Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          VoBKKDPlLXDgWr2jIF/uIFJxWpztVA4BYHRxX/0SOds=
Subject key identifier:   A7:ED:7C:C9:2D:BF:DB:FB:ED:58:C6:E4:66:E9:72:AF:D1:8E:B4:EC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       68EA91E65FF12F36FF94D9A43DD17F048CB7FD66
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa
Signing time:             Fri 15 Mar 2024 20:05:14 +0000
ROA not before:           Fri 15 Mar 2024 20:00:14 +0000
ROA not after:            Fri 14 Mar 2025 20:05:14 +0000
asID:                     16276
IP address blocks:        86.38.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:91:e6:5f:f1:2f:36:ff:94:d9:a4:3d:d1:7f:04:8c:b7:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 15 20:00:14 2024 GMT
            Not After : Mar 14 20:05:14 2025 GMT
        Subject: CN=A7ED7CC92DBFDBFBED58C6E466E972AFD18EB4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:0d:67:9e:38:98:7a:b5:61:f2:2d:c5:68:
                    d2:d9:7b:37:86:10:f6:e3:59:12:60:ef:80:1b:57:
                    4e:20:55:d7:c1:78:8e:33:be:5b:21:35:fe:d6:7b:
                    20:59:18:8e:2f:b8:47:52:2f:53:fa:0c:b4:08:8b:
                    3f:a9:15:b5:e1:02:55:f1:cb:ed:46:b5:6a:e2:ea:
                    04:cb:09:a1:a1:a7:83:34:61:74:d2:8d:5b:28:34:
                    0a:5f:37:9d:ea:25:63:03:c4:ff:5a:42:9b:27:e4:
                    d7:98:11:c1:5a:6d:de:91:6b:25:20:e6:2c:77:ad:
                    9d:b0:dd:e8:68:e2:ea:f6:d2:70:22:e9:05:7e:de:
                    69:39:c5:86:4f:f6:c0:dc:b6:1f:56:79:7e:4a:15:
                    4c:2d:fa:a6:89:f7:aa:32:05:6c:5c:bc:e5:78:ef:
                    d5:41:6a:19:50:bf:34:96:9e:46:d2:c1:e2:14:93:
                    3d:05:b8:85:94:2e:9f:42:46:59:72:f7:9d:b6:ad:
                    41:04:50:f0:d4:1a:38:c5:e9:3a:ff:a1:b2:94:5a:
                    ba:ae:35:77:4e:5a:1c:fd:6e:f8:dd:3a:50:42:a5:
                    c2:b4:9a:e2:e4:5a:6b:9d:af:46:b9:79:c6:b9:2d:
                    17:8c:7a:69:37:6b:33:22:8a:8a:fa:2f:a7:e1:94:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:7C:C9:2D:BF:DB:FB:ED:58:C6:E4:66:E9:72:AF:D1:8E:B4:EC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:bf:8d:b9:0f:63:34:53:c4:74:e0:8e:5b:80:17:1e:52:
         8b:8a:03:ab:7d:29:0a:1c:ed:5a:cb:b3:37:46:4f:9d:72:0d:
         13:f1:15:24:04:8b:99:6b:1e:81:44:53:64:a9:fe:ee:87:41:
         dd:26:48:af:a1:cd:9b:cb:03:18:11:f0:8e:3d:15:59:a5:ea:
         5a:8d:20:8c:5e:57:77:22:99:95:13:9c:1a:4e:39:e5:b2:d4:
         42:3a:f0:a6:a0:05:be:44:99:c0:9a:2a:c3:a7:87:96:fa:9b:
         01:16:15:eb:e8:a3:f5:08:09:8d:72:90:2a:4b:45:cb:41:08:
         41:fd:5c:18:9b:93:a9:cd:51:ba:cd:ac:2c:37:01:91:45:00:
         2a:01:85:1c:28:a6:9a:b5:0c:c3:d1:f2:fd:88:8a:84:3d:80:
         55:26:97:e0:18:71:56:d7:c0:96:e0:92:24:e1:0d:36:bb:04:
         5c:59:f2:7b:9f:c7:53:cd:c2:bd:31:60:26:3d:bb:89:54:45:
         e9:4b:10:ba:40:e8:01:1c:6b:2f:b8:2b:1d:ee:aa:8b:c0:73:
         22:2b:59:ca:65:dd:c0:4f:e5:62:d4:b2:ff:2d:5c:90:a5:d0:
         bb:31:56:70:a4:4c:c8:a4:95:46:3e:3c:55:4e:08:fd:fd:42:
         34:38:f4:9b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUaOqR5l/xLzb/lNmkPdF/BIy3/WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDAzMTUyMDAwMTRaFw0yNTAzMTQyMDA1MTRaMDMxMTAvBgNV
BAMTKEE3RUQ3Q0M5MkRCRkRCRkJFRDU4QzZFNDY2RTk3MkFGRDE4RUI0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkQ1nnjiYerVh8i3FaNLZezeG
EPbjWRJg74AbV04gVdfBeI4zvlshNf7WeyBZGI4vuEdSL1P6DLQIiz+pFbXhAlXx
y+1GtWri6gTLCaGhp4M0YXTSjVsoNApfN53qJWMDxP9aQpsn5NeYEcFabd6RayUg
5ix3rZ2w3eho4ur20nAi6QV+3mk5xYZP9sDcth9WeX5KFUwt+qaJ96oyBWxcvOV4
79VBahlQvzSWnkbSweIUkz0FuIWULp9CRlly9522rUEEUPDUGjjF6Tr/obKUWrqu
NXdOWhz9bvjdOlBCpcK0muLkWmudr0a5eca5LReMemk3azMiior6L6fhlCbvAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUp+18yS2/2/vtWMbkZulyr9GOtOwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAViacMA0GCSqGSIb3DQEB
CwUAA4IBAQCTy7+NuQ9jNFPEdOCOW4AXHlKLigOrfSkKHO1ay7M3Rk+dcg0T8RUk
BIuZax6BRFNkqf7uh0HdJkivoc2bywMYEfCOPRVZpepajSCMXld3IpmVE5waTjnl
stRCOvCmoAW+RJnAmirDp4eW+psBFhXr6KP1CAmNcpAqS0XLQQhB/VwYm5OpzVG6
zawsNwGRRQAqAYUcKKaatQzD0fL9iIqEPYBVJpfgGHFW18CW4JIk4Q02uwRcWfJ7
n8dTzcK9MWAmPbuJVEXpSxC6QOgBHGsvuCsd7qqLwHMiK1nKZd3AT+Vi1LL/LVyQ
pdC7MVZwpEzIpJVGPjxVTgj9/UI0OPSb
-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org