Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa
File:                     AS197685.roa (raw, json)
Hash identifier:          7jpha0UPlpFgxawu4OPNY6fmWLFeH8EOz2tUYpEY4xk=
Subject key identifier:   7C:6F:0C:19:93:C6:34:58:1A:59:AE:9A:79:98:49:21:74:2D:C3:EE
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       58D141CFE23002D6CE994262E94FCAB7DA2C7032
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa
Signing time:             Mon 24 Jun 2024 10:05:18 +0000
ROA not before:           Mon 24 Jun 2024 10:00:18 +0000
ROA not after:            Mon 23 Jun 2025 10:05:18 +0000
asID:                     197685
IP address blocks:        89.116.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d1:41:cf:e2:30:02:d6:ce:99:42:62:e9:4f:ca:b7:da:2c:70:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 24 10:00:18 2024 GMT
            Not After : Jun 23 10:05:18 2025 GMT
        Subject: CN=7C6F0C1993C634581A59AE9A79984921742DC3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:05:30:ca:5a:b0:c9:ad:bf:11:3f:b4:e2:
                    b6:0d:c7:e1:71:ea:e7:e1:7c:dd:1a:da:fa:b4:ba:
                    8b:ab:6e:c3:bd:c8:a6:3b:58:3c:71:c6:49:bb:ff:
                    47:81:68:c0:01:a0:00:00:23:0e:2b:81:80:36:36:
                    d8:89:69:a9:97:a5:91:ed:63:1a:fc:40:07:0b:72:
                    34:08:c4:a3:d6:41:4c:46:8a:80:da:2a:06:70:5d:
                    e5:4a:11:d2:72:2a:22:72:43:52:a3:88:29:1b:ea:
                    dd:89:22:5b:7b:a6:f2:e6:6d:2b:66:e4:fc:d8:d8:
                    bb:98:e9:13:12:b9:cd:ec:08:9d:d5:ff:c8:6e:fb:
                    f8:5d:cb:bf:6d:0b:04:8b:3d:1a:5f:b0:c4:e9:de:
                    9c:fa:31:1d:5d:fa:46:71:a8:f9:2f:15:c1:32:be:
                    dc:e3:07:8c:90:f0:84:25:f4:07:3e:36:e1:42:a6:
                    9e:53:36:e0:3f:1e:f0:dd:24:7a:dc:b6:5c:d6:6c:
                    c4:d4:3e:a2:b9:dc:0e:62:37:93:cc:97:c8:27:a8:
                    66:8e:6d:56:1c:ea:39:66:32:41:c6:36:32:e2:58:
                    a0:5b:0e:42:00:3f:67:bc:6c:a7:9a:62:19:d1:34:
                    9d:48:cd:57:df:91:cd:dd:95:f3:32:16:2d:a7:73:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:0C:19:93:C6:34:58:1A:59:AE:9A:79:98:49:21:74:2D:C3:EE
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:1e:7c:3a:b5:69:5a:ed:70:fc:24:6a:92:d7:6b:58:eb:
         11:42:62:6b:7e:45:62:64:ab:94:ae:09:1b:f8:4f:ae:e8:b6:
         b8:92:f5:46:f2:c5:36:29:0e:75:d5:dd:80:11:00:fc:6f:b5:
         05:9f:69:ee:ca:7b:96:4b:e9:80:37:4f:2b:3c:0b:bf:1a:5c:
         dd:77:b6:cc:e6:cd:6b:0f:dd:49:28:50:cc:8e:e7:af:c5:34:
         db:d0:dd:6c:34:91:51:59:3b:a6:15:11:1b:c3:e7:be:bc:6e:
         df:a8:bc:a5:b1:02:9f:a4:e7:2f:90:4a:66:3b:8d:63:ed:13:
         3b:70:6b:2c:1c:f4:48:63:44:39:08:7e:a3:50:30:03:db:05:
         d5:5c:e5:ab:68:c5:1a:4c:40:73:51:52:a1:e5:1a:27:92:4a:
         be:e4:29:86:f4:c7:09:67:b5:f9:06:75:be:a0:5b:ed:f5:29:
         b2:aa:2c:60:d9:4b:a0:3b:bd:6e:cc:7e:ea:20:f6:79:9b:2f:
         23:ba:68:9d:1b:cf:6c:fb:bd:03:07:5a:90:27:df:c1:d9:5f:
         68:3b:91:2c:c7:6f:4e:3a:b6:c7:9a:7a:8e:eb:a7:60:4c:c4:
         1a:7b:ac:88:f0:93:84:43:a4:a7:3d:e8:f4:98:9c:06:90:7c:
         be:a3:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org