Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa
File:                     AS13122.roa (raw, json)
Hash identifier:          pn+yVs+ioyTXSL4kTbUjeuz3vMGT3Erz3TJbpB6kuNI=
Subject key identifier:   EF:34:14:FB:A6:97:85:8D:03:04:72:95:8A:C7:32:D0:B5:FA:2E:C1
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5B746F4952DB18E34A46D110C389D7D2540C0BD6
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa
Signing time:             Wed 28 Aug 2024 12:05:19 +0000
ROA not before:           Wed 28 Aug 2024 12:00:19 +0000
ROA not after:            Wed 27 Aug 2025 12:05:19 +0000
asID:                     13122
IP address blocks:        86.38.4.0/24 maxlen: 24
                          89.116.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:74:6f:49:52:db:18:e3:4a:46:d1:10:c3:89:d7:d2:54:0c:0b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 28 12:00:19 2024 GMT
            Not After : Aug 27 12:05:19 2025 GMT
        Subject: CN=EF3414FBA697858D030472958AC732D0B5FA2EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:5d:06:7b:57:ce:e9:8c:31:ed:bd:c2:0e:
                    a9:7e:e1:ca:e6:5a:a9:17:04:5a:9c:f5:b6:aa:bb:
                    8a:02:5d:79:2d:ce:b4:87:3c:a1:8a:2b:d4:05:3e:
                    dc:bc:b0:db:0e:f2:89:7b:b0:38:09:61:0d:95:20:
                    aa:3b:6e:4b:3e:14:d7:2f:66:c6:1f:9b:df:39:03:
                    a2:5c:57:1c:bb:39:a5:46:bb:4b:48:23:0d:8c:3d:
                    cc:fd:af:77:57:8a:4d:43:af:1f:8e:94:cb:57:d4:
                    d4:3a:e0:f7:aa:27:21:d8:62:71:60:c1:5e:ab:a3:
                    66:78:6c:2e:e7:d9:f6:26:05:bf:30:d2:b1:f8:1b:
                    d3:01:e9:36:09:16:24:9a:bc:5d:f7:d4:b2:e1:99:
                    1c:8e:57:38:7c:1d:25:78:f8:78:48:23:4e:bf:d6:
                    53:fd:98:3a:e6:9f:df:e1:c3:ba:84:37:e7:55:91:
                    79:53:21:04:2c:33:39:e8:76:12:4b:e9:81:dd:87:
                    28:5c:64:44:75:e1:34:f9:75:34:5a:fd:10:d0:d7:
                    ea:07:39:ae:01:d9:05:76:2b:8f:73:07:d8:96:26:
                    e9:75:47:c1:98:9c:34:d5:64:13:f5:cb:00:6c:d4:
                    e4:54:d9:e5:93:34:e2:62:57:26:40:05:78:38:24:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:14:FB:A6:97:85:8D:03:04:72:95:8A:C7:32:D0:B5:FA:2E:C1
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.4.0/24
                  89.116.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:ae:77:f8:03:b1:11:a4:72:75:7c:53:fc:e3:9a:b6:dc:
         8c:7a:23:c7:03:ee:33:22:57:3b:b8:8b:41:3e:22:6d:55:77:
         0e:62:4b:7d:8a:c9:3f:b2:bd:7f:c3:bc:a2:9e:13:39:fa:78:
         95:65:fb:d1:63:c9:e7:30:6b:0b:1e:9b:37:18:aa:0c:d6:91:
         1c:ae:74:99:1d:df:5d:db:77:7b:b2:e5:14:16:0d:79:00:63:
         05:72:8b:c4:f7:3e:ca:47:c3:fb:7b:9b:02:f1:49:cc:75:fb:
         63:eb:aa:ca:c6:4e:83:02:21:b9:c0:fe:3a:2f:0b:fc:8d:7a:
         b2:81:a7:e6:d8:81:68:fa:5f:2e:48:2d:1e:e4:05:37:95:bb:
         a7:ed:a6:52:c0:d6:76:a3:ac:11:86:38:4b:2c:08:f4:36:5e:
         f0:e8:a2:8b:01:b7:82:ae:62:11:1f:05:05:b2:a4:3d:ea:4e:
         32:7b:61:e0:ee:33:7a:a7:7d:37:fc:b1:00:c7:61:70:7f:f7:
         8c:fd:d5:09:fc:d2:55:61:9b:56:48:e6:cd:e7:d4:d5:15:3d:
         0a:23:6c:f9:ee:d3:de:c3:d4:c6:46:1d:39:74:df:8d:9d:58:
         3a:be:4d:bc:37:dd:b5:0f:4f:0a:ee:ce:cc:10:a1:5f:d7:4e:
         60:b9:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org