Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: GwtHqK5WcJ8/GUT/+PV2iB2v5EEbmHmwsx+79UlVVf8=
Subject key identifier: F8:BA:DE:C0:31:5E:E6:B9:4E:A1:64:8E:49:1C:F6:88:F1:07:29:57
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 041157B5C58606DEFDB11487C0DAA99D0CC91864
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
Signing time: Thu 09 Mar 2023 00:00:14 +0000
ROA not before: Wed 08 Mar 2023 23:55:14 +0000
ROA not after: Thu 07 Mar 2024 00:00:14 +0000
asID: 1239
IP address blocks: 86.38.4.0/23 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
86.38.189.0/24 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.56.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl
rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Mar 2023 04:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:11:57:b5:c5:86:06:de:fd:b1:14:87:c0:da:a9:9d:0c:c9:18:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 8 23:55:14 2023 GMT
Not After : Mar 7 00:00:14 2024 GMT
Subject: CN=F8BADEC0315EE6B94EA1648E491CF688F1072957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:2c:ad:de:5d:3a:32:31:ef:af:04:52:ae:
dc:2f:e8:47:dc:32:ff:46:bb:c6:7f:39:fb:98:6f:
0c:d3:8b:d7:b8:9d:64:ca:f7:e6:c6:6a:ac:2d:ae:
41:35:22:92:aa:ca:90:58:2f:05:08:cc:65:5a:43:
6f:08:a4:26:43:04:da:b5:cf:43:ee:59:0c:8d:d7:
6d:59:37:16:f2:8f:89:b3:79:d3:76:5d:77:3e:10:
72:4f:c9:24:7e:48:3d:13:84:be:f7:95:db:24:07:
cb:da:c4:10:9a:74:33:1a:63:98:40:4f:b8:83:77:
e1:a9:23:3e:91:5f:84:e2:4a:9e:3a:10:0c:c0:d2:
02:9e:1e:da:06:d6:f3:f8:4d:21:e3:72:6f:ce:1c:
32:82:b7:bc:73:d8:5c:a9:6c:23:ca:18:19:91:95:
e9:a7:58:59:54:28:8a:6d:ba:52:fc:e5:cf:33:3e:
68:e4:c9:a9:4f:e4:84:68:9e:da:3b:d0:ca:0c:c5:
54:bf:98:8c:93:10:93:02:6d:57:60:7f:d5:c9:fb:
bd:d0:dc:bb:f0:3f:69:36:78:08:1c:96:54:20:2c:
ec:b1:7a:4b:b7:09:71:21:f1:5d:02:9a:fd:81:b1:
ba:4b:55:49:af:86:99:aa:04:51:f5:38:32:08:66:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:DE:C0:31:5E:E6:B9:4E:A1:64:8E:49:1C:F6:88:F1:07:29:57
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/23
86.38.180.0/22
86.38.189.0/24
86.38.220.0/23
86.38.246.0/23
89.116.56.0/24
89.116.156.0/24
89.116.189.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.228.0/23
Signature Algorithm: sha256WithRSAEncryption
90:96:05:26:3f:27:67:94:45:a8:73:30:00:92:a8:9e:3a:e3:
9b:83:d4:c4:07:4c:f9:37:e0:63:a8:25:a0:26:76:f7:94:a8:
a6:e3:bd:3b:81:ba:58:d9:d3:cf:af:b0:83:95:af:57:e9:20:
6a:96:bc:d7:83:7d:96:53:86:aa:ea:cf:79:43:eb:31:5e:45:
45:87:01:62:09:79:1f:1f:64:fd:56:5f:24:c2:93:1d:da:2f:
4c:7c:c5:f5:07:df:08:b5:90:d4:d2:3c:19:1b:e0:c0:ec:38:
e5:b2:9b:d1:68:7f:a2:5d:46:ad:16:9a:a4:0d:1b:28:be:30:
11:88:a9:0f:00:b3:17:4e:76:91:bf:35:22:e8:17:c6:8f:0c:
16:bb:77:3c:91:ed:1d:fe:a9:7f:0c:dd:93:f1:e1:b2:85:a5:
da:85:3a:eb:cd:f4:a5:41:ce:37:15:74:19:05:81:e5:55:31:
d6:a2:1d:52:1a:5e:ed:ef:24:78:10:c1:41:d4:13:15:a0:90:
f3:11:9d:56:7f:55:da:29:92:be:fc:11:36:ff:c6:53:c5:86:
37:d1:b1:b4:9b:f0:30:54:20:bf:06:18:34:9d:ab:8a:78:fd:
c3:87:53:e8:b1:90:fe:b8:e2:8d:6a:55:96:d2:27:8c:92:0b:
26:97:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:32:24 2023 by rpki-client on console-ams.rpki-client.org