Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209181.roa
File: AS209181.roa (raw, json)
Hash identifier: vNGxy3eJkLAvYpSWsaQkYOCSaONrCF7B7nfwrfuFCZ0=
Subject key identifier: 01:3E:78:E6:49:C1:E2:DB:8D:C2:C0:87:0B:17:8C:26:90:EC:54:4B
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 5CB042DAD1A9A69850BAE08B45526CA418390CAC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209181.roa
Signing time: Mon 23 Jan 2023 00:00:12 +0000
ROA not before: Sun 22 Jan 2023 23:55:12 +0000
ROA not after: Mon 22 Jan 2024 00:00:12 +0000
asID: 209181
IP address blocks: 5.252.160.0/24 maxlen: 24
85.208.73.0/24 maxlen: 24
85.209.176.0/24 maxlen: 24
181.214.53.0/24 maxlen: 24
191.96.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b0:42:da:d1:a9:a6:98:50:ba:e0:8b:45:52:6c:a4:18:39:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 22 23:55:12 2023 GMT
Not After : Jan 22 00:00:12 2024 GMT
Subject: CN=013E78E649C1E2DB8DC2C0870B178C2690EC544B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:28:6c:b5:70:30:ab:9b:ad:01:73:0b:0d:
24:96:ab:8c:42:da:92:8b:5a:ca:0b:bb:d3:c4:6a:
1f:74:58:c0:4d:de:97:45:35:92:17:25:89:66:d6:
50:a6:83:f4:39:de:00:bb:63:00:4b:59:d1:9b:57:
16:fe:7a:27:18:62:06:31:ed:a7:93:ab:5f:e8:b2:
84:18:1b:20:8e:15:d7:f3:a4:92:ff:d0:c9:88:4a:
94:6c:d0:fb:ac:79:d5:12:c9:54:89:fd:0a:36:23:
10:d4:62:eb:00:a5:02:32:75:97:c1:43:8a:7f:66:
fb:97:ad:f5:49:3d:51:74:a7:b2:52:6e:2a:15:3e:
e2:00:4b:b0:ef:71:ed:c8:27:91:57:44:e5:c7:a3:
77:cb:f3:31:d2:d4:a0:5c:ed:1c:78:ff:83:4c:53:
f5:77:4f:6d:cc:f5:72:1d:75:f8:fc:b7:bd:97:44:
6c:c1:72:5b:e6:12:fc:a4:07:d8:65:d9:0a:c7:65:
8a:99:f3:74:fc:47:06:e9:28:2a:f1:11:58:51:cd:
a6:d3:5d:b1:4e:ed:1c:be:94:11:eb:a4:5f:f2:87:
23:fb:7c:22:57:23:ec:82:cb:a7:05:b0:13:f8:a6:
03:c3:f2:87:de:9e:cc:fd:f6:a9:24:4f:0f:21:29:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:78:E6:49:C1:E2:DB:8D:C2:C0:87:0B:17:8C:26:90:EC:54:4B
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.160.0/24
85.208.73.0/24
85.209.176.0/24
181.214.53.0/24
191.96.72.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ff:b1:63:c7:a2:5d:bd:4e:64:b8:f3:de:0b:c7:49:9e:ab:
47:84:23:f7:6d:79:75:8a:e7:e8:f3:25:93:ee:25:ec:f6:51:
8f:2d:aa:81:6c:dd:0b:df:7e:f2:42:90:b3:e4:0b:ac:74:7b:
7b:b3:28:35:af:40:85:e1:be:32:22:e5:42:b9:0c:bf:6e:4d:
ec:21:a9:4f:1d:21:22:fe:22:33:d8:e3:48:6b:aa:f8:43:68:
36:a1:98:c4:86:91:d4:b6:52:24:fe:b3:45:f3:85:20:37:90:
df:6d:c6:be:8f:af:c3:e9:0e:5e:4b:b7:f6:30:0e:9a:02:97:
8c:a7:b9:b9:d0:dc:68:32:e4:72:65:9f:69:89:fb:63:b1:9f:
a2:82:a9:f5:79:c3:7b:4f:6c:5c:f9:80:3d:ce:7d:ac:96:ea:
a2:18:06:f2:4d:80:b8:f6:34:84:f1:b2:92:1d:ba:ae:98:e8:
3a:dc:3c:7a:2f:e7:bb:86:35:92:24:31:11:01:33:54:cd:a7:
33:74:1d:da:c9:32:ff:55:06:1b:49:70:94:9a:f6:be:02:3f:
06:1c:26:ef:4e:6a:4d:69:58:ea:41:42:f9:63:95:09:10:c4:
4f:c0:7c:d6:9e:50:8d:5e:0f:ba:09:c0:b4:ac:72:72:b4:5e:
f1:ea:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org