Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: /HKJt/54EAL/5ZAhhsY/iTxK6eBCkneMTOJCXkpT9bk=
Subject key identifier: 16:2C:E8:A7:B8:70:32:B6:70:BF:4E:0B:70:54:BF:8F:AA:6E:83:23
Certificate issuer: /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial: 038B02632E0634B512EDDF8EA34D29B8187A3F46
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS1239.roa
Signing time: Fri 10 Jun 2022 15:19:24 +0000
ROA not before: Fri 10 Jun 2022 15:14:24 +0000
ROA not after: Fri 09 Jun 2023 15:19:24 +0000
asID: 1239
IP address blocks: 181.215.21.0/24 maxlen: 24
191.96.31.0/24 maxlen: 24
191.96.38.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.96.129.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
191.96.154.0/24 maxlen: 24
191.96.167.0/24 maxlen: 24
191.96.193.0/24 maxlen: 24
191.101.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8b:02:63:2e:06:34:b5:12:ed:df:8e:a3:4d:29:b8:18:7a:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Validity
Not Before: Jun 10 15:14:24 2022 GMT
Not After : Jun 9 15:19:24 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:58:f6:c1:e8:7e:4d:e6:83:b9:ce:34:da:
72:cc:00:6a:77:db:9c:4b:af:ac:f0:34:96:08:7e:
35:ec:77:3a:41:a3:00:b7:c3:c7:c2:89:d7:d1:92:
f9:5a:ff:b9:19:65:94:d6:d2:cc:fc:c6:58:cb:42:
cc:da:d9:93:83:70:3a:37:7c:d6:4e:48:e2:a6:ec:
26:63:f2:9b:80:f7:bc:09:b3:bc:f1:72:09:e8:2f:
a0:d0:7f:9e:2d:16:6c:fb:c2:c8:0d:eb:ae:02:53:
ee:e5:04:47:05:ca:05:f6:86:d4:1a:c0:66:0e:31:
43:69:3b:e9:46:73:c6:a9:f8:7e:1c:e1:dd:e5:34:
75:9d:24:47:7d:a6:ad:86:51:8f:e3:9f:80:15:ef:
f4:8f:24:dd:ae:ce:10:3e:e0:d2:65:38:32:da:d6:
86:1a:42:1c:dc:a6:8d:fc:38:b8:7c:9c:55:19:48:
3a:7d:a8:8e:8e:28:c8:9d:43:31:b8:81:fd:4e:0b:
ac:d6:94:a8:26:db:12:46:e4:94:fe:a6:66:ad:4d:
45:cb:56:38:82:73:3e:84:87:70:b1:f3:13:9d:71:
0a:80:54:43:48:9a:0d:90:e2:9c:da:7c:bc:c0:6a:
85:9f:17:5f:b1:19:43:e4:bc:db:82:a3:05:de:17:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:E8:A7:B8:70:32:B6:70:BF:4E:0B:70:54:BF:8F:AA:6E:83:23
X509v3 Authority Key Identifier:
keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl
Authority Information Access:
CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.21.0/24
191.96.31.0/24
191.96.38.0/24
191.96.122.0/24
191.96.129.0/24
191.96.134.0/24
191.96.154.0/24
191.96.167.0/24
191.96.193.0/24
191.101.202.0/23
Signature Algorithm: sha256WithRSAEncryption
16:be:85:84:4e:8a:77:23:22:7c:ec:3a:eb:1c:74:31:aa:28:
bc:72:0d:4c:8b:68:b1:68:3b:45:50:46:80:09:ad:de:0b:47:
70:ce:84:2b:5b:8a:43:87:23:e8:78:04:e1:b8:28:99:3c:7e:
e1:44:34:53:e0:ba:a0:bd:83:fd:bf:e8:87:43:21:b0:f9:46:
5c:ab:10:16:7d:14:28:ef:79:d0:40:c3:ab:c6:6d:34:d4:f1:
ce:fa:d7:79:7a:7a:5f:b6:ef:74:e9:b8:2e:84:d3:72:03:9f:
58:d2:2a:98:43:15:b6:88:f1:66:d1:93:10:ab:dc:d9:f5:08:
a8:3e:65:7d:d8:fa:c2:3b:f8:0c:52:b3:e9:71:65:4c:d0:29:
13:9e:da:7a:c6:99:b5:c5:e8:61:fb:70:ed:cc:a3:69:19:ba:
fd:22:1b:40:27:bb:d0:d9:19:25:6d:7f:1c:d8:3a:f0:fa:e1:
81:ec:8c:63:e7:ea:7d:fe:df:4d:55:ca:6d:66:b2:c2:a1:2e:
b2:3d:91:f2:32:93:a2:3d:11:d3:48:52:72:10:2a:23:57:40:
5f:d8:27:d6:7f:dd:e4:18:e4:ab:9f:82:9e:87:13:c5:42:92:
63:8c:39:f8:3e:3e:fa:52:89:58:ff:22:d0:22:e4:fe:43:b7:
64:20:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org