Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209260.roa
File: AS209260.roa (raw, json)
Hash identifier: +vpMvTv8NC1MQoJk9pHIF/AjCS62IkmfNPl2e4YJlJc=
Subject key identifier: 51:6A:00:98:B9:2C:32:27:47:D2:7A:43:2C:D4:6C:A9:18:F6:69:C2
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 083FB7F47B42D3B18EC86E32CD8494AA1FDFB483
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209260.roa
Signing time: Wed 01 Feb 2023 23:44:02 +0000
ROA not before: Wed 01 Feb 2023 23:39:02 +0000
ROA not after: Wed 31 Jan 2024 23:44:02 +0000
asID: 209260
IP address blocks: 5.181.135.0/24 maxlen: 24
45.89.255.0/24 maxlen: 24
45.93.47.0/24 maxlen: 24
45.137.127.0/24 maxlen: 24
179.61.142.0/24 maxlen: 24
179.61.158.0/24 maxlen: 24
179.61.249.0/24 maxlen: 24
181.214.25.0/24 maxlen: 24
181.215.12.0/24 maxlen: 24
181.215.38.0/24 maxlen: 24
181.215.42.0/24 maxlen: 24
185.135.8.0/24 maxlen: 24
185.137.15.0/24 maxlen: 24
185.143.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3f:b7:f4:7b:42:d3:b1:8e:c8:6e:32:cd:84:94:aa:1f:df:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 1 23:39:02 2023 GMT
Not After : Jan 31 23:44:02 2024 GMT
Subject: CN=516A0098B92C322747D27A432CD46CA918F669C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:f5:66:1a:c0:77:36:cb:a0:99:e7:23:1b:
1e:a3:65:6a:0f:7c:36:40:0b:18:71:11:26:33:66:
8d:f1:4d:e7:6a:0f:5a:c8:24:c8:db:7b:30:39:11:
d5:24:30:2a:83:9c:db:45:a1:0b:0b:90:3f:a7:ec:
aa:83:e1:e9:db:44:06:53:08:33:92:00:29:aa:61:
22:31:03:a8:c3:71:53:72:96:15:14:6d:28:06:2c:
ca:59:76:ad:ee:22:4a:7f:68:bc:c1:dc:3f:8b:d5:
b3:48:34:fb:51:b7:06:e9:8c:04:fe:13:45:8b:cf:
ca:ad:53:90:bc:5b:fc:a1:1d:76:75:89:90:c9:71:
06:71:55:a3:b1:a2:44:8c:2e:2d:7f:5c:5f:3f:0d:
e2:5f:cf:10:6a:08:19:e0:cc:9c:e1:9b:d1:a2:d4:
46:63:2c:96:42:27:0c:76:87:6c:38:cd:f8:0e:9a:
14:e8:b5:a5:0a:99:c3:09:ce:5e:1a:d7:ad:ac:36:
6b:ee:a7:cf:30:df:0f:7e:87:0e:47:b9:ee:8b:8e:
d3:9d:3c:5b:b3:83:2e:b5:87:ac:47:1d:af:35:38:
52:70:77:8d:19:77:1e:30:3f:aa:90:9e:33:e3:d9:
80:26:28:ca:e9:56:ac:88:da:58:88:37:69:65:8b:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:00:98:B9:2C:32:27:47:D2:7A:43:2C:D4:6C:A9:18:F6:69:C2
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.135.0/24
45.89.255.0/24
45.93.47.0/24
45.137.127.0/24
179.61.142.0/24
179.61.158.0/24
179.61.249.0/24
181.214.25.0/24
181.215.12.0/24
181.215.38.0/24
181.215.42.0/24
185.135.8.0/24
185.137.15.0/24
185.143.230.0/24
Signature Algorithm: sha256WithRSAEncryption
93:69:95:8c:e9:a8:96:f3:64:6b:60:dd:15:21:cf:59:ea:20:
b7:97:a9:93:c4:8b:11:31:6b:41:e4:4a:27:e5:c9:d5:5e:80:
53:c1:9c:d5:b8:e5:94:02:2b:99:bc:ca:a5:8a:f2:ca:7a:09:
5d:2e:8e:2a:0f:be:dc:27:9b:4f:ce:7b:e6:53:ea:3a:a9:a9:
da:95:ff:99:82:1f:e0:92:7d:87:5e:cb:a4:dd:37:ca:d8:29:
5c:62:2f:e2:0d:16:87:e0:74:89:06:bb:69:42:a7:b6:d8:f2:
3d:87:36:df:e7:e8:c3:c7:61:9e:bb:e5:c4:72:57:45:3e:67:
97:b8:1c:06:3e:57:92:30:5e:e6:1e:b8:4c:e3:9b:24:11:c2:
df:a1:c7:5e:55:73:de:ae:71:03:6f:66:d2:16:4b:38:78:7b:
50:ef:dc:b8:42:6c:2c:15:e7:2d:70:9c:8e:90:47:c5:4f:ed:
74:82:f2:bb:68:c3:f0:80:c7:2a:fc:4a:bf:92:b1:8f:12:6c:
f5:91:73:20:7a:b2:60:ce:66:1b:e8:80:fd:98:4c:01:85:5f:
9c:04:12:8b:73:5e:02:51:22:8a:27:08:52:1c:03:82:95:47:
c0:03:96:2d:66:98:e6:6b:7f:f1:d0:a6:35:d1:05:2e:a1:88:
21:3c:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org