Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          M4HbPF5s8CFm6dSAz4Y31SsHwPJGz9mjJqKq1FO2zVE=
Subject key identifier:   0F:15:F7:F0:F8:03:54:FF:E9:14:71:79:21:06:24:22:8A:74:1C:29
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       01DE00FE0BFFBC1497D18EA782DFE6C92FFAE921
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
Signing time:             Wed 25 Oct 2023 16:29:50 +0000
ROA not before:           Wed 25 Oct 2023 16:24:50 +0000
ROA not after:            Wed 23 Oct 2024 16:29:50 +0000
asID:                     142036
IP address blocks:        89.116.182.0/24 maxlen: 24
                          89.117.1.0/24 maxlen: 24
                          89.117.2.0/24 maxlen: 24
                          89.117.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 10:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:de:00:fe:0b:ff:bc:14:97:d1:8e:a7:82:df:e6:c9:2f:fa:e9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 25 16:24:50 2023 GMT
            Not After : Oct 23 16:29:50 2024 GMT
        Subject: CN=0F15F7F0F80354FFE9147179210624228A741C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:b4:dc:d4:ba:4d:8e:63:ff:24:e7:1d:ad:
                    f5:5d:20:dc:64:2c:c1:61:13:de:8c:38:bf:26:d8:
                    50:b0:f8:2d:ad:86:66:5a:4b:c0:b4:66:a7:d8:0c:
                    b8:30:55:44:42:8b:1f:7e:e5:4a:51:ee:89:ed:b9:
                    8d:82:1b:86:14:eb:d8:db:33:d2:ce:7b:eb:7e:2b:
                    f5:07:b4:99:13:43:65:78:55:56:86:33:11:44:39:
                    c1:63:2b:4c:20:dc:ef:7d:c9:48:b4:ad:81:b4:fd:
                    83:81:89:31:1d:6d:47:e5:14:c1:69:28:20:48:0e:
                    84:c7:de:0e:d5:ab:a1:30:7d:d9:ed:5f:6b:78:96:
                    43:1a:64:4a:75:33:c2:82:1a:36:7b:d7:c2:f1:01:
                    b1:8f:15:c7:60:c9:6f:0e:b5:7a:04:56:eb:c1:d6:
                    b2:a2:bc:5f:0d:76:bc:02:58:cb:45:b8:fd:18:9a:
                    ac:b7:aa:e5:38:f3:25:91:82:70:65:d1:21:7d:73:
                    a9:cf:25:6c:ae:65:cd:0a:bb:63:25:8d:0d:d1:ef:
                    96:7e:d3:d8:49:cd:18:1a:b8:5f:43:61:4b:3a:b0:
                    b8:e2:d8:00:9c:89:d9:c2:02:27:9d:8f:9e:57:31:
                    d9:2a:90:ca:c5:42:d1:f2:b2:97:78:ce:7a:73:86:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:15:F7:F0:F8:03:54:FF:E9:14:71:79:21:06:24:22:8A:74:1C:29
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.182.0/24
                  89.117.1.0-89.117.3.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:d5:7c:03:22:ec:b9:73:09:b1:2b:5d:b7:a3:2e:b6:9a:
         45:3d:b6:02:05:46:cc:f9:fc:6c:3f:44:86:5a:b6:21:ca:a5:
         69:9c:58:3b:9a:c8:a7:3b:30:2b:bf:17:8e:dc:8b:9c:f4:73:
         af:f3:b9:43:08:e8:54:03:8d:22:fc:13:c8:57:5b:bc:86:31:
         7c:81:a4:e1:3a:84:9b:27:4c:aa:c6:e9:19:9b:1b:41:10:b3:
         86:25:ac:bf:ca:c1:66:d5:ed:b4:0f:ef:c2:8a:17:49:39:a1:
         c2:fa:31:d2:9e:e5:0b:e2:6c:14:63:dd:c4:1d:67:d9:00:90:
         b7:46:11:c2:f3:79:4e:f3:e0:bf:bb:c6:72:0d:34:46:32:2f:
         c3:84:f2:20:db:df:03:d7:50:8d:5a:01:33:ad:1f:ad:49:74:
         7e:e8:9b:3b:f6:d3:c0:de:5f:5a:c7:70:b7:cb:7a:c9:9b:21:
         85:d8:40:1c:dc:ff:77:3a:5c:4b:26:23:29:05:4e:35:c2:96:
         66:0c:6b:07:92:16:89:1f:1a:54:aa:e5:c9:2b:0c:7f:0b:0f:
         4b:96:db:67:9d:9c:08:06:64:25:71:24:0e:b4:61:c4:48:2d:
         32:39:ec:9b:e4:84:7e:69:c4:fc:db:4f:ea:15:06:f6:9a:37:
         c4:f2:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:16 2024 by rpki-client on console-ams.rpki-client.org