Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: zKUi4FKkYYwniI2or4OGqYK8qO0rE9SITFh2/t07ju8=
Subject key identifier: AA:61:7B:03:63:55:0A:F2:70:4D:6A:39:43:30:23:F7:0C:68:C9:69
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 6EFB97BBCAFCDCB06200FB7C8C771A2E88E890EE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14618.roa
Signing time: Wed 01 Feb 2023 00:00:14 +0000
ROA not before: Tue 31 Jan 2023 23:55:14 +0000
ROA not after: Wed 31 Jan 2024 00:00:14 +0000
asID: 14618
IP address blocks: 92.119.32.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
181.215.110.0/24 maxlen: 24
185.145.38.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
191.96.146.0/24 maxlen: 24
191.101.8.0/24 maxlen: 24
191.101.94.0/24 maxlen: 24
191.101.227.0/24 maxlen: 24
191.101.242.0/24 maxlen: 24
213.109.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fb:97:bb:ca:fc:dc:b0:62:00:fb:7c:8c:77:1a:2e:88:e8:90:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 31 23:55:14 2023 GMT
Not After : Jan 31 00:00:14 2024 GMT
Subject: CN=AA617B0363550AF2704D6A39433023F70C68C969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b8:e6:07:cc:1f:a6:4c:4b:4f:e3:66:43:
30:46:a6:fe:da:b2:9b:4d:28:c8:ec:fa:3f:4f:a1:
a2:1a:54:44:0e:ab:0a:2a:7f:07:8b:77:cb:73:bb:
81:75:f5:a1:65:47:95:8b:d7:aa:63:c0:82:93:7c:
09:28:6f:66:f2:61:24:49:54:17:c3:a3:85:f3:1e:
4f:d3:de:6a:19:b6:a9:c3:42:a5:b5:14:2e:5a:d1:
2e:57:d2:da:70:a8:8f:4c:ae:49:74:59:29:44:6d:
03:34:32:8e:3e:2a:f6:62:c1:e0:65:03:a8:96:32:
d1:81:e9:8b:cb:d3:a1:aa:98:38:0f:93:25:49:f3:
61:ec:b0:e1:b3:cf:7f:44:a5:a8:78:00:5d:73:da:
60:1f:e8:5c:b0:a5:26:9b:43:84:37:92:de:62:5c:
7f:10:a8:65:98:e0:5f:24:08:56:a4:96:ce:7b:05:
58:96:96:e5:ba:8e:86:d0:e1:87:cf:ef:0c:cb:1a:
fa:60:69:15:3b:d5:b9:01:cf:a8:7c:d0:65:69:22:
b5:90:da:31:d4:6b:48:c8:0e:57:16:26:a8:d9:11:
8f:9c:b3:13:a3:d4:0c:87:63:b8:66:9b:3b:33:bd:
ad:93:2d:ed:32:68:e3:27:5b:88:e0:99:b1:6b:fe:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:61:7B:03:63:55:0A:F2:70:4D:6A:39:43:30:23:F7:0C:68:C9:69
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.32.0/24
92.242.186.0/24
181.215.110.0/24
185.145.38.0/24
185.151.58.0/24
191.96.111.0/24
191.96.134.0/24
191.96.146.0/24
191.101.8.0/24
191.101.94.0/24
191.101.227.0/24
191.101.242.0/24
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:16:5e:8b:27:56:d9:90:7b:87:70:d8:0e:31:8c:68:a1:09:
03:36:18:3d:7d:08:fe:28:a3:71:5b:6c:77:02:da:51:f1:99:
0f:01:f2:f1:5c:9e:f9:de:19:bc:8f:7c:7a:c2:f7:7b:f7:24:
da:1c:d2:6a:2e:c6:ae:95:23:61:1f:bc:bc:ba:02:c1:c6:8a:
48:24:37:d5:5b:8b:d0:95:df:bf:13:51:ce:ec:8a:9e:d1:d8:
0c:27:13:9a:f4:d4:13:ba:13:c6:0f:13:30:b9:5e:dc:96:ec:
56:8a:2c:3b:f9:5c:3c:4b:de:c6:49:d0:24:0e:56:d3:97:c4:
db:94:b6:5a:5e:e4:15:36:95:7e:2f:7a:92:bb:55:b5:22:5b:
b2:8a:df:30:34:0a:d6:52:66:00:c7:fd:9d:30:79:47:1b:6e:
e9:23:49:ab:90:03:91:a4:1a:1b:de:f7:13:b2:14:4b:34:48:
93:6f:2f:7a:82:12:5e:9f:9c:c5:93:32:39:a1:0a:93:47:da:
70:2d:d7:86:4d:ae:5f:b2:d2:be:c2:0a:35:64:8b:94:c1:67:
61:a2:97:82:63:66:c2:b3:3a:7d:8a:57:0f:d0:91:be:60:73:
df:18:09:7f:87:8a:e4:9c:73:26:45:99:1c:af:24:9a:16:cd:
82:22:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org