Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43043.roa
File: AS43043.roa (raw, json)
Hash identifier: 6eJljDfrFO9viGdaj41YYV1nGWTqIESEyuQQpRvh3zg=
Subject key identifier: 32:59:91:8A:05:ED:43:01:69:AB:1D:CA:B9:90:FD:BD:89:81:4C:DE
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 1DBFBBB4A0606EB70750F970688E681FBB2EF63B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43043.roa
Signing time: Tue 07 Feb 2023 12:12:40 +0000
ROA not before: Tue 07 Feb 2023 12:07:40 +0000
ROA not after: Tue 06 Feb 2024 12:12:40 +0000
asID: 43043
IP address blocks: 191.96.22.0/24 maxlen: 24
191.96.58.0/24 maxlen: 24
191.96.59.0/24 maxlen: 24
191.96.90.0/24 maxlen: 24
191.96.94.0/24 maxlen: 24
191.96.193.0/24 maxlen: 24
191.96.229.0/24 maxlen: 24
191.96.233.0/24 maxlen: 24
191.96.248.0/23 maxlen: 24
191.101.28.0/24 maxlen: 24
191.101.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:bb:b4:a0:60:6e:b7:07:50:f9:70:68:8e:68:1f:bb:2e:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 7 12:07:40 2023 GMT
Not After : Feb 6 12:12:40 2024 GMT
Subject: CN=3259918A05ED430169AB1DCAB990FDBD89814CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:76:b1:4f:71:57:82:86:7c:be:8b:ed:ea:
20:9d:b6:a0:5c:6d:06:ff:2b:6d:79:5c:c4:5b:4e:
a4:4c:79:e4:8c:b3:fb:63:7f:6d:28:ee:37:fc:ad:
1c:6d:30:3e:3a:d2:b9:90:60:82:47:87:6c:30:d2:
e0:ec:8f:e5:61:e6:2b:fe:97:50:f4:f4:3d:df:4f:
df:cb:64:f1:87:19:3e:df:42:01:dd:da:42:13:ea:
d2:60:a3:0b:cc:16:8e:1f:14:01:8a:7b:b5:97:10:
89:81:c1:20:61:6e:73:81:42:e2:c4:5b:99:85:c9:
df:48:54:5f:2a:a1:80:f1:5d:35:42:f6:e7:f0:92:
83:ea:f1:cb:95:d2:e0:62:93:07:63:53:6c:d1:e1:
38:7d:10:fb:3b:73:c2:e2:ff:32:25:81:b7:80:f4:
74:df:7e:38:6d:d8:1e:c4:a5:cf:f6:50:c6:40:ac:
1c:85:e6:b6:93:0a:04:1a:b2:fb:25:04:37:5c:fe:
75:29:3b:a3:88:e0:01:82:d0:9f:cc:89:5d:fb:37:
e4:1a:21:6a:36:49:34:51:ac:a0:67:8d:a8:66:08:
5a:62:fa:e6:0b:b2:07:88:cb:dd:27:3b:a0:64:44:
79:ad:95:5c:6d:10:c9:45:85:a0:89:f4:06:96:67:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:91:8A:05:ED:43:01:69:AB:1D:CA:B9:90:FD:BD:89:81:4C:DE
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.22.0/24
191.96.58.0/23
191.96.90.0/24
191.96.94.0/24
191.96.193.0/24
191.96.229.0/24
191.96.233.0/24
191.96.248.0/23
191.101.28.0/24
191.101.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a3:4b:0e:08:06:9e:b2:f8:a4:81:04:4d:8f:30:39:86:d6:
a8:12:3e:ea:4b:9d:f1:cc:32:ba:e7:ad:e6:26:84:33:7c:01:
ae:ae:87:ac:38:eb:41:64:f9:3d:d2:6d:b4:ad:4c:74:ac:9e:
3c:a0:23:20:17:ec:5a:53:56:32:f2:c3:c6:17:4f:41:10:96:
77:ab:14:39:0a:6d:f3:25:b4:f8:a8:8f:f1:74:e3:94:c7:2b:
98:8c:dd:e9:58:ba:e8:c4:14:67:c7:51:12:03:28:b1:89:61:
7e:40:2e:41:5a:16:c6:18:0e:83:c2:bd:5d:0e:b2:c4:cd:8b:
96:3e:79:f9:28:00:fe:30:2f:d6:08:c6:09:bc:81:a0:f7:60:
5d:67:bd:61:87:a3:0c:4f:b0:6f:3f:b9:47:de:4b:b3:04:d6:
13:66:d5:b9:ab:57:ec:5b:7b:e5:a4:8d:a1:ae:88:cd:09:d2:
71:1c:d2:c5:ed:ee:8e:1a:19:e5:8d:45:d2:ee:18:66:9e:dd:
26:8e:bb:c2:22:dd:e4:8c:28:ce:e3:86:00:d8:f2:bb:00:49:
5a:fb:f0:a6:a7:2c:12:ef:2d:1c:02:8b:41:3e:18:e5:23:8e:
57:e9:6e:b0:12:5a:37:11:c0:b1:24:eb:5d:47:02:2f:22:32:
aa:af:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org