Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS133296.roa
File:                     AS133296.roa (raw, json)
Hash identifier:          LM/1e16yv26u3a+7pEB5S4EhbfQh1ZMFATUwxXy08jo=
Subject key identifier:   DA:69:C1:AF:B7:57:1E:1C:9A:8A:3B:D9:6C:1B:03:5C:C4:1F:ED:70
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0F1BBEA1FB3DBE5CE5B902AFBC14BB07C1B2AEED
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS133296.roa
Signing time:             Wed 30 Oct 2024 22:43:26 +0000
ROA not before:           Wed 30 Oct 2024 22:38:26 +0000
ROA not after:            Wed 29 Oct 2025 22:43:26 +0000
asID:                     133296
IP address blocks:        89.117.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1b:be:a1:fb:3d:be:5c:e5:b9:02:af:bc:14:bb:07:c1:b2:ae:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 30 22:38:26 2024 GMT
            Not After : Oct 29 22:43:26 2025 GMT
        Subject: CN=DA69C1AFB7571E1C9A8A3BD96C1B035CC41FED70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:78:fe:70:be:da:94:2c:09:eb:89:4a:6b:66:
                    92:d5:25:75:fd:2f:77:76:98:e4:60:5b:8b:83:21:
                    ac:0a:a6:35:92:f8:c9:91:91:56:4c:5b:bb:4a:df:
                    5d:31:aa:bb:e7:12:b9:10:a3:eb:6a:1b:08:31:0f:
                    71:4c:a4:c2:2b:5f:c6:cc:93:18:79:9e:3f:f9:e4:
                    fd:75:e2:49:e3:8b:94:7c:bb:4c:2f:0e:95:ac:6a:
                    4a:cb:98:28:78:21:fe:ad:80:96:d7:23:0b:bd:42:
                    58:66:47:20:a0:c4:cc:66:6f:d3:b4:67:86:a6:f8:
                    ce:58:b6:ea:ec:e4:0b:a6:33:46:e7:c8:07:35:dc:
                    cc:1e:3e:06:1e:8f:47:c3:3d:2b:92:ed:fd:ca:be:
                    b3:60:81:c2:ac:bc:79:e1:71:6b:3b:55:01:02:ec:
                    a0:9b:79:6f:3e:d0:23:d7:9a:ff:1f:bf:ab:43:38:
                    66:95:a7:fb:0e:3c:6d:08:6e:ad:52:26:7f:08:30:
                    86:41:11:7b:70:6f:94:b4:f1:50:fb:79:d4:40:80:
                    8e:56:1a:5c:a2:68:d2:5b:60:11:97:32:a1:cf:9b:
                    eb:65:c7:38:b9:3a:38:85:6b:dd:55:82:65:f9:a7:
                    01:45:97:48:c1:3c:7e:9e:58:b4:c2:6b:53:75:f7:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:C1:AF:B7:57:1E:1C:9A:8A:3B:D9:6C:1B:03:5C:C4:1F:ED:70
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS133296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:7b:79:da:90:3f:81:19:05:54:e6:33:10:d3:6f:01:1d:
         38:ff:ae:97:c1:6a:22:2f:18:3a:81:75:22:fc:04:35:ce:81:
         88:67:2e:c0:21:5f:b0:56:3b:d6:bd:51:2a:0c:e3:43:25:26:
         62:3d:e2:85:41:1f:35:35:86:f4:be:4e:07:5f:00:67:7c:4b:
         d2:73:e6:6f:24:1f:15:db:d7:bf:41:81:d5:0a:49:29:2d:95:
         f9:72:ec:e4:44:d7:04:7b:49:40:a1:6b:e2:1e:f8:36:25:66:
         f8:cf:cf:f0:ee:03:51:7f:d3:48:0f:62:99:ec:c3:8d:a8:fd:
         14:25:44:64:48:2b:30:9e:26:a4:8e:68:eb:4a:92:9e:5b:57:
         56:51:2f:b1:76:bc:6a:cb:cc:ec:96:8a:7a:db:56:40:3a:a9:
         9f:9b:28:e1:29:66:c5:e5:00:b7:b4:0c:eb:7d:70:d1:83:d4:
         38:42:32:8e:b6:f4:11:0d:a9:ac:82:69:bf:d3:b2:13:c5:30:
         87:33:9e:fc:41:51:f4:88:94:41:8d:d6:64:e8:60:dc:5b:45:
         28:5f:10:fd:d7:5c:ca:70:94:d0:f0:5d:ea:88:3f:53:ac:ad:
         4b:26:8b:6a:fb:f7:f1:05:15:c3:b6:46:98:e0:8e:eb:33:eb:
         ec:d8:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:56:51 2024 by rpki-client on console-fra.rpki-client.org