Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60721.roa
File: AS60721.roa (raw, json)
Hash identifier: +0PdK6HCgrtjzGfH5aXLLVpxnzalbDPrzL2qeLWcqgs=
Subject key identifier: 52:BA:F4:BA:40:1E:3F:D3:E5:F4:34:7C:1A:F6:B9:DD:5E:79:3B:0F
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 32E278069A6272D29D2640CA90A436EE0C0E9629
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60721.roa
Signing time: Fri 24 Feb 2023 18:00:11 +0000
ROA not before: Fri 24 Feb 2023 17:55:11 +0000
ROA not after: Fri 23 Feb 2024 18:00:11 +0000
asID: 60721
IP address blocks: 92.118.160.0/24 maxlen: 24
181.215.227.0/24 maxlen: 24
191.96.40.0/24 maxlen: 24
191.96.82.0/24 maxlen: 24
191.101.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e2:78:06:9a:62:72:d2:9d:26:40:ca:90:a4:36:ee:0c:0e:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 24 17:55:11 2023 GMT
Not After : Feb 23 18:00:11 2024 GMT
Subject: CN=52BAF4BA401E3FD3E5F4347C1AF6B9DD5E793B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:b8:60:ae:da:d2:a1:a8:7f:1f:51:4e:fd:
59:98:83:d1:ad:5a:0b:9c:58:77:90:48:77:06:63:
83:8f:9d:f3:f8:a8:24:5a:bd:76:35:d1:78:b8:2d:
71:7a:e4:d9:36:9c:88:7b:6e:5a:42:eb:39:65:2f:
7d:56:39:47:69:78:8b:17:d4:43:ab:b7:36:9d:70:
f1:48:0e:ae:95:8b:a8:43:75:c9:0e:f9:5b:f3:9b:
6b:8a:b2:e7:4a:57:83:d4:e0:db:90:1d:06:96:9d:
fe:27:44:8b:35:b8:08:41:a5:db:2a:d4:06:ff:05:
61:33:c9:4e:cd:e6:a0:70:a6:db:0f:88:ba:e8:64:
1b:9f:3d:06:24:bd:2a:14:70:e1:36:88:38:0b:a3:
49:8e:6e:5b:29:e8:11:59:4e:ff:d7:c2:45:cc:01:
95:96:55:0a:4d:38:57:fa:70:1b:56:68:14:d8:07:
57:b7:3f:d4:aa:55:3c:c8:f7:6c:55:d0:52:97:4a:
53:c1:58:74:8c:ff:e3:08:fa:ba:0a:c0:b5:f8:77:
ec:2c:98:67:bc:ef:7c:df:b9:37:6d:72:4a:9e:df:
e0:e4:3d:3f:91:5a:44:c9:8d:c5:6f:d6:3e:ca:f6:
d5:32:6e:e3:24:f8:3b:4d:a9:3b:e8:f7:fc:31:a7:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:F4:BA:40:1E:3F:D3:E5:F4:34:7C:1A:F6:B9:DD:5E:79:3B:0F
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.160.0/24
181.215.227.0/24
191.96.40.0/24
191.96.82.0/24
191.101.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c8:8a:eb:74:d6:67:18:8d:a2:c6:98:31:ef:df:2e:7e:8a:
e5:d3:27:ea:0d:87:30:ca:bc:a2:55:fe:93:a9:ac:4c:e9:18:
9e:fe:1a:84:74:f8:e1:7b:7a:ca:b6:8f:0f:20:cd:15:e1:1d:
e3:23:50:e6:b0:a6:09:1a:03:95:b9:6e:1a:b5:4c:7c:71:55:
e1:52:c1:34:8a:71:a2:a8:e3:39:ca:44:16:2e:ac:46:87:63:
cf:80:0c:c6:07:e0:a0:20:28:6d:d4:19:d8:34:cd:de:e0:7b:
01:a3:f1:22:58:f0:f0:f3:3f:38:2c:f7:32:a7:7a:3b:e9:84:
49:97:af:d8:05:94:ce:74:19:f8:91:e1:48:54:c3:5c:7b:4a:
4b:88:59:5d:8c:af:2e:85:bc:cc:a3:5a:c9:17:78:db:eb:3f:
6c:3f:c2:51:b3:5d:d4:5a:ec:71:72:f6:8d:7f:8c:ab:fa:ea:
ac:a3:1e:c1:f7:4e:d2:25:53:43:fc:5e:69:a7:b5:7a:4b:09:
94:d1:bd:66:86:c9:21:ae:3c:71:01:5c:c1:27:ba:e1:eb:d2:
49:bc:0f:d3:01:49:85:ca:69:38:0e:06:4e:9a:7a:67:48:95:
a7:11:ea:67:57:7c:2e:ee:77:bf:98:f6:05:3c:30:11:6c:07:
47:b6:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org