Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
File:                     AS50919.roa (raw, json)
Hash identifier:          3VDWVQVrt9TopSAnTB9vU80IX44O2wYZoSQXjTKa6/c=
Subject key identifier:   E4:20:26:76:5D:69:83:57:2E:B9:71:F2:9B:82:51:6C:CF:D2:71:A6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2FDA2BCBD9819E443ED03CD4EAE665B8EB16B083
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
Signing time:             Mon 27 Nov 2023 09:31:29 +0000
ROA not before:           Mon 27 Nov 2023 09:26:29 +0000
ROA not after:            Mon 25 Nov 2024 09:31:29 +0000
asID:                     50919
IP address blocks:        89.116.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 07:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:da:2b:cb:d9:81:9e:44:3e:d0:3c:d4:ea:e6:65:b8:eb:16:b0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 27 09:26:29 2023 GMT
            Not After : Nov 25 09:31:29 2024 GMT
        Subject: CN=E42026765D6983572EB971F29B82516CCFD271A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:68:cb:97:01:e3:44:8e:83:87:47:d3:ed:
                    b3:40:03:0a:f0:4a:6e:86:49:ee:2e:86:de:b2:11:
                    63:8e:20:53:8b:6d:d2:43:19:f7:0b:3d:60:69:61:
                    ff:0b:f7:a3:29:14:cf:5b:02:77:e7:97:8b:e5:5e:
                    2c:b2:5d:43:b8:bc:20:fd:4a:bc:d5:ba:5c:47:9d:
                    36:a0:4d:fb:c9:1d:25:19:bd:02:2d:dd:0d:07:2c:
                    3b:4b:11:28:cc:25:4c:76:8f:6b:fc:9c:a7:33:0c:
                    a3:db:10:c1:9c:48:92:76:89:ae:9b:d4:84:90:9a:
                    eb:6c:fa:27:24:00:c7:58:71:3a:6a:78:07:de:cf:
                    b9:aa:b6:76:7c:a9:c2:0a:45:4a:61:55:1e:bc:e5:
                    9c:86:ab:b4:db:59:41:14:20:09:f1:86:da:82:0d:
                    77:4e:fc:d3:dc:04:fd:d6:88:0d:76:e7:46:a1:42:
                    6f:25:41:5a:34:02:62:83:95:a0:c2:6d:ef:77:f7:
                    c8:9f:30:9c:fd:d3:35:0e:34:92:ed:21:12:f7:a0:
                    bc:79:cf:e5:be:82:e2:76:c6:dc:77:9d:10:0d:94:
                    d0:e8:a6:91:6b:81:8a:59:b7:ca:af:c4:3f:82:11:
                    37:fc:4d:d5:2d:55:1b:f6:d5:48:7e:2b:63:53:02:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:20:26:76:5D:69:83:57:2E:B9:71:F2:9B:82:51:6C:CF:D2:71:A6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:89:c9:c9:da:70:a8:5c:be:f6:58:37:ee:d1:96:c8:92:
         d0:76:1c:9a:e2:ad:83:e4:82:2a:bf:27:22:b8:3e:40:bc:4b:
         1d:c8:5f:0e:18:bd:b6:7e:53:30:4c:cc:b9:85:db:f0:2b:d5:
         82:3f:61:00:2f:78:27:d2:e8:d6:45:a9:ab:56:b0:66:12:d6:
         b2:6e:05:3f:c1:a1:28:77:46:2f:c4:0f:fe:f7:1c:be:4c:f6:
         7c:1b:c9:7f:16:0d:8b:01:da:54:f6:02:10:69:cc:e7:ab:f4:
         ad:0d:4c:fd:0c:13:20:96:50:41:ad:cb:ac:e3:3b:79:30:42:
         8c:e1:37:f4:9e:4e:ae:3b:75:d0:36:3a:7c:6c:e2:79:b4:7e:
         b6:9e:e2:ad:1d:24:73:55:b8:95:ce:55:cb:2e:d7:2e:cb:ea:
         30:e7:61:46:76:54:60:6d:76:74:f5:7d:e3:f3:0e:55:bf:be:
         6d:3b:60:4b:3f:c9:c4:b5:e9:95:2c:2e:12:38:16:13:96:69:
         6b:c9:f2:39:34:82:11:df:7f:a9:e7:13:4a:df:d4:36:1e:42:
         76:90:ca:cf:ec:39:8d:f8:a1:21:62:a8:91:c7:09:b5:e6:0e:
         d7:10:a3:b5:7d:1f:3d:8e:6d:23:03:ed:cc:4a:09:ca:49:fb:
         54:c3:d8:4a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUL9ory9mBnkQ+0DzU6uZluOsWsIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzExMjcwOTI2MjlaFw0yNDExMjUwOTMxMjlaMDMxMTAvBgNV
BAMTKEU0MjAyNjc2NUQ2OTgzNTcyRUI5NzFGMjlCODI1MTZDQ0ZEMjcxQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqGjLlwHjRI6Dh0fT7bNAAwrw
Sm6GSe4uht6yEWOOIFOLbdJDGfcLPWBpYf8L96MpFM9bAnfnl4vlXiyyXUO4vCD9
SrzVulxHnTagTfvJHSUZvQIt3Q0HLDtLESjMJUx2j2v8nKczDKPbEMGcSJJ2ia6b
1ISQmuts+ickAMdYcTpqeAfez7mqtnZ8qcIKRUphVR685ZyGq7TbWUEUIAnxhtqC
DXdO/NPcBP3WiA1250ahQm8lQVo0AmKDlaDCbe9398ifMJz90zUONJLtIRL3oLx5
z+W+guJ2xtx3nRANlNDoppFrgYpZt8qvxD+CETf8TdUtVRv21Uh+K2NTAsPzAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU5CAmdl1pg1cuuXHym4JRbM/ScaYwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzUwOTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSvMA0GCSqGSIb3DQEB
CwUAA4IBAQAQvYnJydpwqFy+9lg37tGWyJLQdhya4q2D5IIqvyciuD5AvEsdyF8O
GL22flMwTMy5hdvwK9WCP2EAL3gn0ujWRamrVrBmEtaybgU/waEod0YvxA/+9xy+
TPZ8G8l/Fg2LAdpU9gIQacznq/StDUz9DBMgllBBrcus4zt5MEKM4Tf0nk6uO3XQ
Njp8bOJ5tH62nuKtHSRzVbiVzlXLLtcuy+ow52FGdlRgbXZ09X3j8w5Vv75tO2BL
P8nEtemVLC4SOBYTlmlryfI5NIIR33+p5xNK39Q2HkJ2kMrP7DmN+KEhYqiRxwm1
5g7XEKO1fR89jm0jA+3MSgnKSftUw9hK
-----END CERTIFICATE-----
Generated at Fri May 31 22:12:27 2024 by rpki-client on console-fra.rpki-client.org