Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: dOFDa2qGBwXqGzPirXDFy79VR54UxKwFvJKknTDzvzQ=
Subject key identifier: 23:C2:95:C0:4D:0B:B7:C4:CC:88:5B:A1:38:60:5B:37:4A:FF:37:7F
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 1EF1089F645ED07646A79072B5A8CA06166A3437
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35913.roa
Signing time: Fri 19 May 2023 00:00:08 +0000
ROA not before: Thu 18 May 2023 23:55:08 +0000
ROA not after: Fri 17 May 2024 00:00:08 +0000
asID: 35913
IP address blocks: 86.38.4.0/24 maxlen: 24
86.38.187.0/24 maxlen: 24
86.38.217.0/24 maxlen: 24
86.38.218.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.117.0.0/22 maxlen: 24
89.117.88.0/24 maxlen: 24
89.117.89.0/24 maxlen: 24
89.117.90.0/24 maxlen: 24
89.117.113.0/24 maxlen: 24
89.117.114.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f1:08:9f:64:5e:d0:76:46:a7:90:72:b5:a8:ca:06:16:6a:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: May 18 23:55:08 2023 GMT
Not After : May 17 00:00:08 2024 GMT
Subject: CN=23C295C04D0BB7C4CC885BA138605B374AFF377F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:fd:de:70:39:19:5d:a5:75:78:fc:c1:8e:
a4:c6:82:01:40:90:40:09:dd:02:10:eb:21:6e:75:
4a:fe:27:68:3c:3f:74:35:24:6e:34:5c:b1:7a:f2:
f1:e8:16:7f:6a:d1:be:97:73:d3:0c:3b:34:3f:11:
5b:af:77:2c:b1:75:c4:39:4c:50:96:75:f2:d0:a3:
56:0d:86:e2:42:b2:75:50:97:38:76:5c:10:0a:ff:
2e:93:09:46:6a:8c:c3:50:29:9d:c3:c2:56:b1:44:
05:10:db:d7:23:c2:ca:77:b8:5a:85:4a:c5:09:ed:
ce:ef:3d:a9:e2:9b:87:d8:0a:91:c0:17:4a:20:07:
ae:76:9f:b1:b7:d9:5e:ee:c6:a4:8c:ad:51:71:db:
4a:d0:f0:15:98:a2:de:a8:44:f0:8e:40:2f:8c:2e:
ea:e7:ce:54:89:bf:f4:f8:ec:f9:cf:f9:27:58:a2:
aa:f4:18:3d:7b:cc:8a:ae:11:4a:a0:d4:a8:5f:a5:
0f:c4:54:36:19:b1:f6:6d:63:5a:55:5c:93:0b:e6:
72:47:d9:fe:e6:5b:b1:1c:12:09:ce:d3:e3:47:b4:
da:4d:74:35:fe:db:03:08:12:58:52:12:89:12:10:
b3:15:b2:dc:e7:5e:1a:a2:98:c6:9d:35:95:ff:c7:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:95:C0:4D:0B:B7:C4:CC:88:5B:A1:38:60:5B:37:4A:FF:37:7F
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/24
86.38.187.0/24
86.38.217.0-86.38.218.255
89.116.175.0/24
89.117.0.0/22
89.117.88.0-89.117.90.255
89.117.113.0-89.117.114.255
89.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9b:c9:70:3a:9e:ba:ef:8e:2b:be:24:20:9c:7d:7d:e5:ea:
e7:6c:1a:b9:84:21:0e:4c:10:c6:c2:93:bf:dc:81:89:5e:c0:
43:3a:c4:7a:6a:98:fa:8d:52:5c:c2:30:27:03:4d:33:96:01:
40:80:45:7a:86:4e:b6:81:f7:d3:fd:0d:8a:d6:47:c4:2b:d4:
41:75:8e:76:00:9b:d5:23:16:ed:4e:6f:43:2d:06:86:d1:7b:
49:fd:f9:20:93:9c:7b:3f:06:78:12:21:69:38:3c:6f:8b:d9:
f4:ff:e9:4a:47:dc:59:8a:52:60:c5:ea:05:98:d7:40:8d:2a:
ff:90:7a:9d:b3:94:46:14:4d:5b:33:db:b3:cf:b1:3a:94:0e:
fc:9b:84:af:8f:4e:15:06:8d:c0:11:a7:c0:5d:f0:3a:16:9e:
11:a3:97:61:54:0c:8c:ea:48:77:33:bd:d6:26:01:c2:e6:99:
2f:08:12:3d:d1:f0:c2:60:6c:40:be:59:66:9e:59:d2:3e:35:
70:9a:9e:c9:72:9f:8a:04:2c:33:5a:42:52:d9:dc:4f:d0:09:
9e:56:f7:89:14:21:2b:9f:38:ae:30:ae:10:6c:59:29:90:5d:
bc:51:54:8b:1e:11:0b:dc:3b:c6:62:05:09:65:37:30:64:97:
15:c3:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:28:21 2023 by rpki-client on console-fra.rpki-client.org