Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa
File: AS133398.roa (raw, json)
Hash identifier: MGyz2Jyk6PLD5qXDGq6QOz07PYNHDOBf5iEhjGdBGrM=
Subject key identifier: 59:85:3D:EB:B0:FA:69:51:23:70:A9:89:98:51:76:12:CE:9E:75:3C
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 1A48F0E6665B949B3F6F8559B7769E5F5737B451
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa
Signing time: Mon 28 Nov 2022 12:18:15 +0000
ROA not before: Mon 28 Nov 2022 12:13:15 +0000
ROA not after: Mon 27 Nov 2023 12:18:15 +0000
asID: 133398
IP address blocks: 191.101.180.0/24 maxlen: 24
193.31.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:48:f0:e6:66:5b:94:9b:3f:6f:85:59:b7:76:9e:5f:57:37:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:15 2022 GMT
Not After : Nov 27 12:18:15 2023 GMT
Subject: CN=59853DEBB0FA69512370A98998517612CE9E753C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:db:f1:f5:94:40:24:df:b5:e2:0e:05:7d:
00:1c:ce:1a:42:b0:6f:b0:e9:9b:98:42:b3:38:34:
ba:3f:bd:0a:93:46:39:59:b0:45:41:11:15:04:70:
ec:f5:9e:02:66:6e:61:de:00:1f:2f:8b:73:b2:d1:
b7:13:26:59:3b:a4:75:6a:42:52:0c:d6:b4:a0:4e:
3a:08:5a:63:4d:f9:1c:c1:02:98:fe:39:e2:97:15:
37:fb:4f:c9:e9:e0:a4:ba:f2:59:da:7d:33:dc:ce:
05:09:7a:be:35:a1:7a:cd:38:d0:5c:9b:cc:8a:fb:
ef:66:68:a4:cc:80:02:52:98:68:02:86:b9:7b:30:
04:92:c7:2f:1f:94:6f:ad:bb:e3:b8:2a:d6:41:d0:
9b:be:95:8e:f4:e8:d2:ec:0b:3c:bf:99:06:c4:69:
35:ee:7e:80:2d:99:64:2c:b1:8a:15:0b:c4:c9:1e:
73:45:db:a0:10:4c:3a:ca:d6:65:ad:d9:c0:3d:a7:
e8:34:49:99:87:e0:a9:74:a9:f1:2c:1a:b3:29:d1:
e4:92:07:5c:0e:2c:ae:93:6e:0e:f7:53:99:66:64:
a3:d2:16:2b:8d:e7:1c:e4:e1:74:78:29:3f:07:0b:
1f:2c:03:ac:57:e0:8a:1e:1c:ea:ca:7c:49:cd:78:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:3D:EB:B0:FA:69:51:23:70:A9:89:98:51:76:12:CE:9E:75:3C
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.180.0/24
193.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0d:43:ed:75:5b:52:50:55:7d:0a:9f:e3:a7:90:fa:d9:1e:
dd:f2:45:7e:e1:1b:5e:87:fe:41:37:94:cf:4c:6b:90:a1:85:
5b:97:e9:70:ed:dc:33:0b:ed:c9:31:bf:e6:72:dd:b4:53:a3:
9e:ec:5c:00:e1:56:7c:c7:58:eb:7d:55:4a:6a:a6:70:d9:d9:
ca:50:15:c8:a6:eb:3d:1c:d2:27:ee:19:1f:92:00:3d:60:67:
94:2a:28:9d:f9:20:73:d9:37:3f:62:f3:90:71:90:45:bc:8a:
de:b7:48:f1:2b:ad:cc:fb:5e:63:d5:56:4a:f6:3e:00:32:30:
c1:12:d2:63:10:43:b5:92:e8:29:78:18:02:00:40:51:d9:15:
e0:34:e0:07:ba:14:bd:79:c8:ff:e1:bb:e6:4b:f8:b8:ce:23:
b8:e7:17:83:f9:2f:ed:7d:f1:8e:6a:c7:8a:98:e7:a9:2b:c6:
e1:66:a1:d5:97:eb:fa:c3:ef:5a:d2:78:45:eb:4a:3d:f3:96:
4a:72:dc:5f:03:5c:e7:5b:a9:fa:ee:28:20:ae:ca:fd:13:b8:
18:9d:a8:1a:2b:49:3e:76:22:90:b0:b9:ef:27:c4:3e:69:59:
01:e4:54:d9:be:a1:ae:fd:7a:9b:68:1d:9f:a8:1c:58:dc:3a:
3e:92:5e:e9
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUGkjw5mZblJs/b4VZt3aeX1c3tFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTVaFw0yMzExMjcxMjE4MTVaMDMxMTAvBgNV
BAMTKDU5ODUzREVCQjBGQTY5NTEyMzcwQTk4OTk4NTE3NjEyQ0U5RTc1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jNvx9ZRAJN+14g4FfQAczhpC
sG+w6ZuYQrM4NLo/vQqTRjlZsEVBERUEcOz1ngJmbmHeAB8vi3Oy0bcTJlk7pHVq
QlIM1rSgTjoIWmNN+RzBApj+OeKXFTf7T8np4KS68lnafTPczgUJer41oXrNONBc
m8yK++9maKTMgAJSmGgChrl7MASSxy8flG+tu+O4KtZB0Ju+lY706NLsCzy/mQbE
aTXufoAtmWQssYoVC8TJHnNF26AQTDrK1mWt2cA9p+g0SZmH4Kl0qfEsGrMp0eSS
B1wOLK6Tbg73U5lmZKPSFiuN5xzk4XR4KT8HCx8sA6xX4IoeHOrKfEnNeF65AgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUWYU967D6aVEjcKmJmFF2Es6edTwwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxMzMzOTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBAC/ZbQDBADBHykwDQYJKoZIhvcNAQELBQAD
ggEBAKsNQ+11W1JQVX0Kn+OnkPrZHt3yRX7hG16H/kE3lM9Ma5ChhVuX6XDt3DML
7ckxv+Zy3bRTo57sXADhVnzHWOt9VUpqpnDZ2cpQFcim6z0c0ifuGR+SAD1gZ5Qq
KJ35IHPZNz9i85BxkEW8it63SPErrcz7XmPVVkr2PgAyMMES0mMQQ7WS6Cl4GAIA
QFHZFeA04Ae6FL15yP/hu+ZL+LjOI7jnF4P5L+198Y5qx4qY56krxuFmodWX6/rD
71rSeEXrSj3zlkpy3F8DXOdbqfruKCCuyv0TuBidqBorST52IpCwue8nxD5pWQHk
VNm+oa79eptoHZ+oHFjcOj6SXuk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org