Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: s/36b50EWzB8o01lgRXBAufs2QTq6X/op2vewnb7y8A=
Subject key identifier: 42:2A:79:3A:A1:13:75:F9:F0:4B:F7:F7:0C:0F:C1:33:29:43:FE:A5
Certificate issuer: /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial: 595079CD0A7905B1DE404403B3D80699133A8441
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54252.roa
Signing time: Sat 27 Aug 2022 09:50:16 +0000
ROA not before: Sat 27 Aug 2022 09:45:16 +0000
ROA not after: Sat 26 Aug 2023 09:50:16 +0000
asID: 54252
IP address blocks: 181.214.105.0/24 maxlen: 24
181.214.220.0/24 maxlen: 24
181.214.232.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.35.0/24 maxlen: 24
181.215.73.0/24 maxlen: 24
181.215.174.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.208.0/24 maxlen: 24
181.215.219.0/24 maxlen: 24
191.96.29.0/24 maxlen: 24
191.96.84.0/24 maxlen: 24
191.96.85.0/24 maxlen: 24
191.96.86.0/24 maxlen: 24
191.96.87.0/24 maxlen: 24
191.96.157.0/24 maxlen: 24
191.101.17.0/24 maxlen: 24
191.101.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:50:79:cd:0a:79:05:b1:de:40:44:03:b3:d8:06:99:13:3a:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Validity
Not Before: Aug 27 09:45:16 2022 GMT
Not After : Aug 26 09:50:16 2023 GMT
Subject: CN=422A793AA11375F9F04BF7F70C0FC1332943FEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:e1:22:5a:2f:43:c7:15:b5:7c:8d:38:6b:
37:d3:6b:16:ee:15:0d:01:81:57:e0:a7:52:8d:3b:
5d:38:57:5e:f4:b9:73:42:82:04:dd:a4:75:f6:51:
d7:78:ea:bd:25:b4:02:f4:51:f3:46:f3:52:85:15:
71:f7:6c:0d:06:14:d2:40:1e:97:8e:a4:ae:33:1e:
59:72:c4:45:bf:ee:8b:0c:53:5a:33:f0:6f:de:49:
bc:20:98:70:31:cd:78:fa:41:ec:f7:77:ac:19:02:
de:7a:9e:b1:e6:17:70:d8:fe:3a:b3:a4:b9:fd:9f:
f1:d9:7e:d7:38:e9:ea:c4:a0:9b:14:2d:4f:ae:82:
17:06:f3:c0:78:5d:d6:38:1a:41:67:26:ba:7f:3b:
bf:fd:9c:ae:87:47:7e:f2:a4:07:33:af:31:fc:b0:
d7:d1:88:6a:a2:3c:74:64:8a:43:d8:3c:9d:1c:bc:
8d:67:ed:a2:40:1b:d5:ac:06:28:dc:1c:3e:04:bb:
fb:2e:76:9c:d0:15:4c:1b:69:20:ec:88:3c:65:be:
d0:d8:8b:2c:10:68:70:4c:ea:e6:2e:16:3b:da:15:
02:54:23:dc:57:f0:9d:2e:97:43:18:46:68:88:ef:
76:85:4a:a6:4a:ac:0b:45:e5:df:99:d5:3c:43:2b:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:79:3A:A1:13:75:F9:F0:4B:F7:F7:0C:0F:C1:33:29:43:FE:A5
X509v3 Authority Key Identifier:
keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.105.0/24
181.214.220.0/24
181.214.232.0/24
181.214.250.0/24
181.215.35.0/24
181.215.73.0/24
181.215.174.0/24
181.215.190.0/24
181.215.208.0/24
181.215.219.0/24
191.96.29.0/24
191.96.84.0/22
191.96.157.0/24
191.101.17.0/24
191.101.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:12:ff:d1:0a:32:51:31:d9:23:ea:97:eb:ab:4c:56:97:3d:
5c:e5:d1:69:d4:54:6a:a3:3e:ac:62:97:b4:1b:8e:04:99:40:
b8:79:77:a5:f5:86:a2:82:45:32:0b:60:c4:75:3a:75:a7:56:
a0:ba:c1:d8:e0:ea:45:94:0c:fb:b9:f6:53:50:16:7a:54:b7:
98:87:a7:68:14:b0:7e:fd:e4:ed:2f:83:b1:a1:cf:7f:b8:75:
38:24:9a:c1:71:dc:22:26:dc:aa:1b:f9:a9:d8:dd:37:9c:f1:
d8:a8:68:c6:d7:f4:76:50:af:b4:92:8a:ac:2f:4e:fb:55:4e:
29:05:b1:f3:52:a2:af:31:71:f7:74:34:c8:f5:3a:4c:40:df:
df:6e:0f:37:31:e6:fe:9d:d3:0a:80:2d:95:1a:51:63:f1:52:
43:33:4d:07:42:7a:d3:9c:3f:ba:58:ae:f4:88:d8:27:ea:fb:
8f:ac:3f:c5:c3:6f:3a:49:78:e0:06:11:0c:3d:ad:32:b0:c2:
29:f0:71:de:24:2a:0a:78:ca:2a:b3:1e:02:31:39:b3:5a:f7:
e7:a1:6b:76:19:ee:33:ad:5a:bb:90:e3:c8:d2:85:b2:22:d0:
60:c0:99:1f:6b:76:fd:bb:48:e6:b5:0e:88:c8:aa:17:fb:62:
21:c8:3f:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWVB5zQp5BbHeQEQDs9gGmRM6hEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTQ1MTZaFw0yMzA4MjYwOTUwMTZaMDMxMTAvBgNV
BAMTKDQyMkE3OTNBQTExMzc1RjlGMDRCRjdGNzBDMEZDMTMzMjk0M0ZFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lOEiWi9DxxW1fI04azfTaxbu
FQ0BgVfgp1KNO104V170uXNCggTdpHX2Udd46r0ltAL0UfNG81KFFXH3bA0GFNJA
HpeOpK4zHllyxEW/7osMU1oz8G/eSbwgmHAxzXj6Qez3d6wZAt56nrHmF3DY/jqz
pLn9n/HZftc46erEoJsULU+ughcG88B4XdY4GkFnJrp/O7/9nK6HR37ypAczrzH8
sNfRiGqiPHRkikPYPJ0cvI1n7aJAG9WsBijcHD4Eu/sudpzQFUwbaSDsiDxlvtDY
iywQaHBM6uYuFjvaFQJUI9xX8J0ul0MYRmiI73aFSqZKrAtF5d+Z1TxDK9DrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQip5OqETdfnwS/f3DA/BMylD/qUwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM1NDI1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBzBggrBgEF
BQcBBwEB/wRkMGIwYAQCAAEwWgMEALXWaQMEALXW3AMEALXW6AMEALXW+gMEALXX
IwMEALXXSQMEALXXrgMEALXXvgMEALXX0AMEALXX2wMEAL9gHQMEAr9gVAMEAL9g
nQMEAL9lEQMEAL9l3zANBgkqhkiG9w0BAQsFAAOCAQEADhL/0QoyUTHZI+qX66tM
Vpc9XOXRadRUaqM+rGKXtBuOBJlAuHl3pfWGooJFMgtgxHU6dadWoLrB2ODqRZQM
+7n2U1AWelS3mIenaBSwfv3k7S+DsaHPf7h1OCSawXHcIibcqhv5qdjdN5zx2Kho
xtf0dlCvtJKKrC9O+1VOKQWx81KirzFx93Q0yPU6TEDf324PNzHm/p3TCoAtlRpR
Y/FSQzNNB0J605w/uliu9IjYJ+r7j6w/xcNvOkl44AYRDD2tMrDCKfBx3iQqCnjK
KrMeAjE5s1r356FrdhnuM61au5DjyNKFsiLQYMCZH2t2/btI5rUOiMiqF/tiIcg/
rg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org