Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: xiQ9EXnO8wxEFBFL9PG9eNCYCRoubulvkUldAtSbibU=
Subject key identifier: FD:BF:0E:9D:31:9F:D2:8A:5A:05:57:20:74:38:F5:48:D9:B2:10:19
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 6763BE266933CE4B1966394E35268198AE50CE3E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS33387.roa
Signing time: Thu 02 Feb 2023 14:50:25 +0000
ROA not before: Thu 02 Feb 2023 14:45:25 +0000
ROA not after: Thu 01 Feb 2024 14:50:25 +0000
asID: 33387
IP address blocks: 181.214.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:63:be:26:69:33:ce:4b:19:66:39:4e:35:26:81:98:ae:50:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 2 14:45:25 2023 GMT
Not After : Feb 1 14:50:25 2024 GMT
Subject: CN=FDBF0E9D319FD28A5A0557207438F548D9B21019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:2d:1c:81:dd:f4:2a:60:37:f2:63:6b:31:
61:a6:3b:e6:7b:b4:40:ca:40:1b:75:40:f6:3b:f2:
97:30:8e:4e:1a:c7:4f:10:74:8a:a5:9e:e8:ec:cb:
38:6e:1b:9e:04:45:5c:5d:68:b2:89:a9:2a:34:58:
32:30:9a:3e:46:80:c7:0e:1b:fb:16:24:3a:66:06:
c2:17:fa:3e:a6:b4:fa:93:c1:5b:b4:ac:b0:54:c1:
36:73:5e:f3:75:99:83:1e:5e:0e:75:35:5e:11:ba:
a1:a5:e5:84:bc:47:a8:dd:56:eb:b0:12:f4:ab:42:
63:6c:99:69:5d:cc:41:96:b0:4a:78:9d:bd:ab:c8:
c4:ee:10:88:3f:a4:71:3d:7a:50:70:d0:a6:52:13:
9d:ff:e8:e1:94:17:f4:4f:e0:92:89:ab:99:4a:c2:
39:79:b5:4b:bb:03:fc:08:41:0f:50:46:82:13:54:
45:58:e8:3b:3f:f5:b9:4d:79:68:65:c3:19:ce:44:
4f:ca:3f:dd:0e:f2:e5:72:90:0a:eb:71:78:b6:fb:
30:ee:13:79:4e:34:66:d4:1a:30:ce:9e:34:20:19:
07:fa:1a:63:38:fb:75:e6:e3:28:24:fe:38:8a:49:
5b:b1:c5:d8:a1:18:b8:10:a6:22:bb:6e:a2:b6:65:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:0E:9D:31:9F:D2:8A:5A:05:57:20:74:38:F5:48:D9:B2:10:19
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a2:16:74:6f:d6:f0:2d:a6:4d:c0:f1:32:dd:a4:80:08:62:
13:e4:bc:c7:4f:fc:c5:3b:4d:20:3a:56:3d:04:c0:8d:66:c7:
34:39:1b:df:b7:ad:ab:3b:c2:ba:53:6b:f1:65:53:01:07:36:
36:8e:cf:be:eb:e4:2e:bd:b6:81:fb:ca:d8:5d:41:62:c0:82:
30:1e:21:d4:fb:99:e6:25:16:6a:3e:37:b8:30:c3:72:de:1b:
b0:56:60:91:f3:98:06:eb:d8:9e:81:5e:43:17:54:de:75:93:
e3:60:52:49:28:3f:83:08:71:87:7f:a1:b8:40:3c:7c:0d:22:
23:c7:5b:04:65:ca:ad:74:1a:37:00:e5:1b:73:3a:89:88:e1:
15:18:3d:76:93:b0:fe:c7:9a:17:c3:5c:09:34:25:04:b8:91:
90:25:6a:77:e2:7e:68:e7:7c:a6:61:d8:fc:4d:0c:d3:5d:20:
c7:2b:45:d2:1d:3f:62:c6:55:85:db:41:8b:94:a3:ae:d2:42:
2f:73:bc:9e:07:16:66:67:fa:13:d5:a0:5f:37:6a:ad:2d:8c:
9f:cb:be:98:46:b1:c7:05:38:bd:ab:89:90:42:89:a9:dd:d8:
97:a8:05:04:7c:47:d5:92:35:df:f9:bb:2f:69:63:d0:20:3f:
83:b5:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org