Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa
File:                     37372e37352e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          oqwoF3a7cEpdr/eL3I8xx3kpDTyZL1vYWfcXSucSxkI=
Subject key identifier:   D5:A3:74:79:B3:70:3C:E1:F6:CF:C6:F0:5B:72:A8:0C:E9:C6:09:97
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4C9C3A794740A815A65827DA283939CB525A308F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 07 Nov 2023 11:36:31 +0000
ROA not before:           Tue 07 Nov 2023 11:31:31 +0000
ROA not after:            Tue 05 Nov 2024 11:36:31 +0000
asID:                     61317
IP address blocks:        77.75.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9c:3a:79:47:40:a8:15:a6:58:27:da:28:39:39:cb:52:5a:30:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  7 11:31:31 2023 GMT
            Not After : Nov  5 11:36:31 2024 GMT
        Subject: CN=D5A37479B3703CE1F6CFC6F05B72A80CE9C60997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:17:4d:b7:81:66:f8:ce:9b:9c:70:8f:67:
                    1c:e9:74:42:65:83:be:6b:c7:e0:f8:18:30:27:ad:
                    8a:fa:03:77:de:78:77:56:b4:1c:a7:16:9b:33:35:
                    aa:63:3a:6b:26:f9:95:cd:12:d8:4a:e5:5f:af:00:
                    69:71:29:63:73:28:6b:43:73:49:ea:52:66:fd:d6:
                    ec:9a:84:63:06:52:59:8c:61:b1:f2:4e:34:b8:20:
                    ec:49:53:a9:f5:59:cd:f4:b9:81:06:79:0a:44:c6:
                    37:06:32:a2:ce:07:21:a1:27:58:8d:6c:5e:31:df:
                    21:94:43:a5:d2:3e:f5:c0:d1:3d:6a:f5:fd:3e:52:
                    e9:f6:6b:b3:19:db:3f:98:d2:69:47:f0:94:85:cc:
                    43:52:d1:b7:9f:6f:cf:b3:8e:f7:db:54:c0:a0:13:
                    0c:b7:5b:b8:e6:cd:3f:48:5d:00:2b:c2:ba:a4:e3:
                    9d:df:6c:b4:24:ed:e4:2b:4b:08:da:a5:46:0d:97:
                    ff:4f:93:ce:46:47:e6:ef:35:2f:ac:7d:1e:96:6f:
                    1e:d1:f6:09:df:82:83:95:be:1f:a8:49:e3:48:dc:
                    47:87:1b:81:3d:e6:02:a1:68:12:5c:96:b4:d9:86:
                    a4:05:46:bf:0e:03:f6:91:3b:57:40:01:f0:96:e5:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A3:74:79:B3:70:3C:E1:F6:CF:C6:F0:5B:72:A8:0C:E9:C6:09:97
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:a5:30:6b:81:d4:89:b3:8c:04:a9:68:78:32:80:bb:33:
         7a:c7:80:f5:c2:49:e7:be:35:7f:63:07:5e:26:e7:a0:e1:0b:
         b5:46:9c:51:18:be:20:72:54:4b:f7:3f:f3:ac:b6:1c:2b:ae:
         b3:f4:57:67:52:ca:db:e3:d9:07:97:fe:5d:15:e9:b6:6a:ed:
         6f:14:41:bd:04:aa:98:8e:ff:ec:7e:e0:18:2a:1f:33:8b:1a:
         cc:30:93:ca:16:34:6e:c2:fb:76:00:3a:71:58:88:89:2b:2b:
         4f:1e:d6:77:13:09:66:60:a6:d2:f0:b0:62:a9:f8:f6:30:f0:
         30:fa:38:36:2a:fe:d0:b2:12:41:8a:2e:b0:11:71:ba:2a:43:
         7d:78:d7:64:3d:64:b4:7e:0b:24:c6:04:7b:f9:fd:22:cc:b4:
         f7:60:40:d3:64:6f:d7:35:b2:5e:68:ac:01:87:24:db:1d:b9:
         14:64:d4:e5:65:63:1e:b2:8f:7d:73:b4:90:45:81:4a:93:ff:
         ea:3b:c8:59:61:f8:04:5b:fc:a6:1d:e2:13:98:ef:57:53:d5:
         65:71:52:d2:fa:cb:d2:97:e3:9d:9f:09:4a:36:a0:68:ef:0c:
         1f:73:6f:11:45:0a:49:a1:50:8f:a9:a4:a0:7a:e7:37:3c:21:
         76:71:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:50:55 2024 by rpki-client on console-ams.rpki-client.org