Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60140.roa
File: AS60140.roa (raw, json)
Hash identifier: i4AH4NDgCWu4o5hhNUjhUMmgv8owZWGmSS3PLpds1b8=
Subject key identifier: EE:86:3F:3D:F2:A7:1F:D7:8F:E9:19:26:EB:A2:A4:8F:36:E1:F0:09
Certificate issuer: /CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Certificate serial: 0B5C74E006B33A8565EF7A7155454E8A490E91D6
Authority key identifier: 4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60140.roa
Signing time: Mon 04 Jul 2022 12:31:32 +0000
ROA not before: Mon 04 Jul 2022 12:26:32 +0000
ROA not after: Mon 03 Jul 2023 12:31:32 +0000
asID: 60140
IP address blocks: 181.41.216.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
191.96.6.0/24 maxlen: 24
191.96.7.0/24 maxlen: 24
191.101.9.0/24 maxlen: 24
191.101.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5c:74:e0:06:b3:3a:85:65:ef:7a:71:55:45:4e:8a:49:0e:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6cada5c0b2eec80ca12c154cee05603b845dfe
Validity
Not Before: Jul 4 12:26:32 2022 GMT
Not After : Jul 3 12:31:32 2023 GMT
Subject: CN=EE863F3DF2A71FD78FE91926EBA2A48F36E1F009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:52:63:50:1f:08:17:51:e0:4e:b3:f0:ad:
3a:bf:54:09:e8:b5:ef:f9:bc:5d:92:a9:4c:6f:8b:
3f:ce:7e:e0:f9:17:ad:5c:c3:8b:3f:7a:97:14:e6:
0d:19:e4:ae:a4:0f:44:75:40:9f:c3:03:33:a3:84:
52:0f:88:cd:10:b2:85:5d:8f:1d:45:56:08:78:95:
7f:a4:e1:85:b1:e7:72:a9:c5:28:ae:b5:35:90:bc:
01:94:b9:e4:0b:34:52:68:62:f7:15:ae:77:88:37:
65:8f:90:28:55:81:15:2b:15:13:e8:61:78:bf:e2:
5e:b9:ca:42:13:3e:8b:16:11:79:44:30:10:16:ff:
53:70:29:2b:95:68:7e:fa:cb:3e:63:a0:a7:94:9f:
39:7e:64:0d:b4:aa:55:b2:78:35:7a:21:12:9b:70:
43:62:15:c4:ab:1e:9a:64:77:3f:ab:d1:a5:e1:75:
89:9c:c4:23:e5:3b:7f:74:aa:aa:75:71:18:98:e9:
b0:57:cf:3b:71:f7:5c:26:ff:28:51:a6:39:3d:76:
80:ff:cf:d3:fa:72:fa:52:11:eb:7c:e3:ce:a6:7f:
57:fe:01:54:53:75:c2:30:7c:e7:26:54:17:b3:b6:
12:01:6d:7e:17:26:85:f2:69:9a:94:f9:20:70:40:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:3F:3D:F2:A7:1F:D7:8F:E9:19:26:EB:A2:A4:8F:36:E1:F0:09
X509v3 Authority Key Identifier:
keyid:4F:6C:AD:A5:C0:B2:EE:C8:0C:A1:2C:15:4C:EE:05:60:3B:84:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/4F6CADA5C0B2EEC80CA12C154CEE05603B845DFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ytpcCy7sgMoSwVTO4FYDuEXf4.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60140.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.216.0/24
191.96.3.0/24
191.96.6.0/23
191.101.9.0/24
191.101.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:78:fe:96:39:2a:35:49:c1:d6:5e:74:56:89:96:ea:99:6f:
05:6c:00:78:22:73:48:af:4d:20:de:9a:06:80:df:a1:94:2b:
53:89:33:3f:ed:23:30:16:89:5d:07:0f:ab:1d:24:80:55:05:
98:2f:2e:37:b9:21:3b:9c:21:1f:ad:d7:97:f7:eb:55:c6:d4:
a8:fe:18:b1:d2:11:d2:a1:ab:b4:76:29:b9:0d:8d:2a:1c:51:
ec:69:41:da:7f:c4:50:b9:61:05:98:62:7c:46:f1:61:75:bf:
39:a7:f7:7f:08:0b:78:ef:10:2e:d5:ac:ff:c6:99:7c:82:c4:
00:5c:aa:33:76:52:14:f6:65:8e:8b:40:52:1b:35:87:c2:2a:
c3:6a:aa:5a:00:42:b3:f9:55:91:82:6c:13:18:bc:4d:e9:ca:
31:6b:6d:b2:48:b1:19:90:c6:ef:e8:59:4e:48:38:23:93:e0:
8f:4c:55:be:09:08:cc:23:1e:1a:bd:3e:e9:a6:e5:75:21:91:
7d:09:6b:fc:5a:42:44:a5:04:7a:60:0b:00:b8:22:3a:6e:95:
ec:a0:43:57:45:8e:f3:c3:e5:f4:a8:94:13:e4:10:76:3a:26:
fa:4c:6a:d6:7e:3b:45:c5:16:14:75:96:ed:19:b8:fd:43:50:
bf:c7:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org