E406ABA80B2D7F2A458B3A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43043.roa
Signing time: Fri 11 Nov 2022 11:39:12 +0000
ROA not before: Fri 11 Nov 2022 11:34:12 +0000
ROA not after: Fri 10 Nov 2023 11:39:12 +0000
asID: 43043
IP address blocks: 191.96.11.0/24 maxlen: 24
191.96.22.0/24 maxlen: 24
191.96.68.0/24 maxlen: 24
191.96.94.0/24 maxlen: 24
191.96.142.0/24 maxlen: 24
191.96.193.0/24 maxlen: 24
191.96.229.0/24 maxlen: 24
191.96.233.0/24 maxlen: 24
191.101.113.0/24 maxlen: 24
191.101.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:48:41:2d:6c:aa:f4:f4:61:e4:06:ab:a8:0b:2d:7f:2a:45:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Nov 11 11:34:12 2022 GMT
Not After : Nov 10 11:39:12 2023 GMT
Subject: CN=2B91D77EB87DCF34A21A3B48BF9D62F05A4E0DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:af:f2:0c:35:cb:15:75:dd:c9:0a:33:e8:
d8:66:2a:dd:a0:07:4c:d0:3b:a3:78:2b:8f:c4:71:
39:1f:d6:47:40:de:20:84:f1:9d:37:7a:8e:ce:37:
9c:70:4a:57:d2:70:0b:0b:6d:83:fc:0e:98:8e:bf:
7f:53:62:c1:7f:99:5b:f0:80:7c:b6:09:32:bb:37:
c6:31:db:d0:bc:2e:f8:e8:a2:b8:2d:88:d4:b0:e8:
db:b2:7d:19:54:7b:d5:35:02:78:9b:e4:70:00:14:
77:05:9f:c8:0f:34:d3:f8:00:c7:77:e3:46:97:43:
3f:0d:65:83:4c:e0:3c:95:2c:39:af:de:40:2d:50:
05:17:a3:c1:c5:68:6b:42:53:46:2b:cf:37:38:e9:
a9:b8:60:5b:40:f7:67:5a:74:85:22:fd:28:dd:de:
0d:a7:6b:41:ba:03:98:e3:2a:e8:4a:f8:60:c0:7d:
6b:5e:72:ae:7e:c8:58:8c:97:16:8a:84:c2:fb:a0:
42:b6:04:92:cf:3e:88:65:9c:98:df:d4:02:42:1e:
82:33:67:75:c7:d4:8c:94:a0:87:d2:33:92:5f:5d:
e6:6a:bf:46:9c:76:6b:21:6e:08:8a:ab:78:79:c3:
1d:e7:33:0d:a7:e6:00:e7:d2:6d:17:5a:bd:bb:26:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:D7:7E:B8:7D:CF:34:A2:1A:3B:48:BF:9D:62:F0:5A:4E:0D:C1
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS43043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.11.0/24
191.96.22.0/24
191.96.68.0/24
191.96.94.0/24
191.96.142.0/24
191.96.193.0/24
191.96.229.0/24
191.96.233.0/24
191.101.113.0/24
191.101.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:80:a5:e0:f6:7e:46:9a:57:e0:cd:69:41:bf:ce:75:af:a1:
ee:b9:55:8e:33:fc:96:0f:1f:9b:3d:82:08:a5:e7:76:b4:09:
12:da:ef:c7:5d:76:73:93:f9:9a:22:51:40:c9:ef:17:b2:90:
a7:0b:11:ca:99:20:93:79:e8:9b:34:fb:4e:1b:d0:22:bd:d0:
4d:61:18:30:66:0f:81:06:60:bb:b5:8b:20:95:f0:87:98:9c:
c8:44:35:6e:e5:a6:5d:55:1a:85:85:4b:0c:6d:a4:a2:0c:4a:
81:74:d1:48:63:47:11:80:17:03:bb:42:3b:73:2f:ff:42:59:
90:1a:e3:37:11:13:51:22:dd:b4:92:b8:46:4e:d3:17:e0:f2:
e6:bf:54:ab:a7:ab:8e:b2:dd:6f:a8:ed:46:ba:75:a1:36:dc:
c8:7d:5c:67:ee:c7:34:7b:7c:e9:67:ea:44:d0:62:4d:cf:96:
b3:c2:40:4b:dd:98:8a:01:5a:d9:9f:f6:77:b5:50:d8:2c:bb:
df:09:f0:e6:b5:b8:5c:18:60:34:49:46:b5:cd:b5:b5:6e:6f:
22:07:2f:77:00:f8:14:ba:fd:09:4c:6d:50:e3:cd:ae:f7:67:
5c:b4:9f:97:b3:2f:3c:83:d3:2e:64:cd:e7:9b:9c:11:2c:ca:
5b:b8:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org