Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198510.roa
File:                     AS198510.roa (raw, json)
Hash identifier:          rBJgzjVf0xT/eEvSb0ZmR+XNF2lCxXRDf8avW1+jko8=
Subject key identifier:   C2:EB:BA:40:17:6F:81:54:AE:99:EA:9F:A4:2F:65:DA:8A:03:09:8F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0304405B4B70A9E260E3B339197B0FF14CC6F0BF
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198510.roa
Signing time:             Wed 27 Mar 2024 07:33:43 +0000
ROA not before:           Wed 27 Mar 2024 07:28:43 +0000
ROA not after:            Wed 26 Mar 2025 07:33:43 +0000
asID:                     198510
IP address blocks:        89.116.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:04:40:5b:4b:70:a9:e2:60:e3:b3:39:19:7b:0f:f1:4c:c6:f0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 27 07:28:43 2024 GMT
            Not After : Mar 26 07:33:43 2025 GMT
        Subject: CN=C2EBBA40176F8154AE99EA9FA42F65DA8A03098F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:ba:ab:b8:c4:db:a6:7c:92:38:8e:36:4a:
                    14:fe:0f:51:4e:e2:46:dd:5f:96:a1:a5:d7:f0:b3:
                    57:74:8b:4d:ae:54:a9:42:94:7b:71:37:1e:18:8e:
                    14:97:a9:af:8d:7e:e5:22:8c:42:f2:8e:54:dd:90:
                    c2:08:8f:6c:cf:69:56:dc:0a:b6:54:b1:07:9b:a8:
                    5e:06:f9:54:47:07:f9:0d:5c:2b:9e:4c:f5:a9:76:
                    9d:bd:d7:39:cd:d6:d5:b2:5b:81:19:19:61:ba:07:
                    b1:ce:11:f2:ef:42:42:ad:f5:88:ab:54:22:21:9d:
                    b7:e4:7c:b6:ae:23:8e:f3:ef:08:5e:c4:48:0d:f0:
                    a0:8d:6a:50:a4:4f:d1:95:e7:61:da:7f:18:a2:a0:
                    3a:7e:28:86:d3:c8:76:48:9b:b9:cc:87:a9:6c:80:
                    dd:d8:56:6c:4b:c0:49:84:14:d9:70:ff:aa:e5:44:
                    8c:e0:f4:39:ea:fe:95:11:12:a9:06:a9:be:46:7e:
                    89:57:56:0d:06:20:bf:f9:1c:e7:f3:ce:22:1a:1c:
                    61:4a:d4:08:b3:63:37:b1:53:64:42:30:f3:ca:8a:
                    70:36:6c:3f:89:9c:3c:51:ed:ef:0a:ae:41:59:61:
                    47:c0:f5:5e:25:e9:ed:f2:82:c1:d6:ab:04:a3:21:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:BA:40:17:6F:81:54:AE:99:EA:9F:A4:2F:65:DA:8A:03:09:8F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:6b:d5:b0:8a:06:69:dc:ef:e6:0e:4b:2a:48:80:7f:3c:55:
         18:83:e9:a8:3d:92:cc:1a:47:bb:85:59:92:89:07:88:b7:94:
         bb:cc:24:09:ba:54:7a:c6:ac:8f:53:e5:b7:ea:9c:08:d0:10:
         04:23:67:65:c3:99:19:d2:ab:68:a3:23:ba:cd:81:2a:47:da:
         32:98:18:ea:45:76:ae:db:fd:d4:d5:e9:59:e1:06:ac:34:0b:
         db:7d:ad:54:d0:eb:17:1e:b0:8e:4c:d9:94:f4:e7:46:ad:e7:
         9b:31:b4:3d:e6:c3:a2:a6:df:2c:9c:aa:ed:bc:2b:aa:8f:f8:
         a2:e0:5e:3a:0d:7f:8c:43:b6:e7:e0:62:b6:0b:72:0d:a3:6d:
         cb:2c:40:66:6a:8c:d5:19:da:5d:64:1d:b3:61:f0:d7:38:4d:
         b5:2e:bd:e8:3c:29:27:c6:a0:81:8c:31:d3:43:fa:0b:71:73:
         06:40:5c:89:0d:39:e8:bd:c4:4a:00:75:fa:63:b4:2f:f6:57:
         2b:81:f3:da:95:b7:58:c9:e5:92:db:8e:48:40:4e:a2:3f:7b:
         85:b4:12:9c:56:af:82:7d:71:43:ed:83:c9:0b:90:24:5e:56:
         4a:3e:0e:bc:6c:73:f7:4f:73:4a:3c:2d:1e:d0:53:51:b8:a4:
         a9:24:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org