Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62068.roa
File: AS62068.roa (raw, json)
Hash identifier: FNr5qh3hYtSKD8hA8uEdO4rVxKknADs7TRBXPfgRp7Y=
Subject key identifier: 76:20:E5:84:99:B6:5E:0B:2E:1C:A6:7C:8C:83:BA:C1:C0:A4:13:B5
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 7CEF8CC7CD57D5F343743450488A22E49537B9A5
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62068.roa
Signing time: Thu 02 Feb 2023 11:35:45 +0000
ROA not before: Thu 02 Feb 2023 11:30:45 +0000
ROA not after: Thu 01 Feb 2024 11:35:45 +0000
asID: 62068
IP address blocks: 149.62.43.0/24 maxlen: 24
191.96.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ef:8c:c7:cd:57:d5:f3:43:74:34:50:48:8a:22:e4:95:37:b9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 2 11:30:45 2023 GMT
Not After : Feb 1 11:35:45 2024 GMT
Subject: CN=7620E58499B65E0B2E1CA67C8C83BAC1C0A413B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:95:50:d3:01:c3:f2:91:58:80:b2:c5:b9:
24:7c:53:27:fd:43:b2:96:3a:b5:cd:87:70:9c:db:
da:6b:6e:cb:fa:7c:34:a2:58:5d:19:26:8f:a1:16:
99:97:f5:8f:2e:93:10:38:ac:e0:ac:00:85:b7:05:
d8:5e:da:e6:ab:39:de:98:42:2e:e7:65:7f:e6:8b:
3f:b7:de:09:41:f4:1f:f0:40:fd:da:30:2f:49:4e:
2d:8a:bd:00:c5:34:64:00:23:24:fc:35:0d:5b:20:
81:12:23:a6:66:ad:44:4f:11:57:2f:8d:1c:f4:75:
35:91:fa:6c:31:df:ee:71:3e:6c:2a:ec:33:b7:be:
bd:fc:72:76:8f:4a:9b:3f:e9:94:4b:01:f0:b0:c8:
54:b0:00:26:da:4c:63:9e:6f:76:49:cd:89:23:02:
5a:0e:c2:ff:60:ce:fc:f4:7f:1d:bb:65:82:53:2d:
df:dd:0a:37:bd:ba:ae:b2:e5:aa:82:18:d9:7c:0e:
3e:9a:d8:3b:13:88:eb:83:ee:64:f0:13:38:6e:91:
08:f5:e1:5b:9d:29:70:e7:1d:e1:3e:cb:55:40:8a:
c9:58:d6:bd:5f:9a:e4:0c:cc:f7:6a:44:b4:46:7c:
82:ca:a0:a8:9b:59:8a:02:95:fe:23:ca:5a:96:49:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:E5:84:99:B6:5E:0B:2E:1C:A6:7C:8C:83:BA:C1:C0:A4:13:B5
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS62068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.43.0/24
191.96.66.0/24
Signature Algorithm: sha256WithRSAEncryption
91:33:65:ff:3b:07:79:35:d4:04:d5:1f:ef:1e:70:86:80:2e:
0c:bd:f4:68:fd:0f:9c:d2:ca:a6:44:04:16:d2:89:4f:32:01:
30:87:8b:b2:23:81:23:8f:80:fa:e5:90:b3:69:2f:6b:f5:51:
e0:f8:d3:96:d2:39:4b:95:93:d4:4f:c3:0b:e2:da:26:7a:5b:
0c:63:11:18:8a:60:16:cf:3f:36:aa:0b:f2:93:83:34:ca:92:
2e:ec:48:eb:b9:8c:81:24:00:d3:35:e3:ee:7c:11:1c:b2:92:
3c:63:a4:88:ea:95:8e:0b:40:b8:17:93:e6:6e:ef:27:fe:91:
2d:c5:db:66:a8:36:99:6a:f8:26:2e:8c:0c:b1:fc:c1:d7:9a:
ff:ae:40:5f:8e:4d:04:33:3c:f8:24:66:7d:fd:70:bc:02:19:
5f:d2:60:fa:36:e0:70:87:7f:26:7c:0d:cf:74:63:25:23:33:
00:75:a9:fb:d3:3d:f3:95:97:30:9b:3e:60:05:b2:0d:51:ff:
a0:0b:3b:29:22:83:b4:01:fa:86:35:7c:00:93:d5:fb:e3:9a:
6e:99:25:ec:fb:bd:28:eb:95:d9:ba:7b:43:69:60:b3:12:f0:
3e:a4:69:9b:cc:c6:19:ed:56:5f:d9:83:a0:fb:5e:dc:33:6f:
59:52:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org