Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211432.roa
File: AS211432.roa (raw, json)
Hash identifier: J0gIC8syV/cNG4TcDO/7cBlP0sIPR8cV8yTZGpOuDX0=
Subject key identifier: 56:62:F3:78:59:D3:CE:EF:36:26:F3:36:CB:B6:DB:79:EA:EB:38:82
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 7C93B7919659F11B0D8CB38BF107096B7E682F65
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211432.roa
Signing time: Fri 10 Feb 2023 08:26:18 +0000
ROA not before: Fri 10 Feb 2023 08:21:18 +0000
ROA not after: Fri 09 Feb 2024 08:26:18 +0000
asID: 211432
IP address blocks: 45.231.207.0/24 maxlen: 24
181.41.209.0/24 maxlen: 24
181.214.172.0/24 maxlen: 24
181.215.54.0/24 maxlen: 24
185.170.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:93:b7:91:96:59:f1:1b:0d:8c:b3:8b:f1:07:09:6b:7e:68:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 10 08:21:18 2023 GMT
Not After : Feb 9 08:26:18 2024 GMT
Subject: CN=5662F37859D3CEEF3626F336CBB6DB79EAEB3882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:a0:f9:7c:7e:5a:76:c1:be:e0:ce:51:17:
4e:2f:46:7a:bb:c7:95:c0:cc:77:26:7f:3b:08:e5:
42:03:0c:56:37:4f:ba:c9:e4:dc:9e:48:62:b6:4a:
fd:b8:28:6c:2b:6b:30:ef:c2:4a:ec:51:2c:30:03:
c7:7a:c8:a7:ec:b2:42:ab:ba:47:60:cc:db:c4:9a:
96:4c:ea:0a:d3:a4:e9:1d:59:cc:c8:43:14:2d:31:
04:c8:0b:2c:6d:88:4c:c9:78:fa:f9:92:2f:7c:a8:
12:d0:4b:1b:47:4b:2c:60:a1:aa:6e:7d:c7:cf:38:
4e:ff:63:76:19:71:d4:3b:be:99:34:3d:4c:b6:61:
c2:53:a2:7f:61:57:aa:32:32:fc:41:7b:ea:9b:af:
0d:0f:4f:2d:32:c5:68:60:c2:39:3a:20:a9:f3:44:
9f:88:9c:45:73:ae:5a:43:f5:19:e3:6d:23:29:fc:
47:29:05:1f:12:79:f3:ea:d0:82:7a:46:c1:a3:43:
5d:49:d2:0b:57:f0:73:9b:bb:49:8b:41:83:33:ae:
80:23:28:49:91:bf:f8:23:4b:33:f4:e1:b4:ce:f2:
87:1e:1e:4f:34:46:06:13:16:bf:87:a1:f5:6a:ce:
70:5b:3e:d1:bf:f0:64:68:07:24:e2:0b:e7:21:d5:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:F3:78:59:D3:CE:EF:36:26:F3:36:CB:B6:DB:79:EA:EB:38:82
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.207.0/24
181.41.209.0/24
181.214.172.0/24
181.215.54.0/24
185.170.56.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0a:96:9f:7e:16:a7:96:cf:a9:22:19:2f:56:a6:f2:84:46:
15:bb:6c:62:ab:ef:d5:bd:c5:de:31:c9:40:9e:38:fc:81:2d:
0a:22:f1:88:9e:6e:eb:e9:45:11:a1:70:44:28:31:f5:9d:ed:
6c:42:a2:db:c0:3d:f5:b3:73:f3:9a:b3:44:bd:ff:94:8b:ae:
e2:65:b2:2b:88:49:1d:57:14:80:59:4c:5a:c8:58:fa:33:e8:
c6:4c:e6:4a:5d:9c:24:87:66:fd:50:11:54:b1:00:aa:a4:e1:
82:ef:b8:21:67:cf:3b:8d:3c:a3:e5:7d:2f:00:95:47:37:a2:
2a:d3:68:ed:60:a6:0f:bd:38:d3:d5:9e:7c:63:b4:fd:be:79:
7c:07:09:2b:13:63:fb:38:7a:5e:8d:f2:55:84:bc:26:b3:d8:
98:21:db:cc:eb:f0:0a:57:0a:5e:c7:46:de:f6:71:25:f0:8f:
76:f0:d2:0d:7b:91:ec:2e:0d:3b:ea:75:04:6d:a7:60:30:17:
a9:51:80:fc:66:77:65:a6:87:e9:98:95:e8:30:f3:0a:e6:3b:
8a:84:1b:f0:f7:d8:5c:a3:f3:0d:d7:51:8d:fa:33:da:11:26:
65:af:78:b1:59:e3:9e:7c:88:90:b4:66:6b:5f:34:6e:06:9b:
00:f2:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org