Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: 6o9Tp5UJnTMA32gKGP8A9fjc8ksVxtVWnj/LGGFW6q0=
Subject key identifier: 17:CE:37:18:FF:58:C2:44:7C:01:FB:F0:AE:92:D8:1D:24:1A:A9:C6
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 60B03E835F900DE7987285553E4B72FD18CCD3AE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1239.roa
Signing time: Sun 26 Feb 2023 16:00:13 +0000
ROA not before: Sun 26 Feb 2023 15:55:13 +0000
ROA not after: Sun 25 Feb 2024 16:00:13 +0000
asID: 1239
IP address blocks: 179.61.164.0/24 maxlen: 24
179.61.173.0/24 maxlen: 24
191.96.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b0:3e:83:5f:90:0d:e7:98:72:85:55:3e:4b:72:fd:18:cc:d3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 26 15:55:13 2023 GMT
Not After : Feb 25 16:00:13 2024 GMT
Subject: CN=17CE3718FF58C2447C01FBF0AE92D81D241AA9C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:dc:07:43:a9:41:bc:12:d8:7d:0b:3f:b3:
e1:14:b5:e1:6d:cb:f9:33:57:6e:4c:88:9d:77:ea:
59:cd:82:5f:8f:50:ba:75:05:e9:da:f1:a2:58:46:
03:ad:77:40:b9:f0:8a:fd:76:6a:dd:d2:52:03:90:
d7:b5:9d:4f:d0:60:b5:38:73:02:f1:99:61:18:74:
e7:20:04:28:d3:9d:ac:ad:a5:a7:0d:68:55:f2:ee:
4d:25:23:df:14:74:f8:62:e1:f0:76:3d:aa:fa:97:
1b:22:e7:b1:c4:1d:36:60:b0:ed:23:d6:a3:95:d9:
46:d5:39:97:56:5d:f1:19:9a:c3:4d:e1:5c:32:ca:
1c:77:73:5b:06:06:45:f1:cf:a5:26:52:04:b6:55:
41:f8:c8:b4:87:a0:a2:0c:6e:95:73:72:04:8f:1a:
3b:5e:15:e6:d0:ba:ed:af:7c:bf:30:82:38:40:b9:
c0:48:de:a5:0d:07:41:49:86:6c:50:42:1d:6c:ea:
7e:9f:cd:58:32:3b:0b:20:78:8d:fe:ff:d1:0e:0e:
96:06:97:82:09:3d:44:31:d4:45:78:5f:13:a1:2e:
b5:46:54:96:c4:4c:38:34:31:84:7a:58:95:76:f0:
ca:fe:bd:75:32:97:84:f3:99:0a:d6:e9:80:30:7e:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:37:18:FF:58:C2:44:7C:01:FB:F0:AE:92:D8:1D:24:1A:A9:C6
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.164.0/24
179.61.173.0/24
191.96.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:83:26:fa:fb:18:7e:c2:c2:03:9f:59:c2:b3:9f:a9:ca:3b:
aa:5a:44:c2:e9:7a:f0:d9:e8:eb:e1:c4:ca:4c:ff:2b:d4:d5:
49:10:51:05:c0:a1:db:60:46:8f:93:2d:59:71:96:5f:9e:e0:
49:8b:7e:5f:ab:cc:fa:fb:29:62:fc:9b:fe:64:09:3d:8d:25:
37:ae:a5:91:c8:38:42:e4:1c:9d:cb:f6:91:de:22:6e:f8:eb:
53:f6:a9:da:69:c2:2c:57:82:50:6e:95:f2:03:1d:95:ee:e9:
6d:7e:06:12:53:ba:07:83:94:6e:2e:0a:eb:93:67:21:6c:a1:
90:dc:b1:17:5e:a4:a3:67:c7:ce:18:b2:64:8b:07:6b:74:fa:
c0:b0:8f:da:0c:37:30:6b:e1:9a:7f:f1:c7:6c:01:b9:26:36:
94:d8:c1:a1:97:57:0d:d7:1f:9b:cf:df:9e:0e:e5:7a:5d:73:
3e:71:5b:78:20:aa:a7:30:ce:b4:46:65:7e:20:00:af:c9:93:
47:5d:4a:72:29:20:13:15:45:cf:87:53:c6:2b:79:38:ee:85:
50:48:1d:fc:6d:46:2c:e1:9a:07:15:6a:75:56:0e:67:6c:ee:
45:20:99:09:32:4a:51:20:69:96:1f:47:7f:61:18:58:76:35:
53:87:fc:fa
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUYLA+g1+QDeeYcoVVPkty/RjM064wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjYxNTU1MTNaFw0yNDAyMjUxNjAwMTNaMDMxMTAvBgNV
BAMTKDE3Q0UzNzE4RkY1OEMyNDQ3QzAxRkJGMEFFOTJEODFEMjQxQUE5QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC459wHQ6lBvBLYfQs/s+EUteFt
y/kzV25MiJ136lnNgl+PULp1Bena8aJYRgOtd0C58Ir9dmrd0lIDkNe1nU/QYLU4
cwLxmWEYdOcgBCjTnaytpacNaFXy7k0lI98UdPhi4fB2Par6lxsi57HEHTZgsO0j
1qOV2UbVOZdWXfEZmsNN4Vwyyhx3c1sGBkXxz6UmUgS2VUH4yLSHoKIMbpVzcgSP
GjteFebQuu2vfL8wgjhAucBI3qUNB0FJhmxQQh1s6n6fzVgyOwsgeI3+/9EODpYG
l4IJPUQx1EV4XxOhLrVGVJbETDg0MYR6WJV28Mr+vXUyl4TzmQrW6YAwfgs7AgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUF843GP9YwkR8AfvwrpLYHSQaqcYwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQAsz2kAwQAsz2tAwQAv2AfMA0GCSqGSIb3DQEB
CwUAA4IBAQB6gyb6+xh+wsIDn1nCs5+pyjuqWkTC6Xrw2ejr4cTKTP8r1NVJEFEF
wKHbYEaPky1ZcZZfnuBJi35fq8z6+yli/Jv+ZAk9jSU3rqWRyDhC5Bydy/aR3iJu
+OtT9qnaacIsV4JQbpXyAx2V7ultfgYSU7oHg5RuLgrrk2chbKGQ3LEXXqSjZ8fO
GLJkiwdrdPrAsI/aDDcwa+Gaf/HHbAG5JjaU2MGhl1cN1x+bz9+eDuV6XXM+cVt4
IKqnMM60RmV+IACvyZNHXUpyKSATFUXPh1PGK3k47oVQSB38bUYs4ZoHFWp1Vg5n
bO5FIJkJMkpRIGmWH0d/YRhYdjVTh/z6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org