Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa
File:                     AS142561.roa (raw, json)
Hash identifier:          8wYxlz1YzYH6zmlFEW26YufTJ7+1KJ3kwq6l08NlYXI=
Subject key identifier:   56:38:48:04:16:17:13:57:33:67:B2:39:5B:42:E7:FB:D7:B4:AA:26
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       020F6235F085D28AB612FFD6C5FE511DE6C9A0A9
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa
Signing time:             Thu 12 Sep 2024 07:54:34 +0000
ROA not before:           Thu 12 Sep 2024 07:49:34 +0000
ROA not after:            Thu 11 Sep 2025 07:54:34 +0000
asID:                     142561
IP address blocks:        89.116.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:62:35:f0:85:d2:8a:b6:12:ff:d6:c5:fe:51:1d:e6:c9:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 12 07:49:34 2024 GMT
            Not After : Sep 11 07:54:34 2025 GMT
        Subject: CN=56384804161713573367B2395B42E7FBD7B4AA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:9c:d7:f1:e3:91:e2:7e:ab:8e:98:21:4c:
                    41:07:7f:e6:78:11:9c:8f:94:f6:bd:ed:a3:ba:94:
                    52:1a:ed:e0:ff:c9:7d:10:1d:f8:92:4f:2e:d7:3d:
                    99:1f:78:bd:5d:39:1b:c8:e7:62:1c:a7:0c:89:c9:
                    22:2e:6b:87:69:0a:d8:af:39:2d:66:93:35:13:10:
                    fe:9e:9e:ab:3d:d2:86:10:e5:d2:e9:89:dd:84:88:
                    e8:40:89:a1:77:06:bc:ae:c6:86:ec:b5:1a:6f:42:
                    33:41:f7:df:b9:64:0a:ac:f7:cb:2c:2c:6f:3b:2d:
                    c6:71:21:16:ac:8c:19:4b:85:bd:28:9e:59:e8:c6:
                    35:b9:91:b7:7c:2d:7d:7a:9a:8e:58:0a:02:9b:28:
                    dc:c8:d0:ea:17:bb:95:70:a5:3a:3e:44:3d:fd:8c:
                    1a:17:4b:6e:64:b8:df:88:1c:64:c4:95:ea:c8:d8:
                    77:0e:dd:38:37:d7:18:09:05:a1:41:dc:50:88:eb:
                    07:2a:6b:87:77:88:3a:33:57:d0:e2:ed:e4:eb:36:
                    8c:36:7f:6a:3a:74:f5:a5:47:73:98:61:db:0d:8f:
                    1c:5b:ff:07:35:7c:d4:66:32:59:e6:af:76:47:50:
                    b1:b9:1f:ac:e6:e9:68:25:ea:4f:e5:43:d9:f8:ad:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:48:04:16:17:13:57:33:67:B2:39:5B:42:E7:FB:D7:B4:AA:26
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:58:c0:3f:bd:c7:13:ad:6c:19:c3:82:72:95:3d:2b:4d:86:
         00:3c:50:ab:fa:50:9e:6f:f9:18:7a:0e:9a:30:5d:26:bb:c0:
         79:7b:c8:b9:60:b9:f6:e9:d3:b3:50:a1:10:c2:42:ec:04:36:
         d7:03:e0:30:62:d1:1b:71:c4:0e:43:45:77:7f:dc:04:e6:62:
         c9:a6:89:dd:4e:87:8d:9b:e4:e5:f4:70:1e:f9:a0:2e:f3:5f:
         a7:20:d4:c2:f1:66:01:da:17:f2:a8:29:bd:c4:44:6e:d8:27:
         87:e8:22:7f:57:15:54:05:3c:4b:b7:54:d5:4f:0a:07:0d:f9:
         33:f1:3a:c9:99:be:e2:e6:c1:64:e1:ba:03:5e:27:7e:5c:6b:
         32:74:2f:fa:95:ea:37:8c:fe:7d:da:77:ac:97:8e:6c:50:d9:
         34:7c:82:df:b8:a9:88:89:68:03:b0:42:a9:e8:c3:90:50:58:
         e8:4e:10:02:64:f3:30:41:77:03:5b:15:5f:43:9f:7e:18:ff:
         de:df:4f:20:37:2a:2b:8b:8e:cb:9b:84:7e:d2:13:e7:45:0b:
         41:dd:99:44:4b:52:28:70:50:26:0d:0d:15:1f:d5:23:80:89:
         a7:06:21:2c:6c:b0:d1:0a:51:0a:ee:82:bf:1a:bd:f4:1b:26:
         83:b8:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:01 2024 by rpki-client on console-fra.rpki-client.org