Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3170.roa
File: AS3170.roa (raw, json)
Hash identifier: xlQxHSXLoiv34QWAqpKVw5X9rJE+/MA+hXftTzbL8U8=
Subject key identifier: 88:97:3B:61:79:F3:08:D1:C9:48:8D:75:2C:5F:A0:2A:76:B4:85:3B
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 1B6DD1E10E6174347CCF0C6CB0C3EE27CE340E89
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3170.roa
Signing time: Thu 13 Apr 2023 15:14:28 +0000
ROA not before: Thu 13 Apr 2023 15:09:28 +0000
ROA not after: Thu 11 Apr 2024 15:14:28 +0000
asID: 3170
IP address blocks: 89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6d:d1:e1:0e:61:74:34:7c:cf:0c:6c:b0:c3:ee:27:ce:34:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 13 15:09:28 2023 GMT
Not After : Apr 11 15:14:28 2024 GMT
Subject: CN=88973B6179F308D1C9488D752C5FA02A76B4853B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:8c:a9:24:bd:a4:36:f8:ca:cd:c5:1f:e8:
a7:32:49:f7:bb:df:8d:d5:5e:c7:7d:b7:3d:91:52:
a0:77:07:e0:0d:10:1e:e2:85:1c:f2:da:41:be:94:
d3:57:f6:76:b8:68:cf:a2:bd:d1:b1:bb:b4:90:ea:
19:8e:8e:46:b8:09:db:68:52:d4:bf:95:d1:0d:f8:
b5:2b:ac:58:26:13:2d:1a:22:48:9b:c6:41:bc:db:
1a:eb:09:ac:88:2c:f2:26:e8:07:fe:4b:26:4d:06:
58:e1:48:95:d4:5e:ef:0c:bc:4d:52:9c:dc:6d:cc:
e7:4a:7b:91:ba:b3:68:ce:9b:06:53:c3:5c:5e:d0:
b2:11:ed:70:88:cb:e0:a5:09:9f:c7:66:70:69:79:
10:3c:3a:e2:2b:cc:44:c1:44:f3:d5:38:2b:8b:ae:
4f:11:08:61:f2:39:77:3c:2c:1c:45:68:71:83:13:
4e:fb:18:d9:4e:75:cc:1c:63:37:3c:70:e5:ed:6e:
64:34:df:57:1b:75:4f:3e:ea:76:d2:63:41:3a:4c:
be:fa:8c:73:fb:e9:60:97:62:6e:97:02:ac:30:c1:
f8:19:9a:6b:7c:a2:f9:f7:b3:a6:92:fe:04:c9:68:
07:c8:cb:4b:a7:28:a7:8e:94:51:34:3d:3e:4c:0e:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:3B:61:79:F3:08:D1:C9:48:8D:75:2C:5F:A0:2A:76:B4:85:3B
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.203.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:09:a0:6d:6d:91:bc:6f:62:74:25:e7:67:59:f7:6f:a5:
ee:d2:55:31:b7:0d:d3:9a:a8:73:80:09:a8:dc:6c:f4:67:b8:
5e:85:52:f1:6a:1a:37:c0:0b:ba:90:f5:e9:8c:70:46:50:64:
2f:c6:ec:d2:27:92:15:c8:70:55:f2:0f:54:4c:e6:63:32:aa:
b1:d9:88:fb:cd:92:d3:e7:dd:e3:2b:e9:23:77:7b:1c:30:d2:
48:6e:0c:65:09:c5:18:ff:70:2d:44:a5:7c:fb:7d:7c:66:8a:
3d:ec:32:e4:19:9d:93:88:12:30:e3:36:2e:72:0b:b8:a4:a1:
93:fb:50:a5:84:a8:85:b2:ee:65:91:e8:ef:07:c8:dd:ca:01:
26:3e:86:72:4c:8f:72:4f:88:cf:a5:f7:8a:c6:c0:81:db:07:
86:c1:f9:3f:3c:30:50:a7:e3:a7:bf:a6:0e:33:90:02:e1:e7:
ba:45:44:c1:6e:34:16:a1:95:77:8c:84:e0:ef:8d:42:55:84:
5c:d2:74:a0:e8:a6:07:f1:06:d5:dc:64:27:99:ee:3d:5d:b6:
82:6f:c4:f3:c5:d3:0c:a6:3b:d0:da:cd:3a:bc:5c:a9:1d:a1:
35:1f:38:a8:46:e9:63:f5:bc:a8:98:80:80:a5:56:93:d3:d3:
03:fc:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:20:47 2023 by rpki-client on console-ams.rpki-client.org