Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: EtLtfcAtlV9VZIR27ZBZz3ZLn7PqD74WTQXDuYJ7FbE=
Subject key identifier: 16:61:14:5C:1B:8C:CC:C5:CB:AB:29:C7:59:83:CE:58:6D:FA:BA:E6
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 2DCBF25E26B788635F0CF00DFFA7508823D2F7DE
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20473.roa
Signing time: Fri 24 Feb 2023 10:13:18 +0000
ROA not before: Fri 24 Feb 2023 10:08:18 +0000
ROA not after: Fri 23 Feb 2024 10:13:18 +0000
asID: 20473
IP address blocks: 45.95.23.0/24 maxlen: 24
181.215.26.0/24 maxlen: 24
181.215.32.0/24 maxlen: 24
181.215.70.0/24 maxlen: 24
191.96.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cb:f2:5e:26:b7:88:63:5f:0c:f0:0d:ff:a7:50:88:23:d2:f7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 24 10:08:18 2023 GMT
Not After : Feb 23 10:13:18 2024 GMT
Subject: CN=1661145C1B8CCCC5CBAB29C75983CE586DFABAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:f7:0c:1b:bb:ca:33:f8:5a:dd:2b:b5:b4:
49:a0:a4:ea:b1:7a:47:ab:03:23:99:2e:2f:96:67:
04:5e:2f:80:ca:1e:8d:0f:0a:8b:a1:94:b4:80:ae:
9e:af:26:92:88:3e:0f:40:2d:94:0c:36:d7:b5:c2:
dd:64:58:20:8f:7c:8e:55:41:f1:ef:3e:f1:bf:59:
1f:85:91:b9:fc:0c:56:4b:5e:bd:27:33:2d:22:a3:
35:8a:bc:ab:c7:82:2b:c5:08:d8:ff:f0:fe:9f:58:
0c:d9:ed:28:91:93:b2:ee:b3:00:95:a6:44:97:aa:
eb:0a:f3:60:2c:f5:b9:d4:a3:bb:64:70:1b:fe:44:
33:6e:29:05:81:b6:5a:77:ab:12:36:13:00:62:9b:
f5:56:5f:b4:5e:de:48:5a:75:b6:c7:8a:f9:51:60:
7e:74:7a:48:6f:88:58:98:ce:20:f0:2e:14:ab:d8:
9c:a0:04:5c:46:bc:27:da:27:f3:ea:12:58:a6:70:
f7:4f:ed:cb:ba:ab:89:f4:08:69:98:8d:a7:08:dd:
5c:ff:87:c8:1a:eb:9e:df:07:d2:51:ab:44:ce:27:
31:87:08:a0:00:d6:8c:28:b1:6a:fe:b3:c8:30:ae:
52:6b:36:35:27:1a:8d:75:a2:b9:ce:e4:0d:a0:e6:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:14:5C:1B:8C:CC:C5:CB:AB:29:C7:59:83:CE:58:6D:FA:BA:E6
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.23.0/24
181.215.26.0/24
181.215.32.0/24
181.215.70.0/24
191.96.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:52:02:6e:13:8e:ee:4f:23:d2:af:a2:98:f4:92:a7:f5:
eb:7d:96:ef:fc:49:f5:4b:74:2c:65:8f:0e:b2:fa:0b:d7:38:
bf:96:6e:6e:28:0f:5b:76:39:21:b2:7a:1e:2b:25:92:cb:be:
1b:2a:60:e5:e0:77:3c:e4:44:7c:01:bb:2a:65:3d:e3:06:5d:
96:59:11:fc:28:9e:c0:d9:29:4c:6c:ab:90:27:87:3f:0f:0a:
f3:e5:d5:06:4a:0a:51:62:7c:6f:36:32:74:59:f9:67:e1:ac:
09:89:f4:4f:81:c0:6b:fe:37:b9:da:ed:eb:e5:73:2f:df:65:
39:ca:0e:48:d0:d6:08:ec:41:ba:39:e5:e0:00:d0:55:a5:53:
a1:39:34:67:d4:ba:f8:a8:d6:cb:a7:83:98:15:2e:7d:c7:82:
de:28:28:f7:b6:9f:5f:83:a9:01:5e:61:24:0e:3c:37:72:fa:
6a:c5:2a:7b:86:42:7b:7d:48:fa:ad:39:1b:1a:49:16:45:2b:
c3:5d:3b:e2:94:34:9a:80:f7:15:7f:16:a5:09:6e:4d:60:b4:
99:02:3e:07:50:c4:13:43:96:7d:f8:3b:bd:c4:05:87:fa:86:
fc:93:1b:11:55:d0:ea:fd:1a:f2:1d:ca:2d:16:a4:97:54:ec:
68:4d:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org