Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          BpnhljuwdwRDRllaOdkG4FWIlH19H7ekx6gksZSbYEs=
Subject key identifier:   F1:95:5A:43:52:56:8E:C5:2D:A3:FB:B9:01:32:A0:9E:45:6C:3A:99
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       346A9F7D031430532B80A4187D09944101EAB56B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
Signing time:             Mon 05 Aug 2024 00:01:58 +0000
ROA not before:           Sun 04 Aug 2024 23:56:58 +0000
ROA not after:            Mon 04 Aug 2025 00:01:58 +0000
asID:                     142036
IP address blocks:        89.117.1.0/24 maxlen: 24
                          89.117.2.0/24 maxlen: 24
                          89.117.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:9f:7d:03:14:30:53:2b:80:a4:18:7d:09:94:41:01:ea:b5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  4 23:56:58 2024 GMT
            Not After : Aug  4 00:01:58 2025 GMT
        Subject: CN=F1955A4352568EC52DA3FBB90132A09E456C3A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:4a:fa:5b:dd:12:5d:fb:7a:15:e0:d5:f0:
                    f9:e7:85:ed:ef:fa:92:61:04:c2:0a:9a:0f:ff:38:
                    d5:07:3b:65:4c:71:42:b7:d2:89:6f:b1:25:66:25:
                    f3:37:89:00:39:86:e3:4b:7e:84:31:69:94:20:16:
                    db:24:59:36:2a:08:ca:9d:65:bc:fa:70:88:5c:63:
                    50:57:0e:2a:bd:76:d1:09:1e:fd:8a:3a:0d:62:5e:
                    63:1a:bc:f9:f1:19:84:6d:00:8d:9b:52:05:61:15:
                    96:23:50:3a:1d:d1:09:ab:07:bb:f3:7f:fc:cb:25:
                    05:c0:94:fa:39:1f:75:72:f8:e2:1c:54:df:3a:c9:
                    c4:99:af:7b:c6:7c:b0:47:50:9d:0e:24:13:f6:ba:
                    47:88:6a:6e:63:43:00:b1:1e:7d:47:81:85:52:17:
                    19:60:a1:5b:13:16:80:1f:c5:36:ae:fe:c6:c9:ee:
                    cc:b6:5e:d0:57:fd:4a:af:44:fc:87:49:9e:f3:a9:
                    36:ed:d5:72:c1:16:66:a3:0f:b7:67:de:6d:48:a1:
                    05:47:fb:3c:45:00:5e:56:ca:e9:60:5a:ba:60:1d:
                    72:55:1d:cf:ca:b9:be:53:4d:a5:47:a5:4b:1d:4b:
                    a3:ab:7e:b2:1c:67:f9:93:4e:9c:2e:6f:65:43:39:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:95:5A:43:52:56:8E:C5:2D:A3:FB:B9:01:32:A0:9E:45:6C:3A:99
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.1.0-89.117.3.255

    Signature Algorithm: sha256WithRSAEncryption
         76:00:6d:48:0a:70:58:89:a0:ee:0e:08:a2:fa:2c:5f:9b:c5:
         f9:4d:67:17:41:74:99:8c:50:a3:55:ca:dc:a6:79:84:2f:08:
         38:b7:9f:2a:9c:3f:0b:88:14:3f:e6:e9:51:f2:79:db:8d:69:
         38:6b:2f:39:02:e4:5e:e9:81:96:b1:21:f7:90:6e:84:60:a4:
         f1:b9:2b:e2:86:bb:36:16:d0:89:cd:95:39:16:45:a4:c5:82:
         2b:02:24:47:6b:95:67:2f:d3:1e:7a:88:73:1b:b1:94:9f:10:
         01:13:2d:6a:4b:65:86:bc:e7:ae:ba:df:ac:b7:60:95:da:23:
         1a:a3:54:24:45:34:be:39:64:8f:0b:60:e9:50:78:75:9b:e9:
         76:2f:15:1e:34:de:7b:c5:34:3f:96:f0:99:ca:bb:9b:2b:0b:
         f9:a6:f3:d3:68:83:a4:b7:99:1f:f9:db:ba:a5:f9:93:49:08:
         14:34:1c:74:08:69:4a:49:ad:47:65:62:12:85:24:cd:ea:88:
         5e:24:27:47:63:7e:2e:bc:22:45:67:29:c0:31:bd:7d:61:cd:
         2a:ec:50:3a:87:21:b3:72:c0:89:a1:93:f9:98:ac:6d:e8:e9:
         52:23:87:63:7b:05:ca:b2:f4:4c:f8:61:ed:08:53:9c:b8:36:
         7b:95:39:31
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNGqffQMUMFMrgKQYfQmUQQHqtWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA4MDQyMzU2NThaFw0yNTA4MDQwMDAxNThaMDMxMTAvBgNV
BAMTKEYxOTU1QTQzNTI1NjhFQzUyREEzRkJCOTAxMzJBMDlFNDU2QzNBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HUr6W90SXft6FeDV8Pnnhe3v
+pJhBMIKmg//ONUHO2VMcUK30olvsSVmJfM3iQA5huNLfoQxaZQgFtskWTYqCMqd
Zbz6cIhcY1BXDiq9dtEJHv2KOg1iXmMavPnxGYRtAI2bUgVhFZYjUDod0QmrB7vz
f/zLJQXAlPo5H3Vy+OIcVN86ycSZr3vGfLBHUJ0OJBP2ukeIam5jQwCxHn1HgYVS
FxlgoVsTFoAfxTau/sbJ7sy2XtBX/UqvRPyHSZ7zqTbt1XLBFmajD7dn3m1IoQVH
+zxFAF5WyulgWrpgHXJVHc/Kub5TTaVHpUsdS6OrfrIcZ/mTTpwub2VDOVwDAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU8ZVaQ1JWjsUto/u5ATKgnkVsOpkwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE0MjAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAWXUBAwQCWXUAMA0G
CSqGSIb3DQEBCwUAA4IBAQB2AG1ICnBYiaDuDgii+ixfm8X5TWcXQXSZjFCjVcrc
pnmELwg4t58qnD8LiBQ/5ulR8nnbjWk4ay85AuRe6YGWsSH3kG6EYKTxuSvihrs2
FtCJzZU5FkWkxYIrAiRHa5VnL9MeeohzG7GUnxABEy1qS2WGvOeuut+st2CV2iMa
o1QkRTS+OWSPC2DpUHh1m+l2LxUeNN57xTQ/lvCZyrubKwv5pvPTaIOkt5kf+du6
pfmTSQgUNBx0CGlKSa1HZWIShSTN6oheJCdHY34uvCJFZynAMb19Yc0q7FA6hyGz
csCJoZP5mKxt6OlSI4djewXKsvRM+GHtCFOcuDZ7lTkx
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org