Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203538303631.roa
File:                     352e38332e3231352e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier:          WQmBqqd56HMwiO+eQJJXYTD9uzHNJNDNUXHL83t1ZuU=
Subject key identifier:   1E:07:40:4F:0A:F2:44:82:44:C1:0E:F5:30:E0:FD:45:88:B8:CC:D9
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       17FE456ABB9E96B08A5B63EF6B4FE039A1B3E94C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203538303631.roa
Signing time:             Tue 27 Feb 2024 00:53:10 +0000
ROA not before:           Tue 27 Feb 2024 00:48:10 +0000
ROA not after:            Tue 25 Feb 2025 00:53:10 +0000
asID:                     58061
IP address blocks:        5.83.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fe:45:6a:bb:9e:96:b0:8a:5b:63:ef:6b:4f:e0:39:a1:b3:e9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 27 00:48:10 2024 GMT
            Not After : Feb 25 00:53:10 2025 GMT
        Subject: CN=1E07404F0AF2448244C10EF530E0FD4588B8CCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:20:70:d3:8b:69:0b:23:93:46:9e:d4:26:
                    aa:8d:13:b5:89:6c:2d:c6:57:fc:06:4d:76:97:15:
                    b5:a4:80:cc:fd:a8:f4:b5:72:01:cc:06:0f:d3:d2:
                    50:99:24:77:8a:51:70:31:14:51:a4:d0:18:f0:85:
                    42:2e:a4:3c:cd:d3:27:47:a4:ef:fc:87:0c:42:08:
                    60:da:97:20:19:21:75:20:05:0d:b4:ef:78:48:fd:
                    5b:22:52:9d:44:89:46:c4:46:ed:fb:71:15:2c:79:
                    ad:e8:6f:fd:2c:8b:ee:16:af:76:53:b6:5c:c2:f7:
                    13:ca:bc:2a:a9:b4:92:c9:e1:e9:62:cd:19:7a:c2:
                    4c:a0:65:50:9e:11:26:89:a2:4b:91:38:2f:9b:58:
                    46:52:3d:3e:de:9f:cb:81:b6:fd:36:a0:8d:6b:46:
                    85:8a:c1:aa:98:ae:31:2b:eb:5b:20:fe:6b:c2:d2:
                    69:fd:39:d9:33:31:9c:50:52:ef:ab:a4:9f:74:82:
                    77:2c:ec:c3:2e:ab:47:c2:ad:38:c7:7c:c5:c8:cd:
                    27:5e:62:33:c2:77:2d:2f:b3:5a:b5:c6:37:2e:71:
                    0a:b9:2c:db:07:62:58:1b:2a:e1:8d:72:14:35:38:
                    46:12:29:e0:0a:04:fe:8d:c7:5d:8e:39:6a:cb:94:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:40:4F:0A:F2:44:82:44:C1:0E:F5:30:E0:FD:45:88:B8:CC:D9
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203538303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:94:da:d4:4c:d2:ab:29:47:e4:71:81:df:dc:1f:4e:17:
         4d:a9:22:41:3c:49:16:6c:8a:66:5a:b6:82:28:15:fd:c5:e1:
         17:ca:f1:36:5e:43:a3:4e:4c:fa:fe:66:ea:61:a2:ce:f9:d5:
         a4:f5:6d:7d:45:10:b2:87:6f:8c:49:e1:a3:27:ed:f0:0e:06:
         cb:73:a3:25:7b:97:e6:8b:53:3a:86:da:e5:9c:de:2c:b9:d5:
         66:ff:e1:8f:ca:a7:6f:12:58:6f:4a:39:85:80:6b:10:48:c9:
         3a:b0:2a:03:4d:7a:71:e3:7e:3e:5e:7c:7e:ea:f8:5e:c9:13:
         51:01:63:0e:d3:3a:10:cf:de:52:fb:5e:b7:be:84:99:87:ed:
         41:ef:f6:3b:98:9d:17:42:3e:33:54:45:78:b6:ae:12:ca:7d:
         93:ee:2c:e5:5d:4b:55:27:57:38:e1:3a:e7:bf:a5:78:a4:fe:
         40:76:c6:b8:f5:60:41:d0:6a:f7:7b:94:f3:5b:4b:71:eb:e6:
         1b:79:ab:25:fe:74:cd:b0:aa:0b:fa:d3:ce:82:ec:bd:4f:48:
         e2:13:55:73:21:05:32:08:20:ff:70:0d:5c:16:2c:b1:ee:10:
         67:2b:8a:62:0d:12:a4:77:06:41:a6:d2:86:eb:37:84:4e:dc:
         17:24:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:28 2024 by rpki-client on console-fra.rpki-client.org