Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS135752.roa
File:                     AS135752.roa (raw, json)
Hash identifier:          eq2aK/3njOi/HA+5NWeIRVEvRyqIvMw8jP+RSUX507k=
Subject key identifier:   39:57:00:03:74:F4:AB:0B:72:5B:5F:AD:38:BE:08:31:2C:45:E0:FB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7EA34621F9775C60CE2371947AF2F6A0495F7B7E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS135752.roa
Signing time:             Thu 29 Jun 2023 00:00:02 +0000
ROA not before:           Wed 28 Jun 2023 23:55:02 +0000
ROA not after:            Thu 27 Jun 2024 00:00:02 +0000
asID:                     135752
IP address blocks:        89.116.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a3:46:21:f9:77:5c:60:ce:23:71:94:7a:f2:f6:a0:49:5f:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 28 23:55:02 2023 GMT
            Not After : Jun 27 00:00:02 2024 GMT
        Subject: CN=3957000374F4AB0B725B5FAD38BE08312C45E0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:de:eb:bf:6c:db:a5:5b:a4:c8:e5:52:9d:
                    da:75:3a:e4:19:b3:4d:5f:2f:49:bf:d3:37:eb:6d:
                    b8:ac:08:20:ea:01:7c:d4:c9:2d:3d:d4:b7:10:46:
                    6b:de:66:a3:ed:39:a3:20:21:05:d8:cc:b3:08:34:
                    01:ec:79:0b:d5:fa:e2:29:bb:81:31:80:37:16:5c:
                    aa:64:d8:88:cb:b8:40:6b:cd:00:22:5b:d0:2a:0a:
                    7c:6c:c1:1d:ad:58:ea:dc:48:ff:79:57:71:4e:17:
                    c9:a3:6f:39:34:3e:0e:a0:9d:5e:99:03:f0:4d:6f:
                    bd:d1:19:e9:70:83:b8:6f:26:3f:9d:97:2d:cc:41:
                    19:76:9c:16:1f:be:2c:2f:31:8d:97:52:d6:63:16:
                    b8:0b:af:8e:4d:ab:d8:40:fc:44:52:36:6a:9b:11:
                    2e:f7:79:f8:51:3c:ef:2e:ac:32:23:04:27:47:4e:
                    87:88:13:4a:ce:93:af:d1:cc:d2:e8:86:f6:7d:ec:
                    94:e5:fb:5a:37:6f:7f:2d:ae:d4:8d:33:8f:2c:82:
                    5d:0a:b5:23:d4:4c:d5:69:1c:b8:51:72:34:c6:3a:
                    ca:3f:55:b8:69:cf:01:2f:6c:19:f5:26:44:9e:e7:
                    25:7f:ef:7b:c6:7c:b0:4e:61:98:aa:e8:54:f1:c2:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:00:03:74:F4:AB:0B:72:5B:5F:AD:38:BE:08:31:2C:45:E0:FB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS135752.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:57:d0:89:54:6b:bd:55:28:89:32:56:b3:e1:29:04:c8:11:
         95:12:1e:d6:3d:1e:87:d9:5d:a9:0c:a1:be:a3:2e:d2:da:75:
         8d:b3:01:b7:88:09:b1:b2:7b:4b:de:c0:9b:ed:6b:bc:c0:8d:
         12:52:bb:67:4b:c2:4a:10:b0:68:c6:31:12:cf:ba:7e:94:9b:
         e0:af:f9:8f:8d:ac:e9:1f:ba:1e:66:01:91:d7:44:a1:f8:14:
         09:19:8e:20:68:56:d6:b8:34:54:76:2c:87:dd:8f:de:34:8e:
         75:e5:66:8b:85:d1:9b:53:69:92:72:7b:54:b2:2b:72:66:ab:
         2b:6e:f5:09:ef:5a:c2:4a:a9:30:bb:2a:f7:b6:75:53:bd:6e:
         4e:6b:0c:12:3e:04:d9:49:53:70:eb:0c:0f:cb:cc:b8:fb:e7:
         d7:4b:b9:9d:c2:9d:b4:70:8a:3a:fb:4a:64:87:d4:46:2a:20:
         1c:6c:fe:8f:5f:7a:1e:6e:cb:d9:69:10:0a:f5:76:2b:c9:25:
         5d:2c:84:76:39:a7:4c:b5:b2:0b:25:4f:6e:a3:e8:00:98:22:
         02:cf:28:50:a5:22:11:59:15:d0:7b:77:9a:77:bd:8f:96:54:
         23:33:22:a9:0b:e7:17:4d:07:69:51:4c:d3:3a:e8:f7:bb:29:
         7d:27:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:43 2025 by rpki-client