Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa
File:                     AS197685.roa (raw, json)
Hash identifier:          46KBALDQuSWIYCSzBRScrwbKGC+9iFnx5Sja4r/KSZw=
Subject key identifier:   C8:E7:2A:11:76:C5:D6:16:BC:B2:2B:11:16:F3:39:E6:53:B5:5E:73
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6887AE44EC7B4B2261DAB3823535F07A37CEF7D4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa
Signing time:             Mon 24 Jul 2023 10:03:44 +0000
ROA not before:           Mon 24 Jul 2023 09:58:44 +0000
ROA not after:            Mon 22 Jul 2024 10:03:44 +0000
asID:                     197685
IP address blocks:        89.116.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:87:ae:44:ec:7b:4b:22:61:da:b3:82:35:35:f0:7a:37:ce:f7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 24 09:58:44 2023 GMT
            Not After : Jul 22 10:03:44 2024 GMT
        Subject: CN=C8E72A1176C5D616BCB22B1116F339E653B55E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:e5:45:c1:5e:2f:a2:be:da:64:e5:21:e8:
                    8d:c3:89:c0:11:b3:2d:80:bb:9c:49:b9:14:45:ac:
                    57:48:4f:ad:49:77:ef:2d:be:5f:49:e1:bb:83:04:
                    97:29:87:8b:e5:6a:2b:c7:62:ca:67:bb:45:f8:2e:
                    33:19:ee:19:eb:2a:c7:b5:e1:a0:19:03:d9:a7:0f:
                    5a:5b:55:fc:84:30:7d:c3:c0:5e:c5:a8:10:65:66:
                    fa:98:66:ba:46:01:93:a0:91:f5:74:36:00:46:cf:
                    67:9c:e9:76:87:d6:25:6f:1f:e8:05:c9:98:83:4e:
                    b8:c0:b8:2c:a9:96:47:07:ec:1e:e6:d8:02:78:04:
                    74:fc:ca:e6:77:e2:cf:43:3b:8c:b6:06:ed:c2:b8:
                    91:03:79:07:0a:5d:8a:2b:24:ae:3b:84:8d:7c:a3:
                    2c:55:25:41:78:17:f7:19:5e:88:b3:32:4a:1e:19:
                    f0:68:45:bc:78:03:3e:1f:2b:ca:87:12:90:28:d4:
                    50:19:9f:c5:08:d6:16:54:73:f5:b8:b7:3d:4c:47:
                    42:a2:7b:6f:12:30:11:f6:f3:86:32:64:7d:b2:e6:
                    13:e6:f8:21:92:62:41:27:5e:68:4e:ab:24:be:e8:
                    4f:fd:64:e8:ad:e9:cf:0e:1c:23:00:70:78:98:95:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:2A:11:76:C5:D6:16:BC:B2:2B:11:16:F3:39:E6:53:B5:5E:73
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:fc:0a:16:64:c4:00:66:0d:34:f1:f0:19:7d:5a:68:e7:
         8d:cd:bf:36:59:3c:83:f0:1a:39:f6:30:98:4c:ca:cf:45:86:
         cb:35:93:23:7f:53:be:f0:56:0b:bf:6b:c5:3f:4a:d4:08:d2:
         35:e2:3e:db:9d:e7:b9:ca:20:6a:90:c9:33:80:72:8d:9e:96:
         35:db:4c:8e:b9:3f:1c:53:ca:5c:b1:7f:0d:16:fe:41:eb:74:
         38:6b:e3:3e:3a:90:de:54:de:a0:d8:17:89:81:7f:d7:c2:37:
         2c:07:d3:e9:92:fa:10:3c:ef:87:49:47:80:03:05:71:12:9d:
         9f:12:f7:12:18:48:f3:9a:c8:a9:ba:6d:0e:03:c6:94:fb:e5:
         b3:77:59:37:08:d6:32:9d:01:2f:91:3a:10:b5:03:8a:76:c9:
         f2:ef:0e:c0:ae:70:65:0b:f1:7b:a3:8d:61:41:31:dd:17:10:
         99:af:1d:13:61:83:22:25:f7:aa:4c:00:e4:f0:33:d5:6e:0c:
         0c:f0:6f:96:9e:94:42:35:a7:38:7d:77:fc:11:af:9e:3c:b1:
         d7:52:b0:c4:70:2a:09:b7:9d:df:af:00:a0:91:8a:4e:47:7d:
         2c:a7:54:0d:18:56:45:4c:cb:81:83:ad:2b:74:de:6c:e8:9e:
         b0:7a:00:7c
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUaIeuROx7SyJh2rOCNTXwejfO99QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA3MjQwOTU4NDRaFw0yNDA3MjIxMDAzNDRaMDMxMTAvBgNV
BAMTKEM4RTcyQTExNzZDNUQ2MTZCQ0IyMkIxMTE2RjMzOUU2NTNCNTVFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I+VFwV4vor7aZOUh6I3DicAR
sy2Au5xJuRRFrFdIT61Jd+8tvl9J4buDBJcph4vlaivHYspnu0X4LjMZ7hnrKse1
4aAZA9mnD1pbVfyEMH3DwF7FqBBlZvqYZrpGAZOgkfV0NgBGz2ec6XaH1iVvH+gF
yZiDTrjAuCyplkcH7B7m2AJ4BHT8yuZ34s9DO4y2Bu3CuJEDeQcKXYorJK47hI18
oyxVJUF4F/cZXoizMkoeGfBoRbx4Az4fK8qHEpAo1FAZn8UI1hZUc/W4tz1MR0Ki
e28SMBH284YyZH2y5hPm+CGSYkEnXmhOqyS+6E/9ZOit6c8OHCMAcHiYlXGLAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUyOcqEXbF1ha8sisRFvM55lO1XnMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE5NzY4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0azANBgkqhkiG9w0B
AQsFAAOCAQEALKH8ChZkxABmDTTx8Bl9Wmjnjc2/Nlk8g/AaOfYwmEzKz0WGyzWT
I39TvvBWC79rxT9K1AjSNeI+253nucogapDJM4ByjZ6WNdtMjrk/HFPKXLF/DRb+
Qet0OGvjPjqQ3lTeoNgXiYF/18I3LAfT6ZL6EDzvh0lHgAMFcRKdnxL3EhhI85rI
qbptDgPGlPvls3dZNwjWMp0BL5E6ELUDinbJ8u8OwK5wZQvxe6ONYUEx3RcQma8d
E2GDIiX3qkwA5PAz1W4MDPBvlp6UQjWnOH13/BGvnjyx11KwxHAqCbed368AoJGK
Tkd9LKdUDRhWRUzLgYOtK3TebOiesHoAfA==
-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org