Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20771.roa
File: AS20771.roa (raw, json)
Hash identifier: Ky8AXogOCDgTiGT1kDFKlD5cYp1GnNI2n3eFd/fSaVk=
Subject key identifier: 53:C7:B3:77:5F:79:49:91:1D:C8:5B:B2:3C:BF:38:68:49:63:45:CD
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 76B9309AD758E58F1A63DADC44E9D67C2C66328A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20771.roa
Signing time: Mon 28 Nov 2022 12:18:17 +0000
ROA not before: Mon 28 Nov 2022 12:13:17 +0000
ROA not after: Mon 27 Nov 2023 12:18:17 +0000
asID: 20771
IP address blocks: 109.106.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b9:30:9a:d7:58:e5:8f:1a:63:da:dc:44:e9:d6:7c:2c:66:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:17 2022 GMT
Not After : Nov 27 12:18:17 2023 GMT
Subject: CN=53C7B3775F7949911DC85BB23CBF3868496345CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:d7:04:7b:36:0e:ca:6f:c1:d8:b6:7b:d8:
a4:3d:48:06:3e:54:6e:f9:38:ad:a4:fa:f8:a8:a1:
95:e5:1c:6d:f9:36:68:ac:72:df:64:0b:d7:36:cd:
01:78:db:19:b6:51:5e:e6:e0:b0:c6:13:e2:ce:1d:
56:1c:d9:33:0b:f3:3e:8c:5b:96:37:3c:1a:9e:ab:
36:be:ad:d8:41:99:ea:7b:9b:80:a1:da:42:7b:32:
dd:3c:85:a6:81:4d:01:b4:33:68:46:93:c9:30:9f:
8c:88:cb:48:46:20:03:66:57:0c:0b:41:93:78:5b:
90:49:30:bc:ea:1e:48:9b:72:dc:64:7a:8f:a9:f5:
85:6d:76:45:9d:a1:3c:22:d4:bc:d6:7f:6d:5b:21:
10:c3:75:aa:ef:f2:8d:37:3a:3e:4c:18:97:9f:44:
11:90:16:2b:b6:64:f0:97:84:fb:1b:54:e2:d1:ce:
48:49:a5:5e:31:39:65:2e:56:45:86:c2:bd:80:1b:
d4:d5:f5:a6:99:91:79:c0:6f:fd:61:db:23:09:57:
ca:7b:4a:4c:79:b3:c2:3e:b9:3c:3e:f4:3c:a1:72:
bb:39:9b:d0:6b:82:db:c7:5b:c6:37:d6:45:c2:8f:
57:0b:cf:64:01:ed:9a:05:d7:f9:f2:40:85:1a:a8:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:B3:77:5F:79:49:91:1D:C8:5B:B2:3C:BF:38:68:49:63:45:CD
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS20771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fc:f8:22:8c:85:62:56:dc:4a:e9:bd:19:90:46:c3:98:95:
d9:03:95:e8:e0:54:ad:b5:4b:06:d7:a6:67:4d:25:ee:32:ff:
6e:5b:91:c9:04:56:3e:2e:39:55:24:a5:c1:f4:ee:31:da:1e:
43:00:ff:d8:89:0a:47:fa:58:ad:4a:2d:a1:be:a4:bf:ae:c0:
0d:56:cc:19:63:9d:aa:0e:b2:34:56:cc:fd:8f:87:1c:57:5d:
f0:11:88:26:1e:1c:e2:3f:a8:46:a9:a1:b8:14:96:43:c0:81:
bb:01:4b:ae:4d:97:30:f9:ff:bd:42:8d:a0:6b:10:0b:5c:75:
44:2d:26:4d:58:c5:76:43:fc:b6:d8:a7:04:71:74:a0:b8:11:
c5:e2:24:07:58:20:42:5c:c2:49:52:b9:5b:3a:2d:85:7a:37:
90:a2:25:dd:f9:2a:02:40:ce:d4:9d:2e:9f:eb:94:6e:4f:a3:
7d:80:21:ed:71:e8:c4:03:1c:e8:17:85:61:bf:38:66:87:0e:
88:0c:f6:8a:39:44:04:97:cd:2d:94:5a:f4:fb:9d:04:b6:8c:
98:1a:10:20:16:6b:6b:d8:77:5d:61:81:02:40:4d:19:8d:58:
48:2d:da:0c:a1:e4:9c:24:b4:08:85:80:01:24:45:f2:d4:2d:
52:4e:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org