Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: KQTsBxUG9F/HdIQ9s5hXtbDuQmWU2xB17RnY/4KYgm8=
Subject key identifier: 6C:A3:74:FC:E9:5B:DC:48:8E:A8:B3:27:5B:E9:F2:09:CD:66:7A:47
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 2865071032E5829731A712A8D4EF46CDD0D43553
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa
Signing time: Fri 23 Dec 2022 14:11:27 +0000
ROA not before: Fri 23 Dec 2022 14:06:27 +0000
ROA not after: Fri 22 Dec 2023 14:11:27 +0000
asID: 29802
IP address blocks: 179.61.170.0/24 maxlen: 24
181.214.72.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.235.0/24 maxlen: 24
181.215.251.0/24 maxlen: 24
191.96.170.0/24 maxlen: 24
191.101.200.0/24 maxlen: 24
191.101.208.0/24 maxlen: 24
191.101.226.0/24 maxlen: 24
191.101.248.0/24 maxlen: 24
2a0a:9a04:3::/48 maxlen: 48
2a0a:9a04:4::/48 maxlen: 48
2a0a:9a04:5::/48 maxlen: 48
2a0a:9a04:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:65:07:10:32:e5:82:97:31:a7:12:a8:d4:ef:46:cd:d0:d4:35:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Dec 23 14:06:27 2022 GMT
Not After : Dec 22 14:11:27 2023 GMT
Subject: CN=6CA374FCE95BDC488EA8B3275BE9F209CD667A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:39:92:1f:6d:68:bc:e7:b5:ee:ae:e7:cd:
19:7f:db:81:4f:cc:2b:3d:92:f8:34:03:5d:f8:1a:
5c:da:14:b4:76:cd:dc:3b:26:45:e4:b9:ff:86:09:
94:f4:93:b4:9d:c8:74:4a:5f:6e:79:72:38:f8:cb:
a5:f7:5d:d5:70:18:60:b9:fc:9d:07:8b:5f:1c:3f:
83:4e:cb:17:16:2c:24:74:32:1b:e8:2f:56:ec:b6:
85:74:62:18:39:48:da:6b:a3:80:fc:c9:ee:00:97:
6c:7d:31:ee:5a:49:0b:25:f8:1e:14:0f:00:23:9c:
51:e4:45:8c:53:36:41:97:0c:b2:39:69:5b:85:97:
32:32:b5:94:6f:a2:b9:04:69:8a:23:f2:8e:79:27:
fe:13:28:92:ba:e8:c8:a3:e5:89:67:20:0b:d6:f9:
0c:06:c0:0f:d9:88:64:d5:08:ae:43:42:51:1b:70:
fa:e8:ef:91:95:1e:f3:aa:05:26:39:ca:06:83:fd:
19:3c:bb:0e:92:9a:c2:a9:75:70:03:f4:8f:2b:a2:
ed:1f:98:4c:b9:48:64:c0:49:07:85:e0:08:7b:e4:
b9:65:a2:67:1b:c7:e4:a6:b2:a5:3c:95:6e:da:f8:
62:fc:9d:83:a8:9d:75:f8:51:aa:c1:bb:a8:ef:8a:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:74:FC:E9:5B:DC:48:8E:A8:B3:27:5B:E9:F2:09:CD:66:7A:47
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
181.214.72.0/24
181.215.228.0/24
181.215.235.0/24
181.215.251.0/24
191.96.170.0/24
191.101.200.0/24
191.101.208.0/24
191.101.226.0/24
191.101.248.0/24
IPv6:
2a0a:9a04:3::-2a0a:9a04:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:de:96:c5:f4:58:51:46:44:5d:22:67:47:ed:3f:59:88:9d:
d2:67:45:92:56:82:96:c0:c9:b4:1e:35:e5:ad:90:95:dc:2d:
ad:72:f6:04:f9:df:d6:bd:da:26:f4:1f:bf:98:6f:bc:20:cd:
91:f9:22:8d:95:67:94:5a:16:06:7a:d4:5d:a0:53:34:74:69:
4d:7d:d0:19:49:b4:e8:7f:d3:bf:0a:b9:20:67:aa:f4:4f:09:
8b:c1:b5:c5:68:58:84:0a:f4:1e:66:31:d0:1b:2d:94:7e:9c:
d5:40:9c:90:50:92:ae:98:04:53:6e:00:b2:e9:bf:f2:11:64:
55:4c:67:5e:a3:31:e9:5e:c3:f0:57:f9:39:6c:9c:5a:d4:cd:
62:fe:78:a3:09:56:b7:05:15:1f:33:e0:0b:3a:8a:8f:9d:88:
e3:0d:2c:b4:ef:d1:e9:4b:5a:e5:45:fe:d4:ca:49:30:41:d3:
50:db:b4:35:04:ba:30:a4:3e:b0:e1:99:ed:e5:55:5c:1e:a5:
ba:5a:73:79:f3:ce:c3:19:09:b8:b1:db:22:e4:2e:83:92:ce:
67:9d:3d:22:f9:17:e5:a8:75:72:ea:48:6a:06:4b:0f:3a:fc:
cb:54:c3:b4:88:e1:37:2c:ec:4b:e8:71:40:2c:94:34:88:b5:
31:d9:f8:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org