Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: 8QlY8AzjF9ypOpqZwkYjEBsuVA1IgCukw4KDcN4o7B4=
Subject key identifier: 3E:C6:5C:44:44:F4:BF:C5:7C:C7:55:37:AD:FB:DF:E5:20:E9:F5:61
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 3C413F20D8587811695F87CE44E4863AE31EC126
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49981.roa
Signing time: Tue 31 Jan 2023 00:00:37 +0000
ROA not before: Mon 30 Jan 2023 23:55:37 +0000
ROA not after: Tue 30 Jan 2024 00:00:37 +0000
asID: 49981
IP address blocks: 45.89.253.0/24 maxlen: 24
181.214.1.0/24 maxlen: 24
181.214.85.0/24 maxlen: 24
191.96.128.0/24 maxlen: 24
191.101.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:41:3f:20:d8:58:78:11:69:5f:87:ce:44:e4:86:3a:e3:1e:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Jan 30 23:55:37 2023 GMT
Not After : Jan 30 00:00:37 2024 GMT
Subject: CN=3EC65C4444F4BFC57CC75537ADFBDFE520E9F561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:23:e9:43:81:ed:63:b0:ec:00:18:e8:34:
f1:1b:30:44:76:52:80:5a:d6:71:1c:6f:12:fc:06:
83:69:a2:f9:e9:05:e8:fa:05:dd:33:06:4c:c5:d8:
f2:13:dc:64:14:b6:41:09:d8:4b:e2:db:50:42:b8:
99:87:d6:fa:24:70:b8:57:30:de:55:4b:21:36:68:
4b:ec:0d:10:23:07:e9:0d:52:71:ba:22:a3:f0:f4:
4d:f6:6c:5f:8c:47:de:ad:16:70:7f:ad:b8:05:56:
f5:dc:6c:85:a0:09:bd:90:2d:0d:2a:99:8d:46:0e:
69:dd:e4:b5:f8:bb:e0:a4:eb:a9:c6:2b:2f:41:a5:
57:c4:22:ba:0b:a7:b1:1b:d0:c0:e2:87:ff:b2:1f:
c3:95:fc:45:be:37:c8:b8:f5:4d:35:8c:da:3d:f5:
57:c3:cd:5f:be:55:01:53:70:51:cd:7c:26:4d:33:
60:68:db:bf:e0:ac:17:ce:40:46:b6:ce:c3:82:1f:
ea:ae:04:0a:43:47:4e:77:06:7e:2f:58:03:15:ee:
cf:a7:47:cb:14:be:f9:06:ab:07:2e:f3:59:83:18:
6d:94:dc:ff:7f:53:fc:8f:d9:89:4c:31:36:3b:bd:
a1:be:a1:20:11:ef:ab:4f:42:61:66:28:2f:b9:a4:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:5C:44:44:F4:BF:C5:7C:C7:55:37:AD:FB:DF:E5:20:E9:F5:61
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.253.0/24
181.214.1.0/24
181.214.85.0/24
191.96.128.0/24
191.101.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:51:a0:92:68:e8:f9:a0:26:3b:60:90:c5:7b:85:74:24:
2b:41:b8:30:58:af:77:fa:9e:a6:51:f0:fd:8f:66:e3:51:8f:
70:9d:f8:a5:03:46:26:cf:e1:17:f9:30:d7:df:b5:78:92:27:
7f:0b:68:f7:30:f5:2d:e0:6c:5d:07:17:20:8a:12:12:a5:93:
b4:a2:59:a5:54:2a:d5:17:97:f7:1d:a5:36:76:10:e1:7a:de:
f7:e8:67:04:99:62:62:c9:68:09:f1:e2:77:40:4d:91:9c:c5:
b9:67:e7:cf:59:8f:28:28:aa:db:20:cc:4e:4e:28:52:ad:cc:
43:d1:84:b1:c1:dc:c0:82:05:ed:e2:4e:b6:3b:22:1c:04:8f:
c8:87:ca:4d:f8:bd:1f:7f:9d:11:3c:9d:91:de:2b:0e:c1:33:
3a:8e:00:9f:79:22:79:f2:0c:8e:a9:7d:85:05:49:6c:5a:ae:
e6:7d:d1:34:69:22:23:ff:d2:db:b5:cd:dd:9d:9f:56:4b:f1:
e0:ef:e6:a9:49:55:5a:ce:b3:0d:a7:63:02:3a:94:bd:92:95:
71:55:aa:6c:ec:d6:35:fd:b5:38:c1:98:f3:be:d5:df:70:ff:
c8:e8:fc:08:47:f2:ee:5c:66:e6:24:1e:e8:c4:39:53:34:63:
4f:e4:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org