Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa
File:                     AS152672.roa (raw, json)
Hash identifier:          gpsnPXxoE0LZP00oLJ5BG3reWGYbk2L0Da+nBvUVUOU=
Subject key identifier:   2F:00:88:68:F6:18:17:DE:44:0B:DD:FE:A0:A1:FF:96:03:6E:B1:27
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       01EEB4664F0000C2C67672F6FF47737F19F88F9B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa
Signing time:             Sun 12 May 2024 03:16:21 +0000
ROA not before:           Sun 12 May 2024 03:11:21 +0000
ROA not after:            Sun 11 May 2025 03:16:21 +0000
asID:                     152672
IP address blocks:        89.116.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 07:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ee:b4:66:4f:00:00:c2:c6:76:72:f6:ff:47:73:7f:19:f8:8f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 12 03:11:21 2024 GMT
            Not After : May 11 03:16:21 2025 GMT
        Subject: CN=2F008868F61817DE440BDDFEA0A1FF96036EB127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:f4:a5:f7:a2:04:6f:bf:9b:9f:36:0f:b6:
                    f4:2d:98:91:51:95:0e:16:be:96:11:2c:76:07:f7:
                    c1:56:1a:da:01:04:e5:07:04:93:c6:66:bc:df:f7:
                    3c:31:9c:e8:29:56:d2:dd:e6:29:c2:08:79:5b:e6:
                    0f:e0:3e:d1:28:ea:27:27:a4:75:e5:e9:dd:54:0f:
                    73:74:1c:ee:e5:ef:70:27:5b:c0:64:1c:41:e8:81:
                    7b:8b:e5:9b:d7:da:23:b8:aa:5a:bc:5c:32:e4:f0:
                    26:cc:9e:0d:f5:08:8a:b4:51:2f:b1:8a:9c:7b:69:
                    99:8a:74:0c:c9:f7:3c:a0:9f:97:d0:da:74:6e:33:
                    66:20:9f:cd:92:f5:2d:85:35:b7:86:26:dc:d3:d3:
                    12:9c:9b:73:15:57:64:f3:4c:66:96:81:de:ce:e6:
                    c9:06:d9:93:55:f7:df:b4:0c:c1:e7:c6:b1:94:33:
                    85:eb:2c:98:25:f8:b5:8a:f3:18:ed:9d:34:0a:89:
                    90:e9:d8:23:b9:07:f6:59:d6:04:5a:4c:ed:8e:d6:
                    1c:e3:62:05:03:f2:00:59:41:18:8e:2f:ed:bc:6a:
                    c8:0e:cc:3c:48:8b:b4:b1:1f:f3:a7:06:53:ec:df:
                    48:09:4c:c8:51:44:71:b9:54:d1:ec:21:b2:a2:76:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:88:68:F6:18:17:DE:44:0B:DD:FE:A0:A1:FF:96:03:6E:B1:27
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:c4:54:35:56:ab:78:f2:dd:13:8f:30:2a:01:fa:2e:2f:
         22:f4:3c:5e:e4:ee:b0:1b:f4:27:57:d0:e5:19:e9:a9:6e:ed:
         ab:75:fc:75:0c:ed:5e:d5:bc:f7:1d:6a:46:46:b3:b5:c6:13:
         90:b1:53:ce:17:94:1c:7f:19:0c:2c:a7:7a:71:5b:02:10:67:
         b7:97:39:78:aa:6f:92:fb:4c:81:b3:3b:96:63:a2:45:85:43:
         93:92:13:2c:7a:7c:71:0b:08:81:3f:b3:ff:68:6c:ec:e0:e1:
         14:ec:20:b2:6a:c9:c5:8c:5d:4c:7b:9e:f0:10:4c:f0:e4:f8:
         0e:0b:19:05:f5:35:85:15:5a:f1:88:f6:ff:ae:b0:27:0f:2c:
         96:94:fa:cc:56:76:5d:88:a8:8f:cf:e3:96:b0:c4:83:92:f0:
         5b:4b:34:e0:4c:72:30:b5:66:6f:30:2b:72:bc:f6:85:b6:f5:
         2d:31:3e:5f:33:4e:f1:e6:26:76:8b:c0:8b:91:e6:2e:a9:bc:
         28:fe:19:1c:26:80:88:30:0a:11:a1:65:78:26:a8:54:e4:fb:
         07:e8:8f:ae:72:d2:f3:48:88:a5:58:4a:9b:53:15:75:d2:54:
         a1:fc:a4:a5:7e:13:7c:e4:fd:66:79:fc:5b:2c:09:4a:3a:b0:
         1c:c8:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:21 2024 by rpki-client on console-ams.rpki-client.org