Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: N/x3qJIHe73lvDQLmCrFWnxWzGJ4j/wMMtyRrTWHPOU=
Subject key identifier: 71:DD:BB:00:E7:5D:67:31:06:30:01:FA:E5:BC:B4:33:16:BC:8E:59
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 0ADD7444B74AA9E0C9AB2846A9ABBE71713C9577
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3257.roa
Signing time: Mon 28 Nov 2022 12:18:16 +0000
ROA not before: Mon 28 Nov 2022 12:13:16 +0000
ROA not after: Mon 27 Nov 2023 12:18:16 +0000
asID: 3257
IP address blocks: 181.214.206.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:dd:74:44:b7:4a:a9:e0:c9:ab:28:46:a9:ab:be:71:71:3c:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:16 2022 GMT
Not After : Nov 27 12:18:16 2023 GMT
Subject: CN=71DDBB00E75D6731063001FAE5BCB43316BC8E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:4e:d3:fd:6c:5e:3a:f6:66:dc:2d:4e:82:
11:b2:a8:38:55:76:41:14:73:a5:d8:5f:d6:aa:56:
94:25:53:06:a8:dd:5f:40:18:7d:3e:8b:cf:d3:17:
f2:82:12:8c:b1:91:72:00:ca:5c:b6:71:d7:37:53:
0d:5f:18:d2:60:26:26:8a:7c:12:42:f5:cc:75:a0:
97:f6:b3:d9:32:7a:50:9c:dc:22:e1:e8:5a:57:06:
35:ba:bb:4c:eb:b4:57:a2:28:47:27:77:85:6e:6c:
2a:cc:af:90:3b:da:42:0d:f2:65:a0:a5:d3:fc:a1:
6c:cb:4e:13:d0:e4:85:70:91:c7:f4:cd:71:56:55:
1e:83:68:68:b4:7c:60:c7:7f:2f:8e:b5:eb:8a:1c:
3a:19:07:84:c6:d7:e3:fc:34:f3:a7:ae:71:31:de:
62:c7:dd:37:1a:1c:6b:5a:7b:91:9b:fc:a0:6c:03:
3d:03:2a:05:da:56:91:fe:1e:67:3c:f8:23:d3:49:
a4:a1:62:48:9c:0b:34:74:b4:5d:81:da:43:1a:36:
30:8d:84:7b:be:02:57:80:72:c0:fd:cb:99:8f:4b:
02:f0:52:f1:4a:7e:e5:37:f3:95:82:95:b2:60:83:
e6:fc:0e:f9:21:35:91:1d:70:df:c6:be:8e:97:1d:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:BB:00:E7:5D:67:31:06:30:01:FA:E5:BC:B4:33:16:BC:8E:59
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.206.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f4:82:b3:2e:08:2a:23:50:2f:e8:95:f7:9d:de:73:d8:b6:
91:6d:d9:63:39:5f:90:60:c4:18:b6:63:17:49:6e:8a:43:77:
91:b0:d6:51:b3:d3:fe:79:a0:f7:05:8a:62:9b:c8:07:2a:83:
a7:5f:c7:50:03:80:3d:7a:49:d0:5c:00:99:ad:25:8a:af:c0:
37:9c:07:c7:8a:c5:f9:db:52:4f:31:31:27:5e:76:9f:c8:3e:
51:20:b2:78:56:33:51:a4:7b:b0:6d:26:24:ff:82:f9:b8:f0:
43:9a:2e:c2:e6:45:4e:7d:b5:e1:2a:cd:27:89:45:35:60:78:
24:fe:82:73:28:91:a0:a5:7f:14:c2:59:fb:14:4f:13:30:16:
30:df:c3:24:1b:fd:47:23:cc:2b:48:fc:9e:55:79:e0:1e:98:
8d:71:5e:ee:ca:bf:36:04:6a:b8:a7:b2:f1:db:b6:79:ee:9f:
bc:c7:dc:a0:bd:af:06:78:39:97:8b:67:5b:e7:02:13:5b:3e:
fa:fa:4a:b3:d0:03:fd:e7:99:aa:8b:7f:c0:fb:f6:cc:65:a2:
35:0d:43:95:57:65:9d:28:a6:48:c6:7a:99:28:a0:40:f8:75:
4c:f8:9b:08:dc:d7:4b:a3:e3:fd:1f:94:de:9f:41:c7:9f:44:
6a:d3:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org