Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa
File:                     33372e3233302e35312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          2ITMN/oVOwq/vmea6uftIAW0zjCKYh1AnES8kKS4N0U=
Subject key identifier:   D7:AF:4F:D6:0A:BE:DF:40:60:74:7B:2E:3B:2B:26:8E:BE:6A:D9:26
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       160F75DED729A904766D894084D006FBF4375F7A
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 19 Apr 2024 07:41:47 +0000
ROA not before:           Fri 19 Apr 2024 07:36:47 +0000
ROA not after:            Fri 18 Apr 2025 07:41:47 +0000
asID:                     212238
IP address blocks:        37.230.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0f:75:de:d7:29:a9:04:76:6d:89:40:84:d0:06:fb:f4:37:5f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 19 07:36:47 2024 GMT
            Not After : Apr 18 07:41:47 2025 GMT
        Subject: CN=D7AF4FD60ABEDF4060747B2E3B2B268EBE6AD926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:e8:fc:76:77:71:20:78:aa:9e:3f:4d:2f:
                    a4:2f:50:71:3d:dd:dd:26:18:db:45:f4:76:1e:72:
                    8c:fa:91:ad:2f:05:79:8d:30:96:57:41:bd:53:68:
                    1d:5f:7a:4a:26:f5:83:1c:42:06:ca:df:b3:13:d8:
                    53:60:db:e6:9e:e2:28:a9:0a:c7:77:56:e3:c3:d6:
                    2d:a1:1f:dc:c2:59:a9:2b:c4:9d:fc:46:4b:8c:c7:
                    41:85:b5:10:9e:45:b8:c6:5b:e1:cf:0f:5f:7d:f7:
                    a7:25:44:1c:fb:85:83:f7:9b:db:45:4e:f9:37:8b:
                    99:94:aa:a4:34:96:82:81:df:1e:29:be:bc:58:36:
                    25:08:f2:60:b1:87:fe:cd:ed:90:81:63:5e:dc:a6:
                    3f:7f:4f:ed:51:06:da:9f:df:ce:88:d7:f3:8f:fe:
                    1d:28:bd:8e:cd:0c:69:82:3c:a0:f3:31:b4:b9:39:
                    55:15:fe:7b:e8:30:c7:73:a3:7f:25:5b:9f:88:0d:
                    fa:cf:4e:15:12:54:fc:8f:b7:c2:e5:d1:ad:8a:71:
                    9a:ff:2c:3b:43:b3:29:66:3c:70:ed:68:3d:0c:bf:
                    dd:f8:97:ba:5b:c5:39:6b:30:44:86:5c:8e:5b:54:
                    89:40:a4:75:6d:a7:53:bc:46:a2:9a:63:f7:65:63:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:4F:D6:0A:BE:DF:40:60:74:7B:2E:3B:2B:26:8E:BE:6A:D9:26
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:d5:5f:3c:94:c2:fe:76:32:3a:d8:0f:9c:d7:36:24:bb:
         37:86:6a:0a:87:8a:2c:10:b7:b8:8e:5e:38:71:7b:73:21:fc:
         80:62:14:37:eb:54:0e:1a:21:8f:b5:f3:95:65:58:8c:08:24:
         1a:4f:d7:6f:ca:a4:22:19:3e:3c:85:a3:ee:4c:2e:60:78:0d:
         83:3e:54:45:ce:15:1c:41:57:b7:38:82:2a:be:33:da:b3:dd:
         fa:21:b5:c1:67:a1:7d:e8:3e:ef:8e:26:61:ab:8b:94:9a:a4:
         bc:bf:92:5a:52:9c:fc:92:62:c9:d6:bf:84:e3:b6:98:4e:20:
         ad:bd:a8:61:f2:c5:a0:6e:56:30:eb:01:64:ff:0f:7f:67:a8:
         05:d1:df:7d:cf:99:5b:b1:ea:6d:00:23:d0:72:06:87:d0:48:
         f7:28:f0:5d:80:7d:98:89:f9:0f:53:f2:4d:de:46:b0:7f:39:
         0b:34:b1:03:8c:04:a7:0d:fc:22:59:c9:58:97:c2:38:b3:6c:
         4b:78:8a:f1:9c:3d:a7:97:0b:c7:c9:0b:3e:34:99:7d:49:21:
         9a:c9:8f:67:c2:95:b0:a1:b7:66:43:c7:8f:59:f2:18:50:a9:
         fd:9f:e9:a0:cd:48:f2:1d:05:dd:ec:96:4c:82:e4:01:6f:ca:
         7b:56:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:21:26 2024 by rpki-client on console-fra.rpki-client.org