![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa
File: AS206216.roa (raw, json)
Hash identifier: njfThk5BsGlLFEnZBe7+v2ePbajCIoiU9unDlfpyRpM=
Subject key identifier: 5A:5F:B6:0E:51:62:72:6E:48:AB:5A:EB:56:D7:FB:96:D9:08:83:B2
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 76D1659B99B037CCAC3AE286D5EC3F5EFE096FAB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa
Signing time: Mon 12 Jun 2023 06:41:32 +0000
ROA not before: Mon 12 Jun 2023 06:36:32 +0000
ROA not after: Mon 10 Jun 2024 06:41:32 +0000
asID: 206216
IP address blocks: 89.116.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:65:9b:99:b0:37:cc:ac:3a:e2:86:d5:ec:3f:5e:fe:09:6f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jun 12 06:36:32 2023 GMT
Not After : Jun 10 06:41:32 2024 GMT
Subject: CN=5A5FB60E5162726E48AB5AEB56D7FB96D90883B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:58:2c:57:c3:66:48:d6:9c:ab:1e:81:4d:
aa:17:64:fa:fc:9e:78:55:a3:33:e5:6b:2c:ea:64:
84:b1:eb:22:ea:39:ce:df:3c:c5:44:d9:b7:2c:b5:
80:5c:b2:a6:2f:c9:85:b9:82:fa:ce:57:df:f6:6b:
16:3e:a2:7e:1c:07:92:25:44:7d:44:08:1d:5e:88:
fa:17:a1:76:9e:3c:0c:ce:74:39:17:76:fe:24:44:
64:9b:e8:68:a9:a3:b0:22:f4:6d:d6:d5:46:a4:cb:
8f:be:15:3f:cf:fb:f2:09:15:d2:20:80:2d:37:ad:
de:e9:b2:f9:75:28:88:cf:7b:8a:c4:af:1a:cd:20:
6c:5c:9f:41:4f:fd:8a:7e:ed:3f:7c:28:ec:34:4e:
da:77:53:02:ab:6c:e8:06:d7:33:15:4b:90:f5:f4:
6a:a8:b3:b2:82:9f:b5:b3:fb:ad:7a:90:25:df:50:
85:2a:3f:84:55:9b:d9:74:7f:62:7f:cb:f9:e0:96:
78:5a:b9:b3:96:01:19:ac:06:03:ba:f1:24:08:45:
85:2f:03:62:e7:2e:34:53:76:94:64:8b:89:9d:b3:
24:70:0b:1d:b2:05:d3:79:9f:9d:be:41:72:fb:ed:
46:29:c1:3e:6b:c4:77:46:61:17:35:03:98:bd:df:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5F:B6:0E:51:62:72:6E:48:AB:5A:EB:56:D7:FB:96:D9:08:83:B2
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS206216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.131.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e5:29:c7:f7:e4:85:25:05:23:e2:44:59:22:eb:29:46:95:
ba:57:dd:77:c3:61:96:0a:46:24:b0:73:f9:fc:39:9b:1d:c2:
d6:be:af:fd:c8:43:cf:96:2e:0e:6f:8f:fa:f6:a5:97:eb:da:
fc:8d:f8:a4:55:73:bf:49:a4:f8:33:37:cc:bc:1d:2a:f2:3e:
a2:b3:fa:2c:3c:fd:c8:da:cb:90:4a:b5:d5:b5:f6:fc:9a:5a:
22:82:36:e3:15:5f:f6:a8:e6:c3:8b:29:67:ce:96:c1:02:c7:
e7:aa:bf:5d:ce:dc:4e:4a:3e:a5:78:56:6d:43:13:69:31:4a:
09:98:f5:3e:95:74:2f:5a:a3:d3:b1:22:11:6a:0a:30:75:2d:
69:51:3e:4d:fd:ba:b0:28:95:8e:03:41:a0:f0:f6:f8:dd:18:
7c:8c:2c:1c:8d:fd:c6:3a:49:d4:ed:d7:66:8a:6f:30:ac:20:
6c:7f:36:57:6a:0c:c0:55:64:41:95:95:52:72:a5:47:38:8d:
52:f2:b6:3d:81:c1:13:f9:a6:cd:6f:c1:5a:fc:0d:6f:ed:0e:
0c:ae:5d:74:d4:bc:bd:57:b3:36:e7:be:b2:e6:be:3f:7c:bd:
9b:06:7c:6a:aa:ea:63:06:ba:c6:9e:e8:7a:28:7f:52:a2:4c:
55:5e:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:20 2025 by rpki-client