Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa
File: AS46337.roa (raw, json)
Hash identifier: BEHoBIQFQ/+UTJEM+OLBQc43WShoCl3qxeMtEKsUzmc=
Subject key identifier: 32:A0:DB:1D:02:DE:40:74:8F:A4:3F:4C:C6:5A:20:42:1E:0D:24:4C
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 0F47F1EE8026A061A2209EDAA8503D3E39345565
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa
Signing time: Mon 28 Nov 2022 12:18:17 +0000
ROA not before: Mon 28 Nov 2022 12:13:17 +0000
ROA not after: Mon 27 Nov 2023 12:18:17 +0000
asID: 46337
IP address blocks: 179.61.137.0/24 maxlen: 24
179.61.192.0/24 maxlen: 24
179.61.232.0/24 maxlen: 24
181.214.31.0/24 maxlen: 24
181.214.83.0/24 maxlen: 24
181.214.142.0/24 maxlen: 24
181.214.156.0/24 maxlen: 24
191.96.133.0/24 maxlen: 24
191.96.151.0/24 maxlen: 24
191.96.165.0/24 maxlen: 24
191.101.33.0/24 maxlen: 24
191.101.50.0/24 maxlen: 24
191.101.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:47:f1:ee:80:26:a0:61:a2:20:9e:da:a8:50:3d:3e:39:34:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:17 2022 GMT
Not After : Nov 27 12:18:17 2023 GMT
Subject: CN=32A0DB1D02DE40748FA43F4CC65A20421E0D244C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:02:d6:e4:a2:53:b2:2c:d5:3c:d0:3c:1b:
69:fc:b5:63:bc:60:b1:1d:f0:37:7a:68:98:cf:4e:
f4:17:73:b0:f2:bb:8a:04:30:5f:73:3f:c2:d6:4b:
37:63:72:49:c6:5c:d5:a0:7a:8c:37:8c:2d:e1:81:
05:d8:11:83:a8:1a:37:26:97:4b:62:39:d2:06:99:
d7:1a:c1:6e:65:e8:41:cc:3e:74:bc:25:a2:e4:7e:
5d:bf:de:06:b1:aa:45:41:56:a0:9e:d7:82:31:4b:
cd:d5:b3:aa:b3:5a:b7:e2:67:73:ef:2b:22:8a:47:
d9:8b:0f:21:ce:84:5e:0d:90:06:de:77:ae:e9:8e:
66:35:d1:75:2c:d7:b7:1d:ba:08:aa:01:05:d8:8e:
bf:a6:05:fb:a8:08:50:72:b0:22:bd:c7:4d:c1:09:
0b:87:f7:bf:f5:7e:8a:42:45:54:13:af:00:74:ca:
07:12:db:01:d7:72:2f:27:b5:6a:59:44:18:d8:df:
1b:4e:01:75:2d:c1:e3:91:44:c5:e6:25:5d:e6:0f:
43:3d:fc:08:42:20:54:45:95:b1:1c:45:37:5a:f0:
16:50:8a:24:5b:fe:bc:dd:a8:4e:8f:dc:87:8b:4a:
ca:47:00:cb:06:4d:99:fa:c7:df:1e:86:4d:04:c0:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:DB:1D:02:DE:40:74:8F:A4:3F:4C:C6:5A:20:42:1E:0D:24:4C
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.137.0/24
179.61.192.0/24
179.61.232.0/24
181.214.31.0/24
181.214.83.0/24
181.214.142.0/24
181.214.156.0/24
191.96.133.0/24
191.96.151.0/24
191.96.165.0/24
191.101.33.0/24
191.101.50.0/24
191.101.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:36:f0:13:9d:e6:4b:4f:e7:cc:f8:82:02:d6:d5:ec:96:4e:
24:5f:a0:46:7a:ac:29:73:e7:70:d0:1d:9d:58:e1:b9:1e:d0:
f8:f1:8b:3e:15:bd:85:9a:6d:6c:a6:18:e8:d7:ce:07:2e:19:
96:47:06:d9:04:9f:bf:9d:06:5b:33:4a:25:dc:92:6b:cf:d2:
e3:22:1a:6c:db:9b:d4:75:86:c9:e0:69:fe:56:60:34:17:64:
d8:2c:5f:cb:93:bb:bc:3d:78:14:ae:b5:d6:09:5d:6e:e2:51:
08:83:f4:78:a0:5e:25:1a:79:c5:65:82:d7:f8:bd:30:b9:f3:
86:9e:6c:16:5e:ef:c7:e6:cf:03:48:b2:55:ec:ea:fe:73:2c:
42:c0:f9:c3:21:6b:63:ee:b7:11:5d:b3:c3:63:9d:d5:fd:45:
17:bd:ec:9a:60:72:5e:08:05:eb:24:a9:f2:6e:b9:f7:ab:8f:
4e:95:32:af:ae:48:dc:f3:17:3d:33:00:19:3a:ed:bb:3d:31:
f0:41:0e:36:35:f1:c7:89:8a:d2:b7:3a:9f:ce:a3:f1:1d:12:
dd:f4:13:ad:bb:dd:46:b1:40:48:cb:12:26:fe:97:e3:5a:72:
94:88:62:00:3a:3b:bb:46:ad:9e:5b:79:8c:62:23:9c:2e:d7:
2b:19:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org