Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: E9hjwbVQg1X7mU5lVGtSrJAW3A++Qciy3Bu0PVHqPkc=
Subject key identifier: F1:B4:A7:93:17:AF:9B:DA:02:2D:DE:23:44:F3:96:21:4A:41:5D:A2
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 38B6786435E10BFD5E08DCEFA6A6A589D06DA084
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa
Signing time: Mon 28 Nov 2022 12:18:25 +0000
ROA not before: Mon 28 Nov 2022 12:13:25 +0000
ROA not after: Mon 27 Nov 2023 12:18:25 +0000
asID: 42831
IP address blocks: 5.181.124.0/24 maxlen: 24
5.252.78.0/24 maxlen: 24
37.143.61.0/24 maxlen: 24
181.215.25.0/24 maxlen: 24
181.215.226.0/24 maxlen: 24
181.215.229.0/24 maxlen: 24
191.96.110.0/24 maxlen: 24
191.96.209.0/24 maxlen: 24
191.101.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b6:78:64:35:e1:0b:fd:5e:08:dc:ef:a6:a6:a5:89:d0:6d:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:25 2022 GMT
Not After : Nov 27 12:18:25 2023 GMT
Subject: CN=F1B4A79317AF9BDA022DDE2344F396214A415DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:ad:20:93:5f:72:25:1b:f6:3d:b4:e1:9a:
42:cd:9b:c3:2e:b9:39:91:d2:ec:ae:f3:a2:a5:0f:
1c:61:df:1c:1e:c8:af:28:63:96:bd:6e:9e:77:0a:
0c:03:ca:63:4f:a2:04:7e:36:2b:a5:db:df:bc:ef:
ff:07:58:70:84:74:3f:e7:10:cf:52:79:f3:7a:8c:
08:43:09:d3:36:12:07:30:65:d4:f4:c9:51:d1:90:
83:e4:10:e5:90:31:69:05:8a:96:d4:71:90:32:58:
77:b9:9e:ee:4d:c7:26:c2:d9:bc:29:cd:52:1a:63:
65:2c:c7:a4:05:2a:53:75:83:73:4c:1d:00:58:39:
3b:a3:65:10:56:ea:47:e4:ae:6d:cf:54:f9:c5:c4:
bb:fb:f8:7b:43:81:cf:5e:0a:93:36:fb:7d:f9:41:
b9:18:0f:c8:f3:86:6d:55:08:83:31:d8:ca:17:3e:
38:5f:c0:e5:41:f1:e8:09:86:ac:d7:ee:8f:6a:66:
9d:5b:ec:de:d8:72:74:f9:7f:f4:a2:94:33:63:0d:
9a:21:0e:4a:2f:1e:6a:41:25:7f:94:cc:06:04:3b:
8e:d4:d0:4b:48:c0:1a:58:20:a1:b5:a4:aa:08:6e:
b2:a3:4b:44:f6:97:b5:a3:68:3d:5e:0a:75:23:52:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:A7:93:17:AF:9B:DA:02:2D:DE:23:44:F3:96:21:4A:41:5D:A2
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.124.0/24
5.252.78.0/24
37.143.61.0/24
181.215.25.0/24
181.215.226.0/24
181.215.229.0/24
191.96.110.0/24
191.96.209.0/24
191.101.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ef:b1:23:90:d6:a5:a1:64:19:ea:62:66:e1:b0:0e:03:5d:
5b:34:7d:43:6a:75:9a:cf:bb:d3:c6:7b:36:05:ac:18:b6:a8:
d9:9c:a9:ac:37:84:a3:09:27:8a:d1:25:bf:7c:96:c0:52:37:
da:5b:b5:1a:d8:d6:4b:05:8e:2f:d8:75:78:35:b7:97:f1:53:
85:14:9a:68:4d:4c:20:16:2d:96:4e:a8:9e:37:09:14:a6:c8:
5f:d5:81:cd:a9:6d:e2:9b:6e:c5:11:34:e7:4c:6f:37:98:51:
b5:5b:71:cf:c8:d8:87:ac:0c:94:ba:c4:09:d8:00:ba:4c:bf:
ea:7e:35:8c:72:b7:06:35:39:98:61:f2:bb:08:94:17:0b:8a:
16:2e:08:21:b6:ba:7e:45:26:87:10:00:24:cd:fb:d8:aa:56:
7a:4f:21:28:c4:92:00:dd:f3:75:d3:63:65:53:5c:5f:71:d5:
d9:8a:f4:70:3f:a7:03:f8:d5:eb:e9:e9:aa:0c:83:5e:b0:1e:
58:db:5d:19:3b:43:43:ee:c7:0d:d7:8c:cd:b5:f6:50:3f:33:
d8:81:7c:cf:ca:cf:6d:13:9c:81:0c:1f:1e:0f:77:04:09:c3:
f8:c0:60:54:0c:6c:9b:0e:86:e2:e1:75:d4:ab:90:09:e5:67:
40:7e:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org