Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: GXAXVX3Keep99biy5mfQqKfVum5kWppE7IBo7bjEJSA=
Subject key identifier: 64:DD:0E:0C:70:86:3F:C5:6C:40:50:29:57:93:65:48:2B:8D:11:92
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 3DA7CEBA6D579C92F9E22BDFC6C1E3575DA25E16
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211439.roa
Signing time: Fri 24 Feb 2023 12:16:13 +0000
ROA not before: Fri 24 Feb 2023 12:11:13 +0000
ROA not after: Fri 23 Feb 2024 12:16:13 +0000
asID: 211439
IP address blocks: 181.214.185.0/24 maxlen: 24
191.101.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a7:ce:ba:6d:57:9c:92:f9:e2:2b:df:c6:c1:e3:57:5d:a2:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 24 12:11:13 2023 GMT
Not After : Feb 23 12:16:13 2024 GMT
Subject: CN=64DD0E0C70863FC56C405029579365482B8D1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:f6:05:a2:ee:92:9d:18:50:a3:37:d8:80:
36:9d:78:83:c8:f4:63:28:91:52:6c:9c:36:e1:c8:
a2:aa:f2:40:d8:4e:2a:f4:66:e8:75:c2:a9:7d:72:
e5:62:a2:cb:1f:87:3c:6b:73:9d:16:5a:fc:dd:8c:
c4:48:cb:4d:ec:fc:97:81:84:f5:48:44:ac:dd:8c:
5a:c9:05:61:04:cc:39:49:7f:70:56:a9:f2:15:2b:
1d:c9:5e:63:75:49:81:da:2b:32:9f:78:0e:d2:1e:
bc:2d:f1:7f:64:f8:c6:76:ff:8d:d3:0f:96:8f:d0:
b9:69:5c:c9:24:06:b8:2b:7a:cf:98:5a:d6:ba:bc:
b9:1f:32:d2:90:f9:a5:5f:b6:90:6a:9d:3f:6d:43:
11:65:2d:09:77:a6:08:e3:53:99:13:85:d7:bb:9e:
10:bd:0f:36:e3:9e:68:98:00:8b:88:87:30:ca:f9:
05:bf:ee:ef:69:60:cd:bc:2c:6f:7b:3a:20:b7:46:
33:00:dc:9f:72:ec:d7:86:6d:c6:dd:ef:a6:7b:dd:
00:e3:93:2a:19:dc:6a:5a:0e:36:24:a6:4c:4c:20:
37:a2:48:dd:73:23:c1:7d:12:a8:ec:0c:bc:15:d3:
45:2d:47:3a:5b:20:b1:ac:e7:7b:90:df:96:00:a8:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DD:0E:0C:70:86:3F:C5:6C:40:50:29:57:93:65:48:2B:8D:11:92
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.185.0/24
191.101.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1e:94:ff:6e:ee:86:c5:b6:2f:89:c7:b7:1c:fa:15:22:ab:
8c:fd:ce:30:6e:60:73:07:b1:0f:6e:d7:98:0e:0b:5c:47:64:
fe:32:97:10:64:dc:f8:67:5f:b5:39:f1:69:cc:9b:0e:45:e0:
99:59:32:08:d1:1e:e1:f6:76:b1:f8:80:84:30:6b:02:dc:5c:
93:99:b0:3a:61:88:1a:64:5a:14:ca:e5:5d:8c:d5:31:d9:ff:
d3:cc:df:30:11:f8:22:3a:43:73:e7:85:c3:c7:98:bf:6f:27:
24:03:97:52:f9:62:c3:30:32:45:da:b8:2f:09:06:26:93:34:
7e:70:70:ba:19:8f:74:8c:67:e7:fb:ee:55:24:06:74:be:d2:
67:35:9a:1f:3d:15:f2:8f:67:86:43:39:36:31:1e:ec:e0:f3:
7e:0a:f5:8c:bb:7b:e6:71:50:9b:0e:9b:02:b8:ad:61:07:77:
97:5b:33:55:9c:2a:0c:16:f7:a0:bc:7f:8d:68:81:51:d7:45:
0a:52:5a:e2:99:7a:0f:35:f0:8b:53:51:70:a0:a3:fa:21:dd:
f3:50:7b:01:96:a1:c0:b2:7e:46:ba:ff:ac:88:75:7a:44:f9:
76:fc:cb:19:be:50:28:89:e4:a3:e9:2e:09:99:a0:70:a9:3b:
b2:ad:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org