Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          8/Uz11hVRR4ahf0w0OwXYQQlPj2Xdia5iankCkQQMII=
Subject key identifier:   CB:14:F6:B3:0C:90:7F:8D:16:B3:20:64:B4:31:CE:4B:F2:50:B3:0D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       40C6B434757AD393BC5F226281940B3247DD17C3
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63023.roa
Signing time:             Mon 19 Jun 2023 00:00:07 +0000
ROA not before:           Sun 18 Jun 2023 23:55:07 +0000
ROA not after:            Mon 17 Jun 2024 00:00:07 +0000
asID:                     63023
IP address blocks:        89.116.144.0/24 maxlen: 24
                          89.116.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c6:b4:34:75:7a:d3:93:bc:5f:22:62:81:94:0b:32:47:dd:17:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 18 23:55:07 2023 GMT
            Not After : Jun 17 00:00:07 2024 GMT
        Subject: CN=CB14F6B30C907F8D16B32064B431CE4BF250B30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:ae:69:6c:f0:8e:a6:d0:86:57:56:13:d5:
                    11:6d:82:bf:cc:4f:ab:53:9d:52:bf:07:4b:19:a7:
                    06:d9:80:2c:95:8a:e8:6a:6b:43:d8:77:3b:47:7d:
                    e5:74:fd:b0:5e:6a:0e:e4:3d:9e:d3:da:3a:e9:28:
                    1b:9f:f6:b3:c3:d8:83:fc:49:a4:1a:76:b8:72:57:
                    31:f9:6c:73:f1:e1:92:6e:49:ac:14:4e:0e:c1:e7:
                    df:79:21:4e:c5:36:4a:df:ec:89:00:86:25:42:f2:
                    db:4b:15:36:8e:7c:13:a7:02:d8:d9:25:16:4c:e9:
                    e6:4e:9c:ab:a4:5c:92:9c:d2:42:f0:f5:88:60:42:
                    d0:4e:f0:5e:67:61:3e:be:5d:e0:b7:10:3d:1f:e2:
                    4d:43:31:56:66:e6:5d:02:6b:0d:cb:22:4a:fa:fe:
                    03:0b:f5:d1:89:b2:9e:5f:f9:35:c5:65:8a:eb:b9:
                    50:81:a4:17:0c:1a:95:c7:f1:80:19:bd:f2:e3:f9:
                    31:f5:ab:aa:9b:b5:26:9b:2d:58:88:aa:fd:cb:78:
                    6c:91:9b:21:54:bf:90:1b:09:62:90:e2:9d:13:3b:
                    6c:00:cc:05:59:af:da:af:7c:e2:63:6b:db:13:e6:
                    f6:b2:b4:21:3a:79:ef:41:fa:b5:93:80:44:ec:8f:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:F6:B3:0C:90:7F:8D:16:B3:20:64:B4:31:CE:4B:F2:50:B3:0D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.144.0/24
                  89.116.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:72:68:3c:16:87:1b:8b:42:44:7a:6c:5f:c2:5e:a3:ac:
         ee:5e:02:1f:cb:44:a8:63:48:e6:5c:0c:6a:7f:75:8e:44:ea:
         20:5d:66:a9:f5:8e:ff:dd:8b:b5:ad:7a:db:ce:70:4d:4f:91:
         5a:0e:95:23:94:f9:b8:15:af:9f:6f:a0:44:6c:d0:5a:b1:b9:
         87:d1:cb:f2:25:97:e6:9a:af:ff:9c:c0:9b:f2:a8:d9:c3:13:
         3a:7e:64:48:7a:a0:93:d6:38:33:c9:6b:62:2c:6d:7d:fc:c2:
         a9:6a:bc:c3:db:f5:60:bf:1c:58:31:c6:93:52:8c:45:c9:b6:
         09:ff:9f:a3:4f:34:00:79:18:10:9b:c5:2f:9d:ca:e9:f0:f6:
         c3:d9:37:44:4c:5c:1f:d8:eb:32:23:bf:1a:45:2e:b4:51:78:
         b7:f8:c9:c2:89:7e:02:ae:b2:66:61:3c:03:05:ba:4d:71:b9:
         3d:15:bb:b3:47:a3:2d:cd:9b:58:2f:52:3c:36:57:8b:22:4e:
         98:9c:5d:08:de:5c:72:92:7f:28:8f:db:f8:1d:a9:6f:90:25:
         b6:90:9e:ab:76:2f:46:83:2a:41:ac:c6:bc:4e:e6:fa:8a:1b:
         d8:ea:a2:6d:ab:1d:e8:3f:f5:6f:f5:6a:1e:25:a2:f4:da:48:
         db:15:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:16 2024 by rpki-client on console-fra.rpki-client.org