Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa
File:                     AS206216.roa (raw, json)
Hash identifier:          njfThk5BsGlLFEnZBe7+v2ePbajCIoiU9unDlfpyRpM=
Subject key identifier:   5A:5F:B6:0E:51:62:72:6E:48:AB:5A:EB:56:D7:FB:96:D9:08:83:B2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       76D1659B99B037CCAC3AE286D5EC3F5EFE096FAB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa
Signing time:             Mon 12 Jun 2023 06:41:32 +0000
ROA not before:           Mon 12 Jun 2023 06:36:32 +0000
ROA not after:            Mon 10 Jun 2024 06:41:32 +0000
asID:                     206216
IP address blocks:        89.116.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d1:65:9b:99:b0:37:cc:ac:3a:e2:86:d5:ec:3f:5e:fe:09:6f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 12 06:36:32 2023 GMT
            Not After : Jun 10 06:41:32 2024 GMT
        Subject: CN=5A5FB60E5162726E48AB5AEB56D7FB96D90883B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:58:2c:57:c3:66:48:d6:9c:ab:1e:81:4d:
                    aa:17:64:fa:fc:9e:78:55:a3:33:e5:6b:2c:ea:64:
                    84:b1:eb:22:ea:39:ce:df:3c:c5:44:d9:b7:2c:b5:
                    80:5c:b2:a6:2f:c9:85:b9:82:fa:ce:57:df:f6:6b:
                    16:3e:a2:7e:1c:07:92:25:44:7d:44:08:1d:5e:88:
                    fa:17:a1:76:9e:3c:0c:ce:74:39:17:76:fe:24:44:
                    64:9b:e8:68:a9:a3:b0:22:f4:6d:d6:d5:46:a4:cb:
                    8f:be:15:3f:cf:fb:f2:09:15:d2:20:80:2d:37:ad:
                    de:e9:b2:f9:75:28:88:cf:7b:8a:c4:af:1a:cd:20:
                    6c:5c:9f:41:4f:fd:8a:7e:ed:3f:7c:28:ec:34:4e:
                    da:77:53:02:ab:6c:e8:06:d7:33:15:4b:90:f5:f4:
                    6a:a8:b3:b2:82:9f:b5:b3:fb:ad:7a:90:25:df:50:
                    85:2a:3f:84:55:9b:d9:74:7f:62:7f:cb:f9:e0:96:
                    78:5a:b9:b3:96:01:19:ac:06:03:ba:f1:24:08:45:
                    85:2f:03:62:e7:2e:34:53:76:94:64:8b:89:9d:b3:
                    24:70:0b:1d:b2:05:d3:79:9f:9d:be:41:72:fb:ed:
                    46:29:c1:3e:6b:c4:77:46:61:17:35:03:98:bd:df:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:B6:0E:51:62:72:6E:48:AB:5A:EB:56:D7:FB:96:D9:08:83:B2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:29:c7:f7:e4:85:25:05:23:e2:44:59:22:eb:29:46:95:
         ba:57:dd:77:c3:61:96:0a:46:24:b0:73:f9:fc:39:9b:1d:c2:
         d6:be:af:fd:c8:43:cf:96:2e:0e:6f:8f:fa:f6:a5:97:eb:da:
         fc:8d:f8:a4:55:73:bf:49:a4:f8:33:37:cc:bc:1d:2a:f2:3e:
         a2:b3:fa:2c:3c:fd:c8:da:cb:90:4a:b5:d5:b5:f6:fc:9a:5a:
         22:82:36:e3:15:5f:f6:a8:e6:c3:8b:29:67:ce:96:c1:02:c7:
         e7:aa:bf:5d:ce:dc:4e:4a:3e:a5:78:56:6d:43:13:69:31:4a:
         09:98:f5:3e:95:74:2f:5a:a3:d3:b1:22:11:6a:0a:30:75:2d:
         69:51:3e:4d:fd:ba:b0:28:95:8e:03:41:a0:f0:f6:f8:dd:18:
         7c:8c:2c:1c:8d:fd:c6:3a:49:d4:ed:d7:66:8a:6f:30:ac:20:
         6c:7f:36:57:6a:0c:c0:55:64:41:95:95:52:72:a5:47:38:8d:
         52:f2:b6:3d:81:c1:13:f9:a6:cd:6f:c1:5a:fc:0d:6f:ed:0e:
         0c:ae:5d:74:d4:bc:bd:57:b3:36:e7:be:b2:e6:be:3f:7c:bd:
         9b:06:7c:6a:aa:ea:63:06:ba:c6:9e:e8:7a:28:7f:52:a2:4c:
         55:5e:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:20 2025 by rpki-client