Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: hw29Y+dfQ5z73gZgD3Fcgk6aH/luy2CM+uiJPOoZKX4=
Subject key identifier: 58:FF:6A:DB:C0:B2:AA:C5:5A:81:7F:7B:03:87:C7:3B:EE:1C:CA:6F
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 3330BD5A624C5CE0489117AE083F41D564016F67
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35913.roa
Signing time: Thu 12 Jan 2023 12:40:13 +0000
ROA not before: Thu 12 Jan 2023 12:35:13 +0000
ROA not after: Thu 11 Jan 2024 12:40:13 +0000
asID: 35913
IP address blocks: 179.61.138.0/24 maxlen: 24
179.61.147.0/24 maxlen: 24
179.61.222.0/24 maxlen: 24
181.41.197.0/24 maxlen: 24
181.41.221.0/24 maxlen: 24
181.215.6.0/24 maxlen: 24
181.215.9.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.13.0/24 maxlen: 24
181.215.21.0/24 maxlen: 24
181.215.27.0/24 maxlen: 24
181.215.28.0/24 maxlen: 24
181.215.43.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
181.215.53.0/24 maxlen: 24
181.215.65.0/24 maxlen: 24
181.215.72.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.141.0/24 maxlen: 24
181.215.147.0/24 maxlen: 24
181.215.180.0/24 maxlen: 24
181.215.189.0/24 maxlen: 24
181.215.221.0/24 maxlen: 24
181.215.225.0/24 maxlen: 24
181.215.232.0/24 maxlen: 24
185.139.238.0/24 maxlen: 24
191.96.9.0/24 maxlen: 24
191.96.11.0/24 maxlen: 24
191.96.17.0/24 maxlen: 24
191.96.20.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.64.0/24 maxlen: 24
191.96.68.0/24 maxlen: 24
191.96.98.0/24 maxlen: 24
191.96.118.0/24 maxlen: 24
191.96.123.0/24 maxlen: 24
191.96.124.0/24 maxlen: 24
191.96.135.0/24 maxlen: 24
191.96.142.0/24 maxlen: 24
191.96.143.0/24 maxlen: 24
191.96.203.0/24 maxlen: 24
191.101.56.0/24 maxlen: 24
191.101.77.0/24 maxlen: 24
191.101.82.0/24 maxlen: 24
191.101.84.0/24 maxlen: 24
191.101.101.0/24 maxlen: 24
191.101.113.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
191.101.194.0/24 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:30:bd:5a:62:4c:5c:e0:48:91:17:ae:08:3f:41:d5:64:01:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 12 12:35:13 2023 GMT
Not After : Jan 11 12:40:13 2024 GMT
Subject: CN=58FF6ADBC0B2AAC55A817F7B0387C73BEE1CCA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:b0:5a:fb:96:72:4b:82:5e:e6:75:4b:a3:
2f:11:6f:89:ba:76:53:d2:4c:e0:4c:e0:7a:f8:ab:
2b:9a:f1:d3:c7:38:74:c9:18:d8:ec:e3:90:ee:62:
38:43:6c:06:e9:dc:ba:6d:b9:84:6d:1c:cd:0c:2b:
d7:31:09:e2:9e:e2:06:4a:c4:5b:2c:be:a2:7e:ce:
7f:ec:c5:94:08:68:3e:0e:1b:05:3b:25:99:b0:fe:
fe:e3:8b:bd:db:5d:dc:84:26:24:c7:c2:e5:ca:38:
e5:b8:8b:63:c8:8a:1a:72:08:5e:b9:5b:69:a9:70:
ad:d6:4f:9b:9c:b0:c5:4c:62:fa:e8:64:6a:85:1d:
1a:22:8a:2d:50:05:eb:f0:0c:88:93:45:e2:8f:46:
61:74:1a:35:3e:c3:20:67:f1:ed:e1:ff:80:4c:35:
65:39:72:dc:cf:2d:06:c8:17:73:39:f6:76:1a:81:
a1:d5:1a:a7:67:87:d2:16:5b:d3:21:44:13:08:51:
b7:fa:60:c3:1a:f2:00:ca:49:8b:7e:70:73:a3:52:
6c:c3:00:c3:ec:44:ac:38:ac:69:b4:c0:b4:d1:ca:
63:47:59:2b:ff:76:b4:23:fc:b0:3d:9c:fc:2e:81:
fa:7f:6e:6e:57:85:99:ce:01:d6:6b:52:9f:41:12:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:6A:DB:C0:B2:AA:C5:5A:81:7F:7B:03:87:C7:3B:EE:1C:CA:6F
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.138.0/24
179.61.147.0/24
179.61.222.0/24
181.41.197.0/24
181.41.221.0/24
181.215.6.0/24
181.215.9.0/24
181.215.11.0/24
181.215.13.0/24
181.215.21.0/24
181.215.27.0-181.215.28.255
181.215.43.0/24
181.215.48.0/24
181.215.53.0/24
181.215.65.0/24
181.215.72.0/24
181.215.136.0/24
181.215.141.0/24
181.215.147.0/24
181.215.180.0/24
181.215.189.0/24
181.215.221.0/24
181.215.225.0/24
181.215.232.0/24
185.139.238.0/24
191.96.9.0/24
191.96.11.0/24
191.96.17.0/24
191.96.20.0/24
191.96.24.0/24
191.96.64.0/24
191.96.68.0/24
191.96.98.0/24
191.96.118.0/24
191.96.123.0-191.96.124.255
191.96.135.0/24
191.96.142.0/23
191.96.203.0/24
191.101.56.0/24
191.101.77.0/24
191.101.82.0/24
191.101.84.0/24
191.101.101.0/24
191.101.113.0/24
191.101.181.0/24
191.101.194.0/24
191.101.205.0/24
191.101.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e2:57:6e:3e:b7:29:63:09:2f:a1:9b:81:34:3f:57:62:4b:
31:bf:45:00:3d:d1:44:f0:b6:59:f3:af:d6:58:13:7c:97:23:
29:5c:c5:65:19:b8:a7:d1:de:63:28:eb:d6:fe:26:b2:5d:ac:
98:1d:3b:0d:ed:b8:12:37:b6:94:4d:a1:16:7e:78:1f:86:24:
24:8b:7c:8f:e3:f3:04:68:42:76:4d:47:b3:97:29:4c:86:41:
d8:b2:68:46:d3:1d:7a:24:af:ea:c6:41:8f:cc:fd:bc:50:d7:
fd:b2:b4:54:04:37:91:84:4b:ec:cd:6b:75:ad:ec:93:c3:55:
88:56:f7:39:47:28:8f:2e:1f:46:9d:25:6a:8a:d1:3b:a1:cc:
48:c6:07:2a:67:a7:8a:95:16:00:01:48:16:94:07:eb:32:88:
79:47:eb:e1:d2:8c:f7:01:49:ef:11:bc:9d:66:d4:e5:12:d5:
01:c6:04:6f:b4:d8:0a:98:a3:be:8c:82:3e:42:e2:91:2d:12:
40:27:2b:7b:50:97:f6:e7:ac:42:3b:4b:e0:6d:73:06:de:80:
e1:04:84:47:64:7a:76:21:54:b7:e9:98:23:9f:b3:fe:bc:5f:
51:a7:8b:32:33:9e:41:47:eb:f4:32:b8:13:0d:d2:6a:74:56:
47:80:32:0e
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUMzC9WmJMXOBIkReuCD9B1WQBb2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAxMTIxMjM1MTNaFw0yNDAxMTExMjQwMTNaMDMxMTAvBgNV
BAMTKDU4RkY2QURCQzBCMkFBQzU1QTgxN0Y3QjAzODdDNzNCRUUxQ0NBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H7Ba+5ZyS4Je5nVLoy8Rb4m6
dlPSTOBM4Hr4qyua8dPHOHTJGNjs45DuYjhDbAbp3LptuYRtHM0MK9cxCeKe4gZK
xFssvqJ+zn/sxZQIaD4OGwU7JZmw/v7ji73bXdyEJiTHwuXKOOW4i2PIihpyCF65
W2mpcK3WT5ucsMVMYvroZGqFHRoiii1QBevwDIiTReKPRmF0GjU+wyBn8e3h/4BM
NWU5ctzPLQbIF3M59nYagaHVGqdnh9IWW9MhRBMIUbf6YMMa8gDKSYt+cHOjUmzD
AMPsRKw4rGm0wLTRymNHWSv/drQj/LA9nPwugfp/bm5XhZnOAdZrUp9BEnAXAgMB
AAGjggMnMIIDIzAdBgNVHQ4EFgQUWP9q28CyqsVagX97A4fHO+4cym8wHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMzNTkxMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAVEGCCsG
AQUFBwEHAQH/BIIBQDCCATwwggE4BAIAATCCATADBACzPYoDBACzPZMDBACzPd4D
BAC1KcUDBAC1Kd0DBAC11wYDBAC11wkDBAC11wsDBAC11w0DBAC11xUwDAMEALXX
GwMEALXXHAMEALXXKwMEALXXMAMEALXXNQMEALXXQQMEALXXSAMEALXXiAMEALXX
jQMEALXXkwMEALXXtAMEALXXvQMEALXX3QMEALXX4QMEALXX6AMEALmL7gMEAL9g
CQMEAL9gCwMEAL9gEQMEAL9gFAMEAL9gGAMEAL9gQAMEAL9gRAMEAL9gYgMEAL9g
djAMAwQAv2B7AwQAv2B8AwQAv2CHAwQBv2COAwQAv2DLAwQAv2U4AwQAv2VNAwQA
v2VSAwQAv2VUAwQAv2VlAwQAv2VxAwQAv2W1AwQAv2XCAwQAv2XNAwQAv2XvMA0G
CSqGSIb3DQEBCwUAA4IBAQAa4lduPrcpYwkvoZuBND9XYksxv0UAPdFE8LZZ86/W
WBN8lyMpXMVlGbin0d5jKOvW/iayXayYHTsN7bgSN7aUTaEWfngfhiQki3yP4/ME
aEJ2TUezlylMhkHYsmhG0x16JK/qxkGPzP28UNf9srRUBDeRhEvszWt1reyTw1WI
Vvc5RyiPLh9GnSVqitE7ocxIxgcqZ6eKlRYAAUgWlAfrMoh5R+vh0oz3AUnvEbyd
ZtTlEtUBxgRvtNgKmKO+jII+QuKRLRJAJyt7UJf256xCO0vgbXMG3oDhBIRHZHp2
IVS36Zgjn7P+vF9Rp4syM55BR+v0MrgTDdJqdFZHgDIO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org