Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29854.roa
File: AS29854.roa (raw, json)
Hash identifier: Sj+RO6G7tCOteqxUPF40JX4Wr97aF9dkMYsAS2MjUII=
Subject key identifier: D9:6D:F1:11:07:96:58:4A:16:34:94:C0:13:D5:D7:51:86:DB:AB:FB
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 64BC16F2B8AF1B9CDC244CEC555AB46606FFF897
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29854.roa
Signing time: Mon 28 Nov 2022 12:18:17 +0000
ROA not before: Mon 28 Nov 2022 12:13:17 +0000
ROA not after: Mon 27 Nov 2023 12:18:17 +0000
asID: 29854
IP address blocks: 191.96.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bc:16:f2:b8:af:1b:9c:dc:24:4c:ec:55:5a:b4:66:06:ff:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:17 2022 GMT
Not After : Nov 27 12:18:17 2023 GMT
Subject: CN=D96DF1110796584A163494C013D5D75186DBABFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:fd:ac:ee:6d:24:87:05:d5:12:31:68:d3:
9d:cb:c6:46:11:60:24:03:1e:af:4a:6a:54:3a:2c:
cf:8c:d3:d1:26:7f:03:42:ec:dc:c1:c1:4d:8c:d8:
19:6d:fd:bc:b8:78:5e:d2:f9:ba:66:c1:0e:49:04:
dd:bf:5b:8e:aa:11:8c:f8:82:23:c8:ff:a4:ec:26:
60:33:ee:65:0e:f7:24:e7:5f:1e:34:18:52:28:5b:
c8:46:73:c3:df:b0:7e:76:e3:8c:8f:7c:1d:e7:3a:
b2:05:07:25:77:a6:cc:5f:21:82:bf:74:0c:07:91:
50:b0:50:57:a8:c0:d6:2c:f8:8c:01:c7:06:4e:aa:
b5:aa:e7:91:54:3a:e5:63:0f:05:e2:38:bb:db:de:
13:85:37:5b:98:5d:98:03:6b:41:e4:53:c8:59:04:
03:79:79:62:9e:54:b5:de:33:33:d0:6b:24:61:24:
cf:5d:1d:2c:a8:ae:de:f0:e3:d9:57:8f:45:05:2e:
21:46:7b:a0:1e:f5:fd:29:f2:25:bf:90:3f:47:79:
63:e1:a4:42:d9:1e:9c:5e:61:db:d8:eb:03:f9:92:
08:45:2f:5f:bb:97:9c:fa:f3:fe:09:1a:76:e1:4e:
01:58:63:f1:53:f7:6e:91:2b:53:98:e6:f6:cc:af:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:F1:11:07:96:58:4A:16:34:94:C0:13:D5:D7:51:86:DB:AB:FB
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.206.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b5:33:4b:98:aa:34:53:97:68:3b:c1:15:12:07:50:fa:64:
9a:1d:33:26:59:81:dc:ae:6a:90:78:79:63:d2:64:1d:d0:d8:
32:67:ba:7c:1a:96:6c:9f:ac:ec:eb:57:98:31:4e:f4:8d:64:
fb:88:71:46:c2:f2:b4:68:25:17:ad:b3:1c:ec:9b:fe:a3:52:
9f:09:aa:1b:33:0b:6b:7a:1b:cd:59:f9:6d:0e:ca:e9:4d:0c:
b2:6c:5d:15:f8:8c:53:7b:71:80:a4:8a:0e:5e:38:9c:1c:35:
22:85:f3:0a:04:eb:68:b0:7f:24:f5:20:52:dc:07:ac:be:7f:
c4:5c:49:d2:c6:38:e3:dd:ac:7e:8f:0c:19:7f:8e:eb:2d:92:
c2:30:ed:87:30:62:27:67:73:70:da:5c:23:8f:f7:16:47:43:
dc:83:4c:5f:19:eb:ae:62:f6:d5:28:72:ab:35:aa:2b:f0:b1:
fa:70:7f:fa:e2:29:2a:90:d5:0f:c7:6c:1e:95:e4:0a:2e:82:
3e:b2:2a:5c:bd:2e:98:72:3d:09:81:e6:28:30:bf:71:1d:b3:
db:62:e3:5c:36:9a:04:00:28:f2:5b:48:ab:3a:6a:7e:1e:55:
db:40:4f:7c:2f:90:49:5a:90:52:21:6f:b7:97:f9:9c:f8:4f:
97:92:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org