Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: R53AM4H5/K/dboHcGPf7DWftERxGI5yA7PTJY6QWC/g=
Subject key identifier: D5:80:CF:86:69:C9:56:47:0D:57:2E:26:3C:9A:C1:8B:12:10:4E:93
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 0CAB408316902432EA9C9846A15F6F49D4C79089
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS11426.roa
Signing time: Mon 02 Jan 2023 17:06:48 +0000
ROA not before: Mon 02 Jan 2023 17:01:48 +0000
ROA not after: Mon 01 Jan 2024 17:06:48 +0000
asID: 11426
IP address blocks: 181.214.13.0/24 maxlen: 24
191.101.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ab:40:83:16:90:24:32:ea:9c:98:46:a1:5f:6f:49:d4:c7:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 2 17:01:48 2023 GMT
Not After : Jan 1 17:06:48 2024 GMT
Subject: CN=D580CF8669C956470D572E263C9AC18B12104E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:fb:e5:46:d1:24:ad:43:69:fb:fc:12:e5:
c4:eb:64:71:8e:be:a0:c9:e2:22:00:8a:11:46:00:
5f:23:45:38:1d:9c:ad:88:fc:84:19:33:da:74:d6:
31:fb:07:ad:fb:bb:af:64:ac:fc:3a:c7:e3:f5:cb:
10:78:6c:15:a4:62:26:bd:ab:e1:1a:b7:32:fd:c1:
b3:fc:66:b4:c8:6c:eb:73:0a:c5:0c:91:9b:6f:08:
60:d2:03:11:2f:4f:2f:95:1f:2d:60:93:1d:83:36:
a3:b9:da:b8:61:9c:27:96:86:22:cb:72:64:36:e9:
38:bb:fc:af:b8:f5:e5:d5:7b:62:e6:ab:6f:1d:54:
94:cc:7a:fb:34:cd:f0:27:d6:c8:a7:c4:c9:22:10:
84:db:7a:87:59:a8:6f:80:b1:ae:ba:66:19:08:9c:
a9:d8:87:66:97:00:84:2a:a1:d0:73:a1:ca:8b:5d:
f3:7e:73:9a:f9:5f:42:75:42:52:19:e8:9b:f8:2c:
0f:fc:0c:2c:2b:65:0e:c5:0a:39:86:10:6a:a3:82:
ed:72:ec:3c:02:f0:5c:a8:03:27:ec:cb:ad:85:b0:
82:91:17:4b:fb:7b:ae:94:0d:5b:43:7b:90:4c:4f:
06:62:06:33:f0:a8:63:1c:44:3e:0d:71:a4:43:32:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:CF:86:69:C9:56:47:0D:57:2E:26:3C:9A:C1:8B:12:10:4E:93
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
191.101.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:19:ea:ee:94:7b:04:68:da:fe:3c:25:a2:b6:1d:8e:5f:de:
f4:37:71:be:c2:64:52:cd:e1:bc:57:74:b9:a1:66:15:ba:bd:
7a:e3:81:77:87:a9:36:2a:93:f8:24:52:76:1a:d7:15:c1:1e:
9e:76:9f:5c:19:79:df:e5:14:d3:af:da:63:bb:4a:95:cb:73:
0f:35:c1:9e:d3:0f:96:03:59:41:e4:b4:44:8b:d6:92:1d:06:
d0:7c:d5:e1:f4:3c:15:6b:17:2e:a3:7b:bf:26:9e:78:b5:4f:
15:27:c8:39:d7:5c:37:9e:3c:20:37:94:cc:ce:9e:d0:c8:07:
8e:d9:6c:33:34:0a:7f:38:d8:89:58:74:2b:d0:d3:ac:22:79:
87:7f:e1:01:48:bf:7e:fb:ec:cb:a7:12:da:d2:98:8a:35:fb:
73:f2:59:79:d7:d7:9f:13:35:dc:ab:be:d1:1b:3b:88:b7:0b:
38:77:55:06:61:9f:f7:d7:2c:03:03:ae:33:50:41:62:8c:97:
2c:f8:68:20:0d:77:ac:b6:ab:61:6c:a4:9e:bd:85:12:fd:b3:
d1:f1:40:19:ab:12:27:c7:f5:cc:00:f6:27:37:cd:d5:70:19:
59:19:75:f4:ff:fb:84:45:68:d8:ed:4b:98:e3:4f:28:c5:4c:
8e:2a:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org