Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142111.roa
File:                     AS142111.roa (raw, json)
Hash identifier:          ahjAsnld0YYiXl/WYXTmNM4VMPaz6TpsE0CsIq7fg6M=
Subject key identifier:   8E:97:30:FF:2A:DA:73:27:CD:0C:C7:7A:EC:65:BA:40:A8:8A:6F:A2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3F9CCB9C2D183A3DC95F631268D24E1376C443F2
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142111.roa
Signing time:             Wed 31 Jan 2024 00:00:05 +0000
ROA not before:           Tue 30 Jan 2024 23:55:05 +0000
ROA not after:            Wed 29 Jan 2025 00:00:05 +0000
asID:                     142111
IP address blocks:        89.116.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9c:cb:9c:2d:18:3a:3d:c9:5f:63:12:68:d2:4e:13:76:c4:43:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 30 23:55:05 2024 GMT
            Not After : Jan 29 00:00:05 2025 GMT
        Subject: CN=8E9730FF2ADA7327CD0CC77AEC65BA40A88A6FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:b5:4f:01:eb:e6:1c:95:cf:f3:f5:a5:12:
                    56:10:c0:43:34:f9:51:d8:bb:cd:31:0b:8a:14:e7:
                    b5:57:4a:8f:7c:b5:97:85:b7:56:5b:92:58:36:88:
                    5f:3b:61:5b:69:6b:a6:37:61:dd:4f:95:7d:d9:4e:
                    9e:c7:cd:4e:65:02:d7:dd:e8:b3:d1:80:81:3e:74:
                    c2:e8:04:19:55:9b:d1:ba:78:f8:b8:2e:13:8b:52:
                    33:c9:58:fd:e9:e3:50:9d:58:43:25:f3:70:1f:1c:
                    46:2f:d2:45:c5:f5:ab:a0:a0:a1:b8:09:6a:4d:76:
                    21:a5:ad:ed:cb:a5:3c:b5:4d:4f:ee:10:34:a4:8c:
                    b1:9a:ee:c7:f1:60:04:c3:d1:cc:94:d1:ad:36:25:
                    de:35:9f:e0:6a:bc:e8:d7:dd:05:03:51:0a:4e:65:
                    03:5c:bb:80:fc:6d:54:b5:6e:db:49:21:d7:0b:73:
                    1b:61:ed:5d:59:80:77:4d:55:67:85:bf:2f:2a:f5:
                    5d:f9:d1:51:07:4f:e9:fa:8a:74:57:02:d0:af:1b:
                    18:44:2b:a4:0f:49:30:2e:bc:83:56:bf:37:07:79:
                    3d:84:b4:9b:bb:b9:71:9e:82:15:f2:d7:17:e8:40:
                    a5:c4:52:0c:f0:6e:42:4e:e0:1f:b1:12:1e:af:3d:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:30:FF:2A:DA:73:27:CD:0C:C7:7A:EC:65:BA:40:A8:8A:6F:A2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:a9:06:5c:fc:d1:05:0a:a9:48:c0:07:34:ad:52:28:5d:
         fa:04:3f:9a:c1:36:33:50:64:2d:ba:a5:62:61:ed:14:1b:08:
         7b:ab:64:1c:0a:46:be:9a:3d:e2:67:77:b3:f6:79:72:61:4d:
         ea:ef:18:4f:84:9e:ea:03:cb:85:2b:5f:26:3a:bb:da:57:e8:
         52:e4:e9:57:9b:1d:09:ea:8e:38:9a:12:41:ba:bd:d4:85:a9:
         8b:4a:55:62:53:32:e4:8d:6e:b3:c8:5b:7e:e3:68:4b:6a:a9:
         5f:39:fa:e1:c8:39:27:b5:6b:e4:28:ee:65:b7:84:b6:20:34:
         7e:5e:f7:ba:b4:22:31:89:d0:91:12:b3:5c:0f:60:ae:69:11:
         0d:f7:52:9a:b3:c2:b8:25:d5:7c:d8:e8:f2:fa:fe:92:19:2e:
         79:93:3b:2f:15:2b:d5:f0:ca:75:60:ef:f1:30:35:62:1e:9f:
         96:32:9f:38:60:14:52:95:b9:3c:d3:56:b7:2b:b5:af:98:c3:
         8e:80:fc:75:f3:4e:16:a9:38:ef:e3:58:fe:9c:1f:1a:d6:ec:
         81:88:51:1d:82:70:5e:52:ea:98:61:11:98:57:f8:d5:0f:5e:
         eb:af:bf:37:b0:58:f9:8e:bb:16:97:d7:07:3c:de:6d:be:83:
         59:dc:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org