Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
File:                     352e38332e3139322e302f32302d3230203d3e20323037363435.roa (raw, json)
Hash identifier:          BlF+OXNDT+yyHilh/XDHJTSoK0mysr3jp12LGQEbsZ8=
Subject key identifier:   5C:2E:AD:6E:ED:3A:A3:0F:9B:33:3B:B4:F3:C2:E4:D6:13:80:18:0A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       16F40CEBEA4A1E84C5F983CD71F922F73F1AFBA2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
Signing time:             Thu 09 Nov 2023 16:26:31 +0000
ROA not before:           Thu 09 Nov 2023 16:21:31 +0000
ROA not after:            Thu 07 Nov 2024 16:26:31 +0000
asID:                     207645
IP address blocks:        5.83.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f4:0c:eb:ea:4a:1e:84:c5:f9:83:cd:71:f9:22:f7:3f:1a:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  9 16:21:31 2023 GMT
            Not After : Nov  7 16:26:31 2024 GMT
        Subject: CN=5C2EAD6EED3AA30F9B333BB4F3C2E4D61380180A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:81:fa:a8:f9:be:be:a5:2e:e9:ca:39:b0:
                    75:82:bc:c8:36:61:ce:8f:e2:3e:46:a9:8e:41:56:
                    98:e9:97:1f:12:93:fc:2e:34:32:61:2b:27:23:ec:
                    47:9d:64:70:0c:0a:34:91:ef:c9:d7:e4:55:43:b1:
                    30:6c:51:02:c3:c4:8d:46:f5:ab:a5:e7:07:61:4e:
                    86:16:8e:d6:75:b9:9d:39:09:4d:08:eb:9d:df:ca:
                    96:97:4d:93:e5:b5:87:66:9a:ff:5f:6b:dc:35:bd:
                    d8:d8:48:8f:60:0f:ca:d6:2a:9b:81:9e:bb:a2:a4:
                    66:07:c4:cb:f0:3f:98:58:61:6f:78:66:ff:2f:1b:
                    71:3f:51:c8:e1:7e:b7:d2:05:84:39:32:1c:ed:29:
                    a7:48:ce:c0:3f:81:50:32:be:58:40:a5:2e:0b:4f:
                    bb:bb:51:d2:76:72:06:d2:df:f5:d0:2d:85:83:cc:
                    87:91:00:32:2d:80:55:55:05:03:62:bd:73:1d:50:
                    78:58:db:ad:c6:cc:70:5b:cc:5a:ce:6d:1c:91:40:
                    d4:17:a7:54:30:c3:35:5a:77:c5:c8:3e:a1:63:fb:
                    97:5a:1f:dc:0e:e6:7f:e8:21:9b:a1:7d:5b:87:28:
                    99:32:f5:6a:ed:d8:ea:5a:f9:60:b0:74:b7:57:ab:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2E:AD:6E:ED:3A:A3:0F:9B:33:3B:B4:F3:C2:E4:D6:13:80:18:0A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:6f:3f:f6:5a:a2:2f:c0:14:a9:a3:de:43:14:df:69:36:
         90:ce:fd:c1:68:a2:33:99:fa:56:4e:3b:cf:0c:e2:ec:f3:94:
         bf:0d:2b:c6:44:2b:42:fa:7f:4f:e2:61:42:31:12:b8:ac:b0:
         f8:34:c9:98:e9:ff:1f:cd:77:bf:c9:f8:e9:04:8e:18:ff:27:
         cf:0f:70:ff:32:03:b1:39:cb:8c:a9:69:2b:5d:9f:c8:4a:d9:
         e4:43:51:21:12:ab:00:c5:a3:87:8d:f5:d7:7c:07:52:c0:c7:
         6d:65:89:2e:65:b7:b6:fd:ac:fa:d7:74:00:ec:16:c8:85:c8:
         57:7d:2e:bc:b4:2b:8c:d5:21:ae:35:7f:5a:f7:30:62:f3:dd:
         0b:7e:66:d4:54:06:a0:7f:46:a8:5e:7a:f4:e3:48:58:53:bc:
         02:ec:73:b6:73:a0:d2:db:39:2c:72:bf:10:de:b0:3d:98:66:
         27:b5:ac:fc:4b:6c:e0:51:c5:0e:b8:1b:00:9f:28:50:08:35:
         88:1d:3a:b9:13:63:fb:7a:60:cf:ad:f8:5a:67:81:d5:6e:94:
         0a:03:22:1f:25:43:a2:55:d1:f2:d3:c3:a1:3b:5c:59:d9:a6:
         b9:32:5d:6b:c3:29:96:1b:6c:b0:1d:04:0e:56:2b:3a:cc:d0:
         eb:00:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:22 2024 by rpki-client on console-ams.rpki-client.org