Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20383334.roa
File:                     352e38332e3232322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          HhtWrs4KX5u3fCpDtMPBuAU/66eU/8ew0YzVn0LgPeM=
Subject key identifier:   4A:A7:28:AA:23:C7:F1:35:7F:79:2D:F7:92:24:02:FF:73:6D:EB:D9
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       0D958EC4D67BD91230EBE94F034C743FF96111E4
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 Apr 2024 00:02:30 +0000
ROA not before:           Thu 11 Apr 2024 23:57:30 +0000
ROA not after:            Fri 11 Apr 2025 00:02:30 +0000
asID:                     834
IP address blocks:        5.83.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:8e:c4:d6:7b:d9:12:30:eb:e9:4f:03:4c:74:3f:f9:61:11:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 11 23:57:30 2024 GMT
            Not After : Apr 11 00:02:30 2025 GMT
        Subject: CN=4AA728AA23C7F1357F792DF7922402FF736DEBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:5a:e8:56:85:63:6b:d3:df:86:32:ce:58:
                    5d:66:8e:d4:a3:d0:c2:5e:0d:ce:a0:ff:ce:b0:4a:
                    3f:0e:26:de:90:b7:bb:23:ae:d2:87:2d:cb:20:c9:
                    b5:aa:14:98:57:2c:4c:61:ad:74:60:20:80:5c:f8:
                    9d:20:02:b8:8a:b4:04:79:a1:cb:11:1e:82:58:dc:
                    8e:32:5e:ca:29:37:59:42:25:5d:92:c4:09:3b:71:
                    72:85:36:47:6d:0b:69:28:19:09:d3:24:58:ff:42:
                    97:b8:18:5e:51:b7:be:b4:b8:b4:4b:86:17:ed:75:
                    35:28:96:4a:47:dc:1e:b7:40:76:df:aa:5b:ae:e7:
                    97:22:7b:a4:0d:0e:93:80:a4:63:f4:74:6f:10:23:
                    24:95:d0:cd:a3:27:2e:2c:6b:8f:5b:b1:42:3a:c3:
                    96:2b:84:50:b7:c7:71:48:8a:1a:9c:e3:2e:44:16:
                    fc:fb:e8:0b:e8:ba:82:2a:89:5c:84:a3:51:11:f2:
                    8e:2c:ce:6f:88:46:3e:5e:70:28:00:51:a9:32:e7:
                    c3:0a:bf:af:25:e9:74:fe:02:60:56:3b:d2:31:45:
                    4f:bb:b1:ed:7a:d2:5d:eb:23:33:72:fd:c9:7f:a7:
                    37:6a:cc:9c:7b:a0:c1:46:de:ef:3f:1a:e9:c5:ab:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A7:28:AA:23:C7:F1:35:7F:79:2D:F7:92:24:02:FF:73:6D:EB:D9
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:85:53:6b:a0:aa:40:43:d2:b5:b3:25:28:3d:b4:ba:69:
         92:ef:88:e9:1d:59:8d:7b:64:01:d1:14:27:28:d2:a3:ce:d1:
         d3:cf:09:3c:5f:c3:27:ff:f0:61:ae:a8:6d:73:5c:59:3e:52:
         dd:60:76:0c:e1:ed:91:3f:80:8d:d2:e1:69:87:33:fc:af:3c:
         7b:a3:91:bc:aa:e0:fd:36:9f:de:c7:ee:48:53:1f:50:d1:c4:
         a7:5c:4a:60:da:6e:e5:5e:29:07:3c:89:18:06:af:82:19:28:
         72:56:76:af:61:3f:a6:cc:e6:b0:d8:56:10:28:a3:78:5c:76:
         fd:0e:88:50:e3:40:a4:3e:33:4c:b9:55:ed:31:ef:e3:97:3c:
         99:19:38:ef:e3:15:5e:c4:4b:f1:c5:e4:5a:8a:bf:eb:8b:66:
         4f:fe:1f:a3:a2:b8:c9:66:ae:d2:97:1e:8c:95:e7:07:fb:e3:
         6c:f6:b7:cf:07:e8:ec:59:1d:11:68:f7:a1:52:3e:09:ba:a8:
         19:11:a1:87:47:93:81:50:19:ab:a4:1c:ba:20:b0:21:1d:ef:
         eb:5d:c0:40:d5:bb:f5:40:5c:c8:4a:0d:27:3c:8a:11:af:2f:
         7a:d0:98:84:e2:4e:fd:5d:2f:8c:2d:9a:c5:b7:49:59:bc:43:
         37:92:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:10:51 2024 by rpki-client on console-ams.rpki-client.org