Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: wM1xjO/W6jxE7ytwRDPOJuXsb+fr30Rdgffb/7xQL8w=
Subject key identifier: 63:52:BB:C8:BE:DD:A9:F5:0E:8D:A6:A6:4D:D3:0A:BE:1E:6D:A3:DA
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 3B7C8C45696967714CFB687E405AE18335E11B5E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207459.roa
Signing time: Thu 26 Jan 2023 13:30:07 +0000
ROA not before: Thu 26 Jan 2023 13:25:07 +0000
ROA not after: Thu 25 Jan 2024 13:30:07 +0000
asID: 207459
IP address blocks: 179.61.180.0/24 maxlen: 24
181.41.192.0/24 maxlen: 24
181.214.96.0/24 maxlen: 24
181.214.182.0/24 maxlen: 24
181.215.7.0/24 maxlen: 24
181.215.21.0/24 maxlen: 24
181.215.22.0/24 maxlen: 24
181.215.30.0/24 maxlen: 24
181.215.67.0/24 maxlen: 24
181.215.138.0/24 maxlen: 24
181.215.139.0/24 maxlen: 24
181.215.143.0/24 maxlen: 24
181.215.189.0/24 maxlen: 24
181.215.193.0/24 maxlen: 24
181.215.203.0/24 maxlen: 24
191.96.38.0/24 maxlen: 24
191.96.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7c:8c:45:69:69:67:71:4c:fb:68:7e:40:5a:e1:83:35:e1:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 26 13:25:07 2023 GMT
Not After : Jan 25 13:30:07 2024 GMT
Subject: CN=6352BBC8BEDDA9F50E8DA6A64DD30ABE1E6DA3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:62:ef:8f:64:10:ce:bb:2b:9c:0d:0b:61:
34:42:21:74:f0:05:c6:5d:4c:e3:e3:1f:87:c4:78:
c7:59:55:16:cf:0a:89:b6:8d:8a:93:13:04:60:9c:
17:3a:76:3f:ac:6a:03:0d:97:46:f1:a5:5b:6b:07:
91:93:41:cf:fa:04:1c:1a:e6:6b:33:24:ce:28:c2:
7e:1e:2d:b2:cc:91:80:37:26:a6:8e:0a:9d:5c:81:
57:29:0f:26:dd:ef:8e:24:39:13:66:4a:28:97:ca:
cc:bd:fd:da:02:4e:8e:d3:59:06:69:01:ee:41:73:
50:94:d5:ef:9e:24:e2:88:2c:44:c3:c3:af:65:2b:
1a:27:8c:f5:4c:86:a1:5d:82:b1:f2:c0:9e:73:46:
dd:c3:c5:2d:26:87:ee:a7:a9:fd:4b:f7:7e:08:81:
6f:75:b7:d8:2c:50:4f:1c:1f:38:f8:01:40:e5:26:
a4:1e:c8:f8:fd:1b:9c:b3:7d:83:f8:d2:7c:3e:e1:
06:fe:65:12:13:dd:37:b3:c7:e2:56:2b:1d:d1:11:
85:cc:c6:60:fa:80:00:b0:6a:18:97:c0:6e:31:1a:
7b:1f:80:6a:71:fc:20:76:7f:39:fc:9d:32:5e:9c:
f5:4e:23:7b:66:8a:4c:98:39:81:8e:fe:82:0e:97:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:BB:C8:BE:DD:A9:F5:0E:8D:A6:A6:4D:D3:0A:BE:1E:6D:A3:DA
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.180.0/24
181.41.192.0/24
181.214.96.0/24
181.214.182.0/24
181.215.7.0/24
181.215.21.0-181.215.22.255
181.215.30.0/24
181.215.67.0/24
181.215.138.0/23
181.215.143.0/24
181.215.189.0/24
181.215.193.0/24
181.215.203.0/24
191.96.38.0/24
191.96.73.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fa:72:a3:7c:6a:cb:d6:42:7a:7c:8a:27:a7:72:a1:0c:9a:
2a:ea:a5:ea:81:b5:18:52:c0:d7:86:6c:88:d2:0c:08:69:7f:
78:ae:96:b8:06:7c:09:2d:69:6e:85:da:04:05:26:70:c7:51:
b6:4b:87:fa:9f:38:67:43:f0:6e:1d:f3:ae:3b:57:ee:35:ea:
5e:1a:f6:3e:ea:b2:30:1e:71:44:4f:64:3b:99:6e:70:87:ca:
0f:b1:66:2a:eb:b6:b3:71:2b:91:c5:dd:ff:c2:8a:68:6e:3f:
2f:c0:cd:3b:de:40:e3:2a:1a:37:b2:7d:3e:d0:f0:34:69:88:
e1:12:e8:9a:b9:a3:7f:e7:8e:fe:53:77:4f:fe:99:46:25:ea:
34:7a:04:17:a0:f4:83:c7:73:3b:18:93:b3:3e:60:c8:7d:eb:
c1:16:d3:06:ad:a0:14:56:84:0b:13:60:44:1c:05:6d:8b:2d:
84:55:42:e6:ff:83:c8:4d:fb:d6:a3:a5:7a:38:a0:37:56:68:
de:97:6b:32:f9:22:62:dd:ce:fd:e3:e2:9f:35:ae:a2:7f:85:
ee:b9:cb:35:7a:cd:9d:33:94:39:f1:c3:bb:ba:ea:d3:82:71:
fb:d5:e3:9d:f7:45:85:3f:6d:2d:4f:bd:ce:7b:3f:21:68:77:
9b:34:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org