Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: q9E+tm0BoAdCRC9Pw278MQIVILNJT2/95LAhK7BDY/8=
Subject key identifier: 0F:AC:7E:02:EF:28:DC:B2:42:1F:0B:E4:DB:1D:0F:41:FA:AB:D9:57
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 11CE04A659BC791B9A0F5FB9885383662598149B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16509.roa
Signing time: Wed 01 Feb 2023 00:00:14 +0000
ROA not before: Tue 31 Jan 2023 23:55:14 +0000
ROA not after: Wed 31 Jan 2024 00:00:14 +0000
asID: 16509
IP address blocks: 92.119.32.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
181.215.110.0/24 maxlen: 24
185.145.38.0/24 maxlen: 24
185.151.58.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
191.96.146.0/24 maxlen: 24
191.101.8.0/24 maxlen: 24
191.101.94.0/24 maxlen: 24
191.101.227.0/24 maxlen: 24
191.101.242.0/24 maxlen: 24
213.109.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ce:04:a6:59:bc:79:1b:9a:0f:5f:b9:88:53:83:66:25:98:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 31 23:55:14 2023 GMT
Not After : Jan 31 00:00:14 2024 GMT
Subject: CN=0FAC7E02EF28DCB2421F0BE4DB1D0F41FAABD957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:29:d1:5d:d1:ea:ac:f0:6a:39:5f:2f:76:
f9:ef:e4:41:5a:0e:42:ac:b6:67:35:fa:df:e8:84:
8b:73:ef:10:19:0b:2c:1c:3e:9a:72:9a:b6:a5:65:
4d:81:01:e8:36:6b:1c:e4:ab:ed:da:85:88:d6:93:
60:92:b7:8d:21:2f:fb:d7:94:b0:c5:42:89:61:9b:
b4:37:07:fd:65:b3:8c:a0:a4:bd:59:ae:ca:5d:d1:
a7:e5:f3:76:7b:b8:32:0a:32:d2:3c:ae:96:77:b1:
6f:cf:c9:09:c7:f0:cc:bf:3f:d6:5d:01:3d:23:bd:
d7:f0:83:7c:a8:38:44:b6:39:0c:4e:05:8f:7d:8f:
40:83:93:a1:cc:d4:f4:e9:f3:15:a0:44:8a:1e:43:
37:dd:45:77:73:d3:c6:74:3d:12:51:21:03:b4:89:
55:63:43:21:06:38:6f:9a:77:82:1e:2b:e4:84:db:
a8:d5:cb:a2:b0:17:18:ea:c9:37:20:8a:a9:cd:15:
72:ce:4e:94:82:3d:f1:e9:cb:f4:04:58:18:1a:8e:
66:10:dc:af:48:3b:4c:b7:98:5d:73:75:d6:42:3c:
98:2c:fa:16:71:fe:b1:3b:1a:16:c7:e3:66:3e:e6:
11:72:c3:57:df:6e:62:f4:63:fb:fc:36:92:0e:3b:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AC:7E:02:EF:28:DC:B2:42:1F:0B:E4:DB:1D:0F:41:FA:AB:D9:57
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.32.0/24
92.242.186.0/24
181.215.110.0/24
185.145.38.0/24
185.151.58.0/24
191.96.111.0/24
191.96.134.0/24
191.96.146.0/24
191.101.8.0/24
191.101.94.0/24
191.101.227.0/24
191.101.242.0/24
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
72:af:07:c7:43:c2:1f:2c:0e:72:f6:2d:91:3e:aa:e0:1f:ec:
ca:b2:bc:e2:72:72:26:7c:b5:e4:bd:c3:96:3f:62:92:df:47:
cf:bd:49:df:10:e7:97:e0:bd:72:dc:dc:b5:8f:09:ec:da:10:
f5:6a:be:cd:ff:23:39:ba:11:2a:a9:f5:c9:e5:07:22:4d:62:
de:8a:94:71:ca:e9:06:b1:7f:d9:87:44:1c:15:42:9d:32:58:
2e:4c:1a:a8:67:93:9b:e4:ed:18:87:2f:86:95:b8:af:04:f3:
a1:79:6b:c9:28:77:e6:13:6b:a8:36:a7:82:72:f2:e0:4f:13:
69:1e:1a:a1:1d:1b:7b:ab:3c:d4:67:a0:32:bc:42:31:e8:67:
c0:2f:f6:a6:20:0d:a3:30:40:3e:f4:98:17:2c:2b:2a:cf:01:
3c:a7:c5:41:20:5b:27:12:2b:14:75:7d:ee:ce:2e:08:55:ce:
85:8e:63:41:2d:f4:59:58:42:6f:2d:c6:91:d0:a1:0d:2b:b0:
b7:86:22:0d:fb:24:55:75:19:80:7f:cf:d7:5d:17:f5:1f:da:
94:f6:81:95:37:7a:d1:f2:46:20:f5:41:f7:6b:2c:21:aa:58:
24:75:a7:f6:b0:be:76:3a:34:2b:1b:6b:f1:e8:fe:5e:f7:4a:
ac:cf:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org