Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: uByydAp9vUnNIZll7twBgwrdBCyXT1RWkJr1nCUuRa4=
Subject key identifier: 07:4F:69:6B:A0:21:D5:B1:84:61:FD:9A:70:41:CB:D1:20:C7:F7:94
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 53627365A67470D26372ADDAE0B60EF4E7ABF817
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS834.roa
Signing time: Thu 23 Feb 2023 18:00:10 +0000
ROA not before: Thu 23 Feb 2023 17:55:10 +0000
ROA not after: Thu 22 Feb 2024 18:00:10 +0000
asID: 834
IP address blocks: 179.61.148.0/24 maxlen: 24
181.214.186.0/23 maxlen: 24
181.214.188.0/23 maxlen: 24
181.214.190.0/23 maxlen: 24
181.215.18.0/24 maxlen: 24
181.215.32.0/24 maxlen: 24
181.215.34.0/24 maxlen: 24
181.215.64.0/24 maxlen: 24
181.215.162.0/23 maxlen: 24
181.215.170.0/24 maxlen: 24
185.170.56.0/24 maxlen: 24
191.96.250.0/24 maxlen: 24
191.101.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:62:73:65:a6:74:70:d2:63:72:ad:da:e0:b6:0e:f4:e7:ab:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Feb 23 17:55:10 2023 GMT
Not After : Feb 22 18:00:10 2024 GMT
Subject: CN=074F696BA021D5B18461FD9A7041CBD120C7F794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:69:c9:c6:94:07:73:84:02:68:49:ea:67:
9f:ee:10:12:b9:61:2d:35:3d:9a:aa:96:8b:f7:2b:
e9:83:cf:a9:e9:1d:33:d1:f4:ad:6b:1f:d7:b0:36:
3b:ae:65:aa:b3:82:be:26:41:21:36:42:2f:f1:b7:
3b:aa:5c:02:83:b7:fe:9a:6e:22:1a:a3:e1:94:5e:
64:33:b8:1e:7a:a7:68:f6:92:5f:26:ed:79:53:db:
85:6f:ec:b5:93:ec:15:81:08:4e:c7:2a:8c:20:aa:
73:f4:fe:dc:a8:7c:4d:fb:0b:62:fc:4e:ef:d3:7d:
8f:f1:45:d1:f3:68:5f:bc:60:af:79:30:1a:80:b4:
1d:56:b9:68:71:20:3c:d1:b8:62:c7:66:3e:48:12:
f5:2a:c9:63:c5:5c:a7:c5:73:3d:ba:e9:9b:75:fd:
cf:8a:b2:da:04:38:34:d5:a0:77:7f:b1:90:48:ee:
e1:7e:1b:21:24:80:44:dd:62:f1:37:14:8d:b8:24:
44:33:9e:56:0f:84:1e:b2:aa:d6:47:f1:7d:5c:84:
43:1c:e3:28:88:5c:3a:20:a8:2a:cc:12:01:e3:62:
27:07:30:7c:35:75:c3:10:82:c1:74:61:1d:20:cf:
a0:99:95:99:19:5c:23:28:2a:03:4d:db:c2:6f:11:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:69:6B:A0:21:D5:B1:84:61:FD:9A:70:41:CB:D1:20:C7:F7:94
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.148.0/24
181.214.186.0-181.214.191.255
181.215.18.0/24
181.215.32.0/24
181.215.34.0/24
181.215.64.0/24
181.215.162.0/23
181.215.170.0/24
185.170.56.0/24
191.96.250.0/24
191.101.11.0/24
Signature Algorithm: sha256WithRSAEncryption
67:99:07:ab:51:88:97:e2:db:0b:a6:38:c7:aa:d7:56:33:c1:
21:b5:39:fb:67:cd:1b:ba:e7:0b:94:2a:a8:80:5d:94:c8:39:
c6:49:9a:09:91:46:e8:d9:be:8d:a4:ef:06:bc:b7:a1:f1:d4:
29:76:d5:87:cb:83:8b:33:04:64:bc:2d:52:80:c8:67:00:20:
10:88:ba:74:3f:72:af:02:da:db:58:4a:32:3b:bb:cc:bf:65:
98:f0:64:de:03:70:e3:fe:ab:79:c5:7b:0f:31:d8:f5:68:ac:
f3:40:a5:0a:06:ce:d8:37:2a:57:96:e6:1f:aa:12:ca:e0:c0:
5a:8b:a4:86:ef:d4:c6:1f:ec:78:03:42:a0:5d:1d:d1:2f:5f:
44:2a:42:1c:c6:bd:73:84:5c:84:de:5f:0b:02:98:b2:b0:94:
50:e1:78:17:92:80:e1:37:56:ca:c5:b1:34:99:44:db:ff:c0:
5e:80:8a:b4:8d:ec:4b:20:8b:24:a1:b1:3f:72:d6:40:12:81:
9a:9c:98:f8:44:f3:b9:92:04:3e:7e:43:23:6a:5e:ce:d4:fd:
78:41:68:22:ed:c0:6a:63:6e:5d:8c:4f:65:55:ef:0d:88:25:
ea:28:12:f6:66:3c:69:00:b5:26:c3:f7:32:0d:69:7e:13:57:
99:a3:46:28
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUU2JzZaZ0cNJjcq3a4LYO9Oer+BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMjMxNzU1MTBaFw0yNDAyMjIxODAwMTBaMDMxMTAvBgNV
BAMTKDA3NEY2OTZCQTAyMUQ1QjE4NDYxRkQ5QTcwNDFDQkQxMjBDN0Y3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEamnJxpQHc4QCaEnqZ5/uEBK5
YS01PZqqlov3K+mDz6npHTPR9K1rH9ewNjuuZaqzgr4mQSE2Qi/xtzuqXAKDt/6a
biIao+GUXmQzuB56p2j2kl8m7XlT24Vv7LWT7BWBCE7HKowgqnP0/tyofE37C2L8
Tu/TfY/xRdHzaF+8YK95MBqAtB1WuWhxIDzRuGLHZj5IEvUqyWPFXKfFcz266Zt1
/c+KstoEODTVoHd/sZBI7uF+GyEkgETdYvE3FI24JEQznlYPhB6yqtZH8X1chEMc
4yiIXDogqCrMEgHjYicHMHw1dcMQgsF0YR0gz6CZlZkZXCMoKgNN28JvEUIrAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUB09pa6Ah1bGEYf2acEHL0SDH95QwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBvBggr
BgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYwYIKwYBBQUH
AQcBAf8EVDBSMFAEAgABMEoDBACzPZQwDAMEAbXWugMEBrXWgAMEALXXEgMEALXX
IAMEALXXIgMEALXXQAMEAbXXogMEALXXqgMEALmqOAMEAL9g+gMEAL9lCzANBgkq
hkiG9w0BAQsFAAOCAQEAZ5kHq1GIl+LbC6Y4x6rXVjPBIbU5+2fNG7rnC5QqqIBd
lMg5xkmaCZFG6Nm+jaTvBry3ofHUKXbVh8uDizMEZLwtUoDIZwAgEIi6dD9yrwLa
21hKMju7zL9lmPBk3gNw4/6recV7DzHY9Wis80ClCgbO2DcqV5bmH6oSyuDAWouk
hu/Uxh/seANCoF0d0S9fRCpCHMa9c4RchN5fCwKYsrCUUOF4F5KA4TdWysWxNJlE
2//AXoCKtI3sSyCLJKGxP3LWQBKBmpyY+ETzuZIEPn5DI2peztT9eEFoIu3AamNu
XYxPZVXvDYgl6igS9mY8aQC1JsP3Mg1pfhNXmaNGKA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org