Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: kbJsyYeQN7Dioqlt5iWinU3xf2a2iOVqyyEN4dDQsOQ=
Subject key identifier: A0:53:CE:FE:99:93:13:CE:28:04:0F:A6:FC:30:BA:92:8D:97:83:99
Certificate issuer: /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial: 22F9764B72E4422EA322FC8953D8C0ED5545A10F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS174.roa
Signing time: Wed 01 Jun 2022 14:50:54 +0000
ROA not before: Wed 01 Jun 2022 14:45:54 +0000
ROA not after: Wed 31 May 2023 14:50:54 +0000
asID: 174
IP address blocks: 45.88.97.0/24 maxlen: 24
45.133.172.0/24 maxlen: 24
45.133.173.0/24 maxlen: 24
179.61.239.0/24 maxlen: 24
181.41.202.0/24 maxlen: 24
181.41.206.0/24 maxlen: 24
181.214.153.0/24 maxlen: 24
181.214.164.0/24 maxlen: 24
181.214.165.0/24 maxlen: 24
181.214.166.0/24 maxlen: 24
181.214.173.0/24 maxlen: 24
181.214.218.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
185.170.59.0/24 maxlen: 24
191.96.106.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.150.0/24 maxlen: 24
191.96.168.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.96.190.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
191.101.31.0/24 maxlen: 24
191.101.61.0/24 maxlen: 24
191.101.217.0/24 maxlen: 24
194.110.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f9:76:4b:72:e4:42:2e:a3:22:fc:89:53:d8:c0:ed:55:45:a1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Validity
Not Before: Jun 1 14:45:54 2022 GMT
Not After : May 31 14:50:54 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:5e:e0:7d:54:7d:92:a8:9f:22:9c:bc:eb:
68:77:e7:44:96:6d:f3:7c:bf:2e:48:e4:3a:db:aa:
98:55:df:4c:c9:0d:22:fc:76:17:5a:d7:24:91:91:
97:45:91:f5:fa:34:2d:e5:f9:e6:bb:41:0a:b2:ae:
d5:2c:aa:99:78:46:da:31:06:ec:d9:9a:f7:54:94:
2d:c2:d0:8f:51:ef:a9:84:87:96:a4:17:f8:e5:b5:
11:7a:29:85:e4:83:67:f5:0b:70:60:62:88:70:a5:
09:5c:58:e1:19:1e:c3:69:2d:86:55:fe:12:ce:04:
a1:81:73:3b:b3:d2:65:bb:60:cb:c8:ee:ef:f6:24:
1e:cd:ff:f3:98:f4:76:79:94:e3:fc:8a:ec:24:0a:
b5:a5:33:99:18:0b:42:e9:72:79:0c:df:09:e0:12:
d7:1b:63:32:44:a2:ca:ff:1d:7c:3c:f1:9a:f2:7b:
6e:c8:e5:19:c8:15:3a:2a:01:2d:c7:57:24:aa:fd:
70:75:5b:0f:a9:5a:d9:69:74:86:44:ab:e9:00:73:
5c:9c:63:4c:cb:a0:2c:21:1d:a0:d4:4b:06:c9:a4:
0f:99:97:31:3a:22:ae:1b:db:07:b5:01:61:4f:f8:
e1:73:06:8d:5e:0f:5d:45:e5:43:2b:83:80:ee:b8:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:CE:FE:99:93:13:CE:28:04:0F:A6:FC:30:BA:92:8D:97:83:99
X509v3 Authority Key Identifier:
keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl
Authority Information Access:
CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.97.0/24
45.133.172.0/23
179.61.239.0/24
181.41.202.0/24
181.41.206.0/24
181.214.153.0/24
181.214.164.0-181.214.166.255
181.214.173.0/24
181.214.218.0/24
181.215.176.0/24
185.170.59.0/24
191.96.106.0/24
191.96.145.0/24
191.96.150.0/24
191.96.168.0/24
191.96.185.0/24
191.96.190.0/24
191.96.227.0/24
191.101.31.0/24
191.101.61.0/24
191.101.217.0/24
194.110.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:87:04:78:ee:0b:5b:e1:f9:2d:93:4a:05:4a:40:6f:ec:a0:
83:6b:5a:33:a6:9c:49:70:28:d6:27:e4:ac:21:7f:a4:3b:28:
9f:77:47:a5:45:a4:2b:e3:65:16:e5:ad:1b:1e:4d:0b:24:37:
f9:f8:10:d9:3a:0f:c9:c3:92:4a:ad:8e:93:59:a7:11:47:ce:
ca:b8:f7:df:d4:18:63:aa:0c:dc:47:b2:16:98:b2:10:8f:1c:
53:a7:1d:09:7c:25:00:b5:01:ea:50:af:08:2f:e5:36:c0:29:
a1:be:7a:a1:41:29:69:65:5b:a6:0b:ab:91:58:68:38:cf:f6:
ae:9f:6f:2a:69:18:cf:1d:61:bb:54:b2:b3:8d:0d:d9:e5:02:
8d:98:56:5c:c5:6d:85:20:d7:96:0a:8f:0b:e6:73:cb:fd:a8:
f1:07:45:3a:21:73:8b:d7:ee:8b:7a:ff:18:c2:60:39:c4:f7:
33:28:80:9c:1a:1a:50:11:34:85:e0:67:99:8b:29:54:c6:fe:
5a:60:c6:c4:83:82:83:5c:ec:4e:60:34:1b:c3:c9:22:59:ad:
2e:13:ea:43:fc:54:f3:ee:46:68:1a:45:25:73:93:73:fd:0a:
b4:cc:0c:8d:65:8f:9a:56:20:cf:0a:90:2b:a2:53:a1:66:50:
16:f9:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org