Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211415.roa
File: AS211415.roa (raw, json)
Hash identifier: kKVwx12YFloJP/SN5kewgK2VI1p2cwgP7LbMJ3qntDA=
Subject key identifier: A6:FF:1C:B3:DC:A1:9F:70:59:5C:F2:5C:74:01:D0:79:22:AF:8B:9C
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 495834DA1621BD61406120346156D06C84FE66DD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211415.roa
Signing time: Mon 28 Nov 2022 12:18:22 +0000
ROA not before: Mon 28 Nov 2022 12:13:22 +0000
ROA not after: Mon 27 Nov 2023 12:18:22 +0000
asID: 211415
IP address blocks: 45.133.177.0/24 maxlen: 24
45.139.180.0/24 maxlen: 24
45.139.182.0/24 maxlen: 24
181.215.223.0/24 maxlen: 24
191.101.21.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:58:34:da:16:21:bd:61:40:61:20:34:61:56:d0:6c:84:fe:66:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:22 2022 GMT
Not After : Nov 27 12:18:22 2023 GMT
Subject: CN=A6FF1CB3DCA19F70595CF25C7401D07922AF8B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:11:1a:fa:1b:3b:be:12:67:34:33:fa:4f:
51:86:58:f1:f0:28:e2:ce:a8:b8:06:30:c0:f9:3c:
c3:f5:d2:f4:47:8a:90:e4:29:a7:6d:e7:0e:5f:72:
93:45:e3:6b:09:91:b1:b6:6d:74:ba:6a:3f:c2:2a:
03:67:b1:ea:16:88:d6:84:b1:ad:74:51:91:2d:3f:
d3:b4:63:a5:95:d6:a3:42:47:86:6b:38:6d:61:a7:
b7:18:3a:ac:b1:62:e1:78:2d:42:95:3f:4a:26:61:
03:43:a5:14:0f:dc:3e:60:af:65:0d:57:ae:b6:eb:
18:29:2a:ff:55:08:d5:e3:28:70:33:48:51:69:0f:
3e:25:14:ef:56:57:96:69:5b:e4:08:86:a7:52:73:
d4:40:64:34:dd:36:ed:ed:ef:32:e3:b0:37:51:00:
b2:b7:73:e7:83:5a:e0:f5:01:25:9b:7a:8d:24:24:
a6:2a:77:73:61:51:98:d1:a1:66:9b:9d:38:77:bc:
8c:64:65:83:56:b8:fe:ba:c0:2f:49:53:04:04:d0:
54:20:21:56:c0:ad:24:db:46:dd:77:a5:b1:7e:5a:
b2:cd:81:f4:cf:22:e7:7d:42:e3:47:4c:7d:58:46:
9d:5c:a5:64:b6:62:60:d4:8f:87:0d:48:e9:0e:74:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:1C:B3:DC:A1:9F:70:59:5C:F2:5C:74:01:D0:79:22:AF:8B:9C
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.177.0/24
45.139.180.0/24
45.139.182.0/24
181.215.223.0/24
191.101.21.0/24
191.101.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:c5:2b:1b:17:fa:d8:ca:6b:31:d1:46:37:cb:01:d3:80:
d9:52:10:29:de:0b:93:d5:0b:37:33:0e:07:df:52:08:a7:11:
e3:2f:41:42:d2:b7:f2:bf:52:3a:f3:b6:e7:d8:1a:d6:d4:fe:
00:42:fc:bb:29:ed:23:a2:81:13:88:eb:67:b0:c8:b7:78:5c:
f1:ab:52:6a:6a:c2:0a:76:46:19:dc:ff:1b:dc:c3:5c:9d:93:
42:21:6d:05:37:68:19:3c:d3:e4:43:ec:bb:7b:16:bb:35:50:
9c:64:57:08:a8:26:66:b8:89:48:0a:24:2b:60:92:c8:e4:6d:
df:0c:70:67:a5:11:0a:4a:ea:34:17:0f:70:a6:a1:d4:86:b1:
d6:d7:37:88:d2:0d:2e:1a:0a:98:23:7d:f7:a2:68:fb:58:f6:
8f:ba:b0:1a:8e:48:46:2b:03:bf:63:8b:f5:36:72:57:ec:54:
49:df:f5:73:e7:06:c9:d9:c2:25:f0:bb:ca:8b:54:77:aa:32:
e4:d2:f4:63:4b:38:f5:e3:aa:9b:02:41:f4:0e:19:25:90:03:
61:f8:c2:da:19:7d:3a:6f:0a:dc:e2:c8:58:ee:b0:50:a8:38:
5e:e0:82:44:de:68:a3:66:e1:0a:08:db:bd:99:19:40:ed:44:
9f:42:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org