Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: NHeaiAZgzBAarb3RLan1TJMGafg9ua7MTqb7AI3Vr6w=
Subject key identifier: 21:69:8F:48:B9:2C:7C:FC:10:D8:68:E6:15:2C:31:18:C0:B5:6E:4A
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 2CC13F78CB53319B65DA23B5187644E6AEC7B506
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212384.roa
Signing time: Mon 28 Nov 2022 12:18:26 +0000
ROA not before: Mon 28 Nov 2022 12:13:26 +0000
ROA not after: Mon 27 Nov 2023 12:18:26 +0000
asID: 212384
IP address blocks: 179.61.130.0/24 maxlen: 24
181.214.241.0/24 maxlen: 24
181.215.37.0/24 maxlen: 24
185.139.3.0/24 maxlen: 24
185.139.239.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
191.96.34.0/24 maxlen: 24
191.96.109.0/24 maxlen: 24
191.101.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c1:3f:78:cb:53:31:9b:65:da:23:b5:18:76:44:e6:ae:c7:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:26 2022 GMT
Not After : Nov 27 12:18:26 2023 GMT
Subject: CN=21698F48B92C7CFC10D868E6152C3118C0B56E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:47:0a:3e:5c:87:40:42:dc:fd:a5:ee:c8:
45:6c:d4:5d:cc:6f:c0:82:bb:b4:2b:fa:be:20:f6:
f8:c0:f6:73:ce:17:3a:47:16:16:f1:b3:2d:40:40:
65:b5:8d:69:42:91:c6:ae:eb:4a:08:d5:4c:5d:36:
29:cd:fc:69:e9:0e:6e:52:31:52:72:c3:12:4c:9e:
6e:d9:8c:7e:4e:4b:f4:69:ba:d3:36:82:f1:a0:78:
4d:44:f3:a3:ae:0b:37:30:74:0e:27:74:16:f3:41:
93:e0:c5:85:b8:72:96:79:6d:c4:4e:1c:0a:08:b5:
a8:37:df:d7:39:83:96:cb:9e:09:a9:e5:1e:e0:77:
c1:44:b5:e9:db:a4:e2:8b:d7:3e:dd:ba:c6:9d:43:
cd:fe:7e:8c:0b:ff:dc:ba:bd:41:f8:a4:4a:58:5e:
21:a9:ca:4a:ec:99:3f:98:61:84:13:86:31:44:df:
11:05:0a:f7:ec:72:1e:d2:59:2a:bd:c4:fb:64:82:
a5:ef:6d:88:d1:84:58:6e:d1:d7:db:b1:ef:46:d1:
72:9c:34:91:f9:e2:cc:0a:af:28:8a:6c:60:f5:a7:
dc:01:30:db:63:2e:bc:a2:03:37:0c:03:ed:d5:18:
2a:87:14:cd:d7:99:2d:31:4f:3f:fb:c2:ca:02:ae:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:8F:48:B9:2C:7C:FC:10:D8:68:E6:15:2C:31:18:C0:B5:6E:4A
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.130.0/24
181.214.241.0/24
181.215.37.0/24
185.139.3.0/24
185.139.239.0/24
185.158.105.0/24
191.96.34.0/24
191.96.109.0/24
191.101.93.0/24
Signature Algorithm: sha256WithRSAEncryption
67:53:79:7c:64:26:60:0d:0e:27:d8:40:5c:eb:da:17:0e:7c:
89:c7:86:81:f6:c2:1f:4c:a5:60:63:0b:4e:70:76:5b:78:42:
d4:0b:4b:3a:3a:67:58:6f:10:28:a2:52:6b:86:ea:2e:ee:a3:
d5:c8:e4:21:f7:aa:25:c2:54:ef:89:66:47:d5:a8:fe:75:a6:
6f:f0:33:1e:0d:92:f3:ee:b5:e2:4e:74:06:81:95:c4:8a:70:
37:40:1d:d4:44:41:b3:20:3e:eb:70:f8:97:5b:36:8d:27:64:
99:30:a8:ae:89:7a:99:10:d1:85:47:90:00:5c:ca:c6:95:41:
24:35:e9:75:5e:82:2c:80:81:78:78:83:c4:e1:6b:09:39:02:
aa:62:97:ca:35:38:65:03:14:b9:03:ef:18:28:bb:a0:87:f3:
c9:34:04:cb:37:a3:01:60:42:84:53:d1:08:fa:c6:b3:01:57:
6d:67:df:9f:78:70:c6:e2:be:f0:c4:83:78:2c:4e:de:9e:38:
16:e3:d8:71:94:33:ed:ca:e6:30:58:3c:bf:4a:9a:2f:ec:12:
05:15:ef:86:ce:20:ad:c9:d8:1d:5c:21:fa:2b:c5:68:95:46:
79:e1:6f:b9:e3:df:b3:d2:98:b9:78:a7:a1:db:da:31:f3:8a:
eb:d4:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org