Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS25098.roa
File: AS25098.roa (raw, json)
Hash identifier: bzqsLl8uZV9grJ3N26okc9GFcMscSO0zl6aWvnvX2Ek=
Subject key identifier: D2:70:97:FD:2C:7B:F2:0C:72:5C:B1:AC:53:ED:31:CD:DA:40:37:D0
Certificate issuer: /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial: 0C242DBEEDBAAB6D0307CC476704B6223FDB8C7F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS25098.roa
Signing time: Wed 09 Mar 2022 13:35:03 +0000
ROA not before: Wed 09 Mar 2022 13:30:03 +0000
ROA not after: Wed 08 Mar 2023 13:35:03 +0000
asID: 25098
IP address blocks: 191.96.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:24:2d:be:ed:ba:ab:6d:03:07:cc:47:67:04:b6:22:3f:db:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Validity
Not Before: Mar 9 13:30:03 2022 GMT
Not After : Mar 8 13:35:03 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:58:8d:8b:01:07:f6:a1:e3:39:01:b3:ed:
74:50:84:61:26:5b:fd:1e:89:a4:6d:31:fc:cd:11:
2b:5d:9d:f3:5d:a4:24:d7:07:c1:df:31:0d:26:e6:
75:45:5a:ca:f0:4c:4b:04:69:2d:d9:b2:8d:4f:16:
7b:9d:92:83:8d:a6:01:5a:2e:84:15:ab:55:bd:c1:
fa:aa:d8:3a:3d:d2:ba:00:f4:f2:9a:9d:d2:bf:15:
39:ac:02:5a:8f:c9:e3:a7:78:23:31:1b:a5:ad:b6:
3e:3f:41:ce:a4:e1:b7:09:0d:1d:8e:8d:85:61:24:
89:8e:06:66:bd:ec:97:b1:0e:3f:7e:f4:9b:ab:91:
8f:21:ac:2e:19:ef:b7:39:db:3f:07:14:2b:57:22:
9a:7b:ac:57:29:9f:4d:35:9e:cd:ee:24:90:a9:83:
01:28:f9:7f:6e:21:3a:22:60:1b:c9:18:f8:f6:7f:
a9:ea:c3:9d:48:47:1f:dd:50:cb:c8:53:30:46:90:
71:a7:c4:fa:89:3c:f4:5c:e1:c1:7f:52:ca:b2:7e:
ed:16:6e:ac:61:0a:a2:9a:ff:a7:80:1b:3b:3f:b0:
d3:54:e2:d4:3a:ae:70:bf:90:52:17:39:7a:9b:ea:
7b:fb:b7:af:6b:66:a0:85:eb:81:e9:e1:3d:61:72:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:97:FD:2C:7B:F2:0C:72:5C:B1:AC:53:ED:31:CD:DA:40:37:D0
X509v3 Authority Key Identifier:
keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl
Authority Information Access:
CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS25098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.209.0/24
Signature Algorithm: sha256WithRSAEncryption
51:41:39:38:4a:1d:87:c4:da:4e:ad:fe:37:a4:db:f2:0a:53:
ef:a4:f3:83:a5:f9:49:be:a6:50:43:3b:73:7e:83:8c:0e:18:
18:b1:b8:89:e6:50:9e:a6:a5:42:81:e0:04:8f:f7:c9:71:78:
f8:42:4d:89:4b:6e:45:7c:7a:e8:77:5b:44:54:1a:ec:0a:19:
71:b9:fc:83:d1:f2:0b:2c:0b:a5:06:4e:7b:d0:57:64:2f:c7:
a2:8e:18:33:6d:2c:86:96:04:4d:59:73:a8:61:d5:17:9a:03:
1d:c0:08:8a:cb:32:53:a3:b7:dc:ca:7d:3e:b7:a3:ba:e6:aa:
89:43:8a:ff:32:f0:22:ee:cb:83:69:45:20:d0:3a:ec:d4:35:
23:b5:f1:1b:a7:a5:d7:c6:58:4d:f4:56:9e:58:5d:30:b5:1f:
51:37:75:48:a6:14:c8:46:0f:cb:9d:fc:37:34:c9:0f:92:6c:
af:7c:d9:03:ee:a6:a9:19:cb:dd:9f:cf:90:da:96:91:bc:88:
a3:76:00:33:50:57:35:1b:26:6f:97:36:9a:1b:53:66:66:4a:
7e:1b:4e:e1:7e:09:ed:28:fd:e6:24:ec:db:d8:04:12:f9:be:
8b:07:af:d3:05:c6:39:ab:fc:0a:1f:e8:64:8c:81:84:e4:73:
94:b1:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org