Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400040.roa
File: AS400040.roa (raw, json)
Hash identifier: MECBXwvHsZ9KsmVz3CXHHYEJ1d+FyNuawuGZCgwIZXU=
Subject key identifier: 96:D7:03:A5:44:EF:9E:00:B1:12:89:BF:0B:EE:29:52:49:93:E2:7A
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 199BE948D16770B6101EB5BB98833E4F553C210E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400040.roa
Signing time: Mon 28 Nov 2022 12:18:20 +0000
ROA not before: Mon 28 Nov 2022 12:13:20 +0000
ROA not after: Mon 27 Nov 2023 12:18:20 +0000
asID: 400040
IP address blocks: 149.62.40.0/24 maxlen: 24
181.214.84.0/24 maxlen: 24
181.215.198.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9b:e9:48:d1:67:70:b6:10:1e:b5:bb:98:83:3e:4f:55:3c:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:20 2022 GMT
Not After : Nov 27 12:18:20 2023 GMT
Subject: CN=96D703A544EF9E00B11289BF0BEE29524993E27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:aa:a9:5a:29:7d:8f:25:77:0e:34:1e:fe:
97:5b:e0:ec:0b:6a:2c:4b:a6:f2:9f:8d:01:81:74:
dc:37:57:2f:2b:c9:c9:bb:05:8d:69:78:87:69:bf:
e4:24:b8:e1:32:10:25:cf:54:db:11:f0:3f:c2:ad:
f1:4a:d1:da:09:ed:05:90:92:ec:20:08:84:f7:43:
1d:b4:5e:3f:d2:b1:57:48:ae:bd:29:a6:ca:4d:e0:
22:c4:8a:71:44:f1:67:75:d4:c6:59:87:12:50:a6:
4f:d3:a0:68:28:f7:ca:d6:88:2d:a2:fb:e3:3f:fe:
eb:f9:ae:12:45:94:aa:36:eb:bd:a2:83:b1:78:d0:
c5:80:1c:ac:6b:1f:d6:c0:bd:99:c8:5c:c6:4f:bc:
78:32:9f:63:ad:cf:45:02:1e:f3:2c:c8:d0:cd:8f:
36:d7:43:65:e3:65:28:6d:cf:14:25:25:38:8e:90:
4a:a6:01:82:3f:bd:17:22:47:6a:57:11:e8:59:cc:
a6:28:fd:ee:cb:8d:80:be:0e:42:9c:e9:f9:f7:14:
8b:8f:76:37:2a:95:df:38:bd:57:68:87:ce:bc:9f:
c8:b3:84:66:01:5f:83:c2:33:bd:8e:e9:0b:8c:50:
ed:b5:01:33:a9:db:df:f0:6b:7a:42:7d:1f:86:1d:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:03:A5:44:EF:9E:00:B1:12:89:BF:0B:EE:29:52:49:93:E2:7A
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.40.0/24
181.214.84.0/24
181.215.198.0/24
191.96.61.0/24
191.96.223.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b4:37:bd:96:89:50:ff:62:fc:84:b8:9c:0f:23:2e:96:6a:
75:27:d7:ec:28:0e:7e:b8:f8:7d:5c:e0:45:a8:51:35:27:4e:
54:d9:5e:7d:73:01:e2:e7:e6:7e:fe:22:88:db:a3:f6:62:fd:
3b:a6:30:35:7c:19:8b:db:62:81:64:bc:e8:88:72:3e:ad:6b:
1b:0c:81:c2:61:57:53:37:ca:0a:0b:6e:1e:3f:08:64:85:7d:
07:6a:5b:12:da:93:30:de:0b:42:86:84:63:67:30:d2:ba:73:
ee:b1:02:0b:73:9a:08:aa:4d:c0:af:94:86:75:25:8a:76:14:
cc:57:86:ae:c3:bb:7d:71:ac:72:cb:24:63:50:e9:56:c1:d6:
f4:b4:f8:45:8e:5a:86:9f:6d:31:0c:55:fc:2e:56:f2:4a:45:
37:a7:65:8a:11:b1:00:4f:39:f4:c6:80:ef:5f:89:d7:36:30:
f0:45:eb:43:7e:d6:14:77:82:8d:21:9f:34:50:ea:4c:1b:f9:
e5:fb:75:42:27:48:68:f4:68:7d:90:b0:41:07:70:f0:a1:82:
19:b4:a1:7c:38:84:69:84:05:11:4b:e7:eb:2a:95:01:ee:fa:
49:9c:82:c3:5f:41:5d:cd:9e:f7:62:96:2b:46:4e:e2:64:21:
b7:d8:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org