Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32181.roa
File: AS32181.roa (raw, json)
Hash identifier: c8DU5cLIBQCWZDXTnnzhOe/V+bG5kkVGE5Z1aH0Y9Eo=
Subject key identifier: D2:B3:0C:31:0F:E4:CB:49:2D:FC:CF:39:29:FE:4B:36:33:7D:7F:C0
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 3D4E2347079B26FFACCF8DA2084F09FA2243F711
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32181.roa
Signing time: Mon 28 Nov 2022 12:18:25 +0000
ROA not before: Mon 28 Nov 2022 12:13:25 +0000
ROA not after: Mon 27 Nov 2023 12:18:25 +0000
asID: 32181
IP address blocks: 5.252.79.0/24 maxlen: 24
5.252.163.0/24 maxlen: 24
181.214.77.0/24 maxlen: 24
181.214.146.0/24 maxlen: 24
181.214.157.0/24 maxlen: 24
181.214.161.0/24 maxlen: 24
181.214.207.0/24 maxlen: 24
181.214.237.0/24 maxlen: 24
181.215.23.0/24 maxlen: 24
191.96.62.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4e:23:47:07:9b:26:ff:ac:cf:8d:a2:08:4f:09:fa:22:43:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:25 2022 GMT
Not After : Nov 27 12:18:25 2023 GMT
Subject: CN=D2B30C310FE4CB492DFCCF3929FE4B36337D7FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:25:30:7a:42:ae:d9:ab:0c:02:c3:2b:cc:
50:63:7f:9c:53:7c:6c:eb:0d:63:e4:99:a8:dd:e5:
e6:e3:f8:b4:e2:fb:36:d4:34:63:3d:43:4a:ad:85:
32:b2:45:3d:a5:62:66:cd:ef:48:cc:7a:51:9c:ee:
4a:30:a6:a2:88:ce:b3:a7:2d:98:b5:d7:1c:ae:9a:
ed:2d:af:d9:4a:16:85:de:16:c7:a2:45:1e:99:a6:
b6:ab:8b:eb:df:9e:87:d2:e0:52:c5:48:24:0d:7f:
06:b1:c7:59:c6:79:e9:04:0f:e7:33:ae:c6:5b:3f:
c6:e3:a7:cb:cc:7b:7a:5e:3b:2a:53:7e:65:c8:4d:
5e:46:5c:4f:f0:f4:8c:30:af:71:37:d8:ee:2c:9c:
e3:d7:46:61:ce:d4:1a:04:bf:7e:c3:17:3b:8b:9f:
d2:ac:68:30:84:69:48:ec:d7:8d:f0:7a:70:1b:6e:
3a:67:f0:57:81:af:93:70:fe:f7:1d:6d:db:ce:52:
39:f0:46:eb:a7:05:b4:de:e2:0a:c5:93:2d:62:e0:
77:e3:5e:16:19:bd:91:91:40:c1:a9:50:c0:65:75:
d0:7f:bf:7f:d2:08:64:4d:42:76:6c:57:3d:af:17:
81:e8:ec:27:2e:d7:3a:83:cc:e7:e1:27:87:a8:21:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:0C:31:0F:E4:CB:49:2D:FC:CF:39:29:FE:4B:36:33:7D:7F:C0
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS32181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.79.0/24
5.252.163.0/24
181.214.77.0/24
181.214.146.0/24
181.214.157.0/24
181.214.161.0/24
181.214.207.0/24
181.214.237.0/24
181.215.23.0/24
191.96.62.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
81:32:0d:df:b5:5d:be:bb:eb:5b:d2:00:3c:4b:be:8f:10:a7:
0a:4a:aa:3a:34:80:69:24:bf:b8:9f:7a:09:2f:ac:30:76:38:
c1:6b:69:a1:84:23:f2:c9:27:1d:53:25:10:6d:ea:c1:c7:7e:
6e:4b:49:dd:a4:74:e5:85:c4:3a:cf:e8:26:c8:fe:90:9d:7c:
27:69:14:43:5c:08:85:35:3d:df:93:b1:63:73:e5:48:c8:bb:
13:22:6c:42:b7:55:09:03:a1:bb:5f:7f:0f:e5:90:02:ba:88:
d0:55:5a:c5:cd:f0:92:dd:f4:d0:18:2b:e7:6a:2c:d9:90:03:
32:11:3c:b3:6b:9a:e2:0c:3f:6c:b6:7f:43:a5:d0:07:3a:3b:
b6:e9:f9:59:6b:35:39:06:22:d2:94:e0:18:3f:06:0d:05:86:
67:e2:97:03:a1:9b:c6:07:93:35:d2:f9:51:c9:cd:b7:bd:dc:
88:c4:7e:f5:9f:f2:8b:cc:06:b6:14:da:96:35:91:2c:0d:2f:
e0:d1:86:1a:09:f3:b4:d1:88:64:6e:f5:44:28:05:85:e4:24:
93:8c:4e:8a:f0:5e:1d:55:a9:9c:8d:b2:64:d3:2b:e4:f4:f0:
4f:c5:7a:70:4e:2a:28:97:3a:e4:c9:ed:0e:9c:c7:ef:07:19:
12:7f:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org