Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400039.roa
File: AS400039.roa (raw, json)
Hash identifier: xwlHnEHzwZZKmZ3IkOtoqyMw+lKTU+24dzxLNpbiw3w=
Subject key identifier: D8:6D:A6:5B:80:08:23:6A:2F:9E:B3:A4:9D:80:54:62:59:4C:28:8F
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 546DBA70C8FD4B88EB948114B5BF954D8998BC11
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400039.roa
Signing time: Mon 28 Nov 2022 12:18:25 +0000
ROA not before: Mon 28 Nov 2022 12:13:25 +0000
ROA not after: Mon 27 Nov 2023 12:18:25 +0000
asID: 400039
IP address blocks: 5.181.129.0/24 maxlen: 24
181.215.245.0/24 maxlen: 24
191.96.197.0/24 maxlen: 24
191.101.57.0/24 maxlen: 24
193.31.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6d:ba:70:c8:fd:4b:88:eb:94:81:14:b5:bf:95:4d:89:98:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:25 2022 GMT
Not After : Nov 27 12:18:25 2023 GMT
Subject: CN=D86DA65B8008236A2F9EB3A49D805462594C288F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:c9:24:1a:6f:05:db:43:95:ec:9c:62:7e:
bf:01:49:a6:61:0e:62:6d:97:5f:01:57:e6:58:b6:
da:5a:eb:69:8a:e9:96:05:ff:aa:94:36:0f:e9:95:
42:e3:6a:2c:dc:98:0d:b9:56:9a:a4:78:dc:d7:ba:
78:db:4d:ee:9e:d0:79:05:82:da:3a:65:55:2d:e6:
9b:22:fe:c2:1f:d3:73:f5:2e:8b:21:ce:79:d9:10:
97:4f:97:58:1e:81:b1:8e:fa:cc:74:eb:b4:05:21:
f3:3d:c7:64:f4:80:f8:9c:ba:28:d4:e1:61:43:68:
2e:7c:8e:07:04:94:d5:65:8f:29:ea:b3:cc:14:4b:
f3:7b:4c:7a:21:91:bd:bb:b0:82:ff:fd:81:d5:2c:
6b:09:97:e0:46:6a:8b:e8:66:37:26:f4:66:2d:ba:
46:33:96:30:b6:de:f0:ab:0d:15:b0:c6:0f:c4:4b:
18:b8:1e:47:ac:0a:02:7c:c5:07:dc:fe:7e:be:4c:
6f:b5:0a:fd:7c:3b:f9:26:89:85:1e:45:74:5d:c6:
7d:df:a9:76:92:9e:40:05:c9:7e:a1:78:59:d3:0b:
cd:78:e7:f4:14:bc:a6:c2:66:6a:b4:20:4b:be:52:
17:16:93:2e:2a:a7:5a:02:aa:b1:c0:c5:1d:a7:9f:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:A6:5B:80:08:23:6A:2F:9E:B3:A4:9D:80:54:62:59:4C:28:8F
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.129.0/24
181.215.245.0/24
191.96.197.0/24
191.101.57.0/24
193.31.42.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:fa:94:f4:24:33:92:d1:0e:e1:bf:c8:8c:35:c8:16:4b:
da:a6:f4:82:ad:c4:d5:9b:ea:3c:25:36:38:13:c7:79:f6:75:
a1:ef:0a:19:5d:b2:94:e6:94:79:26:86:89:4d:54:a7:27:f1:
99:ca:ba:f9:5a:c1:4a:85:ba:d0:11:c6:cf:20:65:c9:73:6e:
da:fd:48:7b:f8:d4:88:3b:6a:50:a8:ba:c8:44:70:30:75:d7:
09:a3:a6:79:b9:bf:21:f8:7b:f0:b4:e3:92:bc:77:0b:36:a0:
d6:97:12:dc:d1:df:84:e9:53:93:49:e5:ef:e0:22:c2:19:a7:
ec:f1:d0:64:3e:ed:c4:ca:89:1a:ee:3b:a5:c2:26:ae:aa:51:
50:ce:bc:a1:f8:81:a3:7f:7b:56:93:51:51:f9:ee:c2:36:8f:
31:e4:7c:1d:2a:2d:03:e0:65:dc:21:bf:1d:91:cd:77:6c:7f:
cc:5b:fc:5e:b7:9b:1c:5a:26:7c:9a:ce:9b:d9:b8:4c:65:47:
31:cf:2f:12:44:d3:12:ec:02:b8:67:a5:71:10:49:99:23:42:
32:45:10:f1:ac:3a:38:59:90:af:cf:47:d4:a7:f4:c3:c4:25:
9a:4b:a5:8c:37:84:60:7b:ba:1d:74:1a:77:88:92:3d:54:46:
84:45:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org