Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          NIZTfELNzxNCMoPmEsmzO0UzUD+MjztYcW+Dg1W51aY=
Subject key identifier:   DF:A6:6B:BC:D5:EF:C7:1B:71:48:18:A1:09:D3:79:EE:7B:24:4F:4B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       57C37C81FCE2544755C43E40D9004C438D87FE9B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 Apr 2024 06:55:15 +0000
ROA not before:           Mon 15 Apr 2024 06:50:15 +0000
ROA not after:            Mon 14 Apr 2025 06:55:15 +0000
asID:                     834
IP address blocks:        77.75.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:7c:81:fc:e2:54:47:55:c4:3e:40:d9:00:4c:43:8d:87:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 15 06:50:15 2024 GMT
            Not After : Apr 14 06:55:15 2025 GMT
        Subject: CN=DFA66BBCD5EFC71B714818A109D379EE7B244F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:81:34:16:aa:5c:df:c5:41:d3:95:8b:83:1a:
                    e5:35:62:30:5a:35:1b:ea:8a:2c:73:6e:ef:8e:a6:
                    ef:4b:4a:2d:62:d1:55:60:c6:df:d7:fd:0d:7d:fa:
                    db:55:e3:3b:ca:ee:ae:7f:a3:90:3a:d5:b7:7f:31:
                    b2:70:0f:dd:83:22:93:f9:5e:be:67:b8:9d:19:13:
                    16:27:b9:24:76:08:45:ec:14:6b:94:09:af:5d:2b:
                    45:6e:5c:ff:47:13:c8:90:7f:52:55:58:cc:5e:66:
                    02:fd:bb:b3:db:1c:c3:62:29:d0:5d:ea:0e:25:c8:
                    e3:db:bc:0f:86:25:76:39:d2:a5:ff:b2:3c:69:ee:
                    e9:be:ea:e7:14:b4:73:b9:f6:04:7c:48:1c:37:88:
                    e3:70:fc:1e:18:da:01:b1:81:f9:e2:d7:7d:85:a9:
                    fe:10:d5:4e:8d:62:24:fb:70:ae:07:34:d2:2c:e9:
                    bf:9a:a2:80:9d:c1:35:bc:26:dc:4a:8f:b7:8f:2b:
                    e4:14:ff:61:20:21:47:2d:20:21:c3:e9:14:35:f2:
                    a0:9a:bf:a4:a1:f9:bf:37:60:b5:1d:dd:17:9f:f4:
                    ac:41:66:25:9c:cf:ab:ee:94:46:74:4a:b7:8d:48:
                    ef:d3:fa:16:6d:5a:98:2d:d4:0e:46:66:22:3f:89:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:6B:BC:D5:EF:C7:1B:71:48:18:A1:09:D3:79:EE:7B:24:4F:4B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:f7:75:37:06:db:c5:2e:05:49:c9:85:16:0d:ae:17:59:
         0d:f2:65:58:96:06:eb:be:88:38:29:65:11:9b:fa:d5:e4:23:
         0c:a8:63:08:ab:87:db:19:f6:2b:c9:c1:54:19:d7:87:7a:02:
         60:75:51:57:4f:0d:e0:9c:a3:3c:a8:b9:02:a6:27:0c:f3:ce:
         e0:c1:a0:5c:4d:c7:ec:8e:87:79:fb:2b:1d:47:ff:8a:60:38:
         7e:f5:82:c3:3c:11:2c:54:5c:ed:d2:f0:6b:32:e3:31:77:95:
         9d:0c:58:f9:3e:41:db:3b:d9:f6:31:f6:0e:59:ca:91:5b:c0:
         2d:19:e7:62:09:71:76:63:83:8a:8c:96:20:e7:d8:4e:e1:77:
         31:57:f6:24:19:bb:a0:29:a2:ca:58:b6:40:fe:78:76:bf:ae:
         0b:7a:9f:58:b0:30:c1:0f:a5:f6:5d:20:33:91:06:31:85:96:
         2c:a5:f5:87:a6:bb:46:c2:2b:86:66:98:4b:ce:24:3f:65:4f:
         71:7a:5f:9d:63:7d:c2:fa:12:03:3c:44:93:cc:0e:b9:5d:6e:
         f7:06:e6:6c:ce:d3:fc:5c:06:8e:f2:a4:9e:26:b2:e8:a7:c3:
         48:3d:5a:df:c2:03:99:54:be:d9:bc:9a:e8:20:eb:c4:14:12:
         f6:9f:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:02 2024 by rpki-client on console-fra.rpki-client.org