Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS58955.roa
File: AS58955.roa (raw, json)
Hash identifier: D4VeCyWjaVq4nBBx/+G7qdpqlxzn74ppdMXzYYQhs5o=
Subject key identifier: 01:FB:DD:3E:D9:EE:1D:68:36:25:9B:6A:2D:FE:4C:A7:7B:B1:92:1A
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 6847A6011EB26CBFD2DA4248EE031F71B474018B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS58955.roa
Signing time: Mon 28 Nov 2022 12:18:24 +0000
ROA not before: Mon 28 Nov 2022 12:13:24 +0000
ROA not after: Mon 27 Nov 2023 12:18:24 +0000
asID: 58955
IP address blocks: 191.96.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:47:a6:01:1e:b2:6c:bf:d2:da:42:48:ee:03:1f:71:b4:74:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:24 2022 GMT
Not After : Nov 27 12:18:24 2023 GMT
Subject: CN=01FBDD3ED9EE1D6836259B6A2DFE4CA77BB1921A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:30:e4:28:9e:4f:65:f0:4d:4c:ec:ef:6a:
e2:a4:95:a8:a4:fc:91:73:5d:09:f8:d4:73:e9:b9:
27:f6:e5:86:e2:cc:6d:65:9d:c0:0d:c7:fb:1e:13:
10:8a:d9:60:9f:46:fc:ae:7d:d3:87:e9:12:3e:83:
85:cd:a6:71:14:2e:b5:0f:2f:04:3f:4f:57:86:3d:
a0:e9:78:fb:0d:31:ca:f5:95:75:32:e2:08:f6:4c:
84:60:a3:2f:5a:74:73:cb:c4:da:a7:00:c7:e8:cb:
13:ab:2e:71:90:9a:0f:93:29:63:27:c1:ec:5a:6f:
82:b4:e1:39:fb:28:02:4b:26:3a:0d:d0:84:6c:1d:
35:36:7a:16:90:4c:f0:5c:01:6a:5b:6f:4b:35:4b:
33:12:86:0c:21:40:b0:8d:07:93:5d:e3:73:09:96:
69:ff:7e:0d:da:c8:4b:fb:77:96:ac:37:b0:81:98:
9f:42:27:59:e3:42:70:46:1d:4d:8b:4e:a3:3d:55:
ac:10:35:83:87:37:fd:45:cd:d2:1a:3f:fb:af:27:
64:d8:43:91:4f:92:c9:db:9d:eb:45:66:bf:6c:64:
65:0d:e2:06:57:72:ee:67:2b:c1:2f:36:fd:d3:c7:
9b:82:aa:fb:66:64:2d:13:13:44:e4:c4:9d:62:34:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:DD:3E:D9:EE:1D:68:36:25:9B:6A:2D:FE:4C:A7:7B:B1:92:1A
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS58955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.119.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:e7:00:bb:bb:46:c1:17:7b:2c:88:82:18:12:13:11:75:
46:05:a5:00:22:17:99:70:6d:44:b0:97:e0:2d:32:76:45:10:
1e:2e:6e:ca:e8:e9:8d:0d:50:96:ac:98:be:d1:61:72:e7:e8:
1f:a4:df:64:c6:9a:f7:f0:ef:8d:87:65:eb:c9:1a:5f:3c:c1:
5c:05:37:33:dd:53:93:3e:cb:4b:c3:d6:76:e8:e5:f2:fb:59:
8c:7d:a0:c6:c7:a8:2d:17:62:75:4d:e4:49:14:15:6a:b5:7e:
db:a9:0e:62:bb:3c:22:bb:dd:56:3b:af:fe:ca:e1:a1:55:2e:
ab:07:53:b5:a6:6f:bf:a0:f5:87:04:6d:72:78:04:83:39:8a:
5c:65:91:9c:f5:29:14:67:eb:17:7b:eb:f9:be:d3:2e:da:dc:
dc:84:d2:ab:d5:f6:9a:34:c5:4e:57:3e:62:55:12:84:86:8a:
4e:68:ad:af:91:89:2c:b1:4c:bf:e8:cb:f4:57:f2:28:a3:f6:
e6:18:e8:b9:27:33:df:f9:97:4d:22:1d:4a:4f:2c:6a:bc:bc:
a9:52:57:1c:f9:86:f9:00:56:c4:39:e7:58:63:f3:78:79:3d:
ca:04:c7:e7:95:1c:eb:ec:8b:75:e8:1c:f1:be:02:ee:ef:2f:
ad:62:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org