![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa
File: AS212219.roa (raw, json)
Hash identifier: MK5IxaDpjFkoum2CQ8L/0cWYY10YKX3gZwSneu/gPd4=
Subject key identifier: 02:0E:87:E0:EF:01:53:6C:C1:35:F9:06:32:57:48:4D:06:79:38:5C
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 7F32FAC757D6EB306DB90CA3C8605C93E1C0B770
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa
Signing time: Tue 11 Apr 2023 11:34:00 +0000
ROA not before: Tue 11 Apr 2023 11:29:00 +0000
ROA not after: Tue 09 Apr 2024 11:34:00 +0000
asID: 212219
IP address blocks: 86.38.156.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:32:fa:c7:57:d6:eb:30:6d:b9:0c:a3:c8:60:5c:93:e1:c0:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 11 11:29:00 2023 GMT
Not After : Apr 9 11:34:00 2024 GMT
Subject: CN=020E87E0EF01536CC135F9063257484D0679385C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:1e:4f:5f:08:38:a0:da:96:fd:57:d3:36:
a5:76:b9:a3:57:2c:92:09:1f:f0:f1:74:44:70:fb:
f5:5c:5a:69:b1:dd:70:47:c9:ee:a0:8b:82:34:ae:
72:7e:07:2d:ef:93:78:ea:ba:fd:93:3c:04:1f:54:
e8:99:89:5d:5f:64:dc:77:bc:17:16:d7:b3:2d:bc:
af:6a:2c:67:5f:5b:c8:26:cd:1e:3f:b0:64:e4:e6:
d6:c8:92:45:1d:0a:89:1b:66:fb:e9:58:5e:e3:fc:
e3:b2:de:37:20:76:c1:0e:2a:b4:5b:54:ac:6d:31:
9c:4b:56:2e:28:64:78:1b:71:cc:88:1a:d4:8b:12:
fc:64:4d:cd:5d:c7:b8:70:2f:4b:ec:9a:2e:19:06:
ee:3f:2d:71:52:f2:b6:3a:37:a6:13:52:ac:a7:96:
22:a2:f5:ba:75:73:25:0e:bc:d5:b5:a3:50:79:6b:
bc:a7:3f:1b:4d:18:10:24:96:8d:e0:2b:42:97:56:
a8:df:83:5b:b0:6c:49:8a:dd:79:9e:e9:75:b2:f8:
cb:5c:ec:1a:28:f9:ea:56:77:56:35:5f:45:40:1c:
42:09:6e:41:ce:25:d5:05:a8:ba:cc:e1:b0:5b:2f:
65:56:dc:9b:dd:ae:e2:c1:a2:33:fc:e9:dd:e3:a0:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:87:E0:EF:01:53:6C:C1:35:F9:06:32:57:48:4D:06:79:38:5C
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212219.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.156.0/24
89.116.132.0/24
89.116.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ef:0b:78:2a:61:4f:94:e4:ad:1d:22:21:e3:8d:20:90:b7:
98:c7:dc:83:4e:e6:c3:c8:cb:33:46:ea:12:4f:18:9d:e2:32:
62:29:e2:35:e9:36:3a:a8:e0:0e:26:21:81:b5:37:50:5e:32:
15:ad:b4:43:2b:3a:c5:2b:9e:47:ee:ea:64:43:dc:95:ae:ac:
1d:66:25:4c:10:ef:58:f4:09:9f:4a:0a:ad:c3:8a:09:40:f0:
5b:b1:63:45:c5:3e:01:75:15:df:68:62:39:d3:21:35:cb:08:
fd:92:cf:cd:cf:1e:4b:14:16:f4:00:02:da:8b:a5:c2:44:8b:
db:42:c7:7a:48:78:ae:3c:8c:cb:c7:1f:33:1b:92:f1:26:02:
db:87:36:bc:24:76:2f:d0:0d:58:60:5e:7c:31:45:3c:29:08:
61:db:a4:2e:5a:b6:22:66:39:05:40:4e:e1:1c:f7:e2:75:fc:
5e:ab:35:f8:e5:70:29:05:42:9b:ae:ab:d2:47:31:16:29:d6:
b8:73:d8:26:6a:2b:c9:7b:04:74:e1:1e:e3:2d:a4:29:eb:ea:
55:37:54:e4:43:f8:8e:c9:a6:18:75:c8:27:96:c9:e8:7f:dd:
76:2a:9d:d5:80:16:07:c3:73:9a:ee:e9:2d:57:8c:65:6b:21:
a5:2f:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:07 2025 by rpki-client