Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313937373337.roa
File:                     352e38332e3232312e302f32342d3234203d3e20313937373337.roa (raw, json)
Hash identifier:          ZgW8q82QdiwZLxZ64zs4LHTOfQuTdAqYXG1PQzGJSOA=
Subject key identifier:   FD:01:C1:23:EE:A4:53:A0:5D:A2:C4:7D:59:CF:71:7D:4D:C9:4C:3C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       39937829A97BA4436569C3CDF187DB0D937FFAEB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313937373337.roa
Signing time:             Tue 14 May 2024 06:14:52 +0000
ROA not before:           Tue 14 May 2024 06:09:52 +0000
ROA not after:            Tue 13 May 2025 06:14:52 +0000
asID:                     197737
IP address blocks:        5.83.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:93:78:29:a9:7b:a4:43:65:69:c3:cd:f1:87:db:0d:93:7f:fa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 14 06:09:52 2024 GMT
            Not After : May 13 06:14:52 2025 GMT
        Subject: CN=FD01C123EEA453A05DA2C47D59CF717D4DC94C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:3b:6b:76:63:fe:ad:44:eb:98:1b:ab:91:
                    68:ae:3d:62:00:7d:ac:91:ec:e8:00:6f:50:b2:6f:
                    41:e3:c7:2a:84:23:94:d8:87:f1:50:7b:f8:83:1f:
                    1a:91:28:97:1a:83:01:4e:09:1d:ed:fc:79:62:27:
                    9c:bf:75:ef:b4:57:80:5e:b8:a3:46:0e:eb:de:8e:
                    61:15:c8:2b:bd:08:9b:09:ae:ab:36:28:a8:99:2a:
                    bd:3f:7e:d9:5b:67:8f:b8:d8:30:ae:93:af:4a:12:
                    8b:3c:7c:ce:c2:f5:8f:1b:81:f2:56:ed:62:02:e8:
                    1c:ab:d5:af:ce:e4:24:5f:27:3e:b8:96:7a:01:e3:
                    8e:fe:a0:3d:cc:8b:51:58:6e:bb:1d:10:2f:9d:90:
                    50:5f:ed:0d:6a:a7:b1:b5:d2:cd:e1:c0:8a:09:f7:
                    2a:85:6b:47:51:14:aa:a9:ec:0b:07:f7:05:50:02:
                    73:da:c7:bf:5e:3b:30:86:31:18:6e:00:cd:1d:49:
                    eb:10:36:8e:59:5c:8f:25:77:31:be:97:e1:81:d8:
                    62:79:8e:ff:d5:02:18:57:c3:57:2c:65:63:d0:29:
                    0b:e6:a2:48:96:24:33:08:64:33:65:e4:c3:c8:ef:
                    84:b2:64:4f:03:c0:41:be:85:49:a9:44:6b:c6:b5:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:01:C1:23:EE:A4:53:A0:5D:A2:C4:7D:59:CF:71:7D:4D:C9:4C:3C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313937373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:79:93:92:4c:c6:b1:00:fb:a2:85:1a:4e:0f:71:69:f8:
         07:da:7f:93:77:ce:6f:7e:60:c8:af:2a:d4:e1:93:36:a4:5b:
         d6:75:3e:71:a7:e3:57:0f:c2:7c:5f:38:b4:3d:39:37:cc:2d:
         cd:15:33:8d:54:72:27:22:8f:30:fc:23:f6:9c:83:c9:c9:a2:
         11:93:a2:e3:49:dd:fe:a8:77:0b:e5:f4:83:f3:b4:f3:a1:03:
         4d:88:34:54:82:ec:7d:8c:f2:21:6f:a2:96:41:81:65:4f:97:
         19:bc:7f:6e:d3:1c:b5:75:87:91:9d:55:f9:e5:9b:91:95:89:
         82:28:3a:15:1c:e7:3b:95:4d:88:22:a5:2e:67:86:f9:90:20:
         c0:b2:4a:63:17:a1:53:a7:9f:f8:5c:a9:49:27:14:e9:b0:a0:
         a6:17:b9:d1:80:c7:84:39:9a:38:fa:39:8f:17:ac:c2:35:c6:
         27:d2:cf:46:67:c0:81:23:38:1d:9b:6d:cd:02:22:3e:1c:a5:
         75:7f:1e:6d:38:7d:66:ee:c8:d5:c6:c7:d6:3d:51:89:76:ad:
         b7:a8:85:e7:fb:a3:91:d1:a1:3b:62:7e:8b:58:69:5b:48:96:
         0c:5a:59:79:17:f2:3b:c0:2c:27:fe:00:5a:d1:c0:d1:4c:1d:
         31:ac:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:22 2024 by rpki-client on console-ams.rpki-client.org