Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa
File:                     AS200019.roa (raw, json)
Hash identifier:          TalqSwTRcw9W0lBKWONPxnu44a6BV5tByGfzWBw+SBM=
Subject key identifier:   48:26:78:9E:87:5E:19:6A:7E:8F:50:12:36:C9:A2:B2:45:A9:15:DC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       556FCBDBFAF2988C4191165B915570691266F337
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa
Signing time:             Tue 12 Nov 2024 17:43:27 +0000
ROA not before:           Tue 12 Nov 2024 17:38:27 +0000
ROA not after:            Tue 11 Nov 2025 17:43:27 +0000
asID:                     200019
IP address blocks:        89.117.64.0/22 maxlen: 24
                          89.117.104.0/22 maxlen: 24
                          89.117.132.0/22 maxlen: 24
                          89.117.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6f:cb:db:fa:f2:98:8c:41:91:16:5b:91:55:70:69:12:66:f3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 12 17:38:27 2024 GMT
            Not After : Nov 11 17:43:27 2025 GMT
        Subject: CN=4826789E875E196A7E8F501236C9A2B245A915DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:57:03:5c:74:d1:b5:2f:af:89:88:be:49:
                    cc:c6:f4:c4:ef:4c:16:38:70:f9:7d:ac:19:5e:e5:
                    7b:18:6f:19:12:5d:8e:62:35:cf:e7:11:32:78:ed:
                    99:3b:e8:9d:7d:ff:81:e3:3e:68:64:f3:26:cf:5b:
                    46:7c:ba:95:7e:87:0c:eb:3d:55:e1:fd:c1:ae:55:
                    d3:b4:ea:a0:67:77:96:0c:cf:08:2b:d9:08:9e:11:
                    6d:80:9c:c2:e2:c6:64:62:de:f5:52:d2:eb:d4:ed:
                    3b:aa:15:ff:28:7f:cc:7d:20:6e:61:c5:54:0c:12:
                    6a:8e:35:a3:50:6c:ef:c6:30:f0:24:7a:85:4b:c6:
                    b7:4c:90:59:2d:88:74:3b:7b:a9:74:1b:ed:99:30:
                    9b:23:ed:6e:d1:37:bc:8c:fc:8f:df:ce:0e:a6:ac:
                    39:05:61:99:19:66:a6:e8:6b:37:8e:11:0d:8f:a4:
                    11:f9:d4:ce:39:63:28:7e:ae:ed:05:13:10:16:d9:
                    50:1e:e7:c3:6d:c5:80:4a:b6:ec:63:03:62:18:f3:
                    36:b0:3a:a0:18:52:4a:e1:82:ce:9d:95:f4:7b:d5:
                    4e:7d:92:f9:e8:da:0b:e3:e5:ca:02:d1:33:46:ce:
                    2d:3d:a6:d6:75:7b:99:17:8a:b3:c6:1f:fa:98:c4:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:78:9E:87:5E:19:6A:7E:8F:50:12:36:C9:A2:B2:45:A9:15:DC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.64.0/22
                  89.117.104.0/22
                  89.117.132.0/22
                  89.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:5c:56:27:de:af:35:40:f1:3c:85:d3:8f:d7:ab:36:58:5e:
         ee:2b:75:01:4c:06:09:bd:84:ce:84:8b:5e:1b:84:fc:1a:8c:
         a2:a9:dc:a1:21:96:04:ee:19:19:46:42:89:5e:f7:00:44:cf:
         62:ce:18:9a:84:a9:30:42:41:6c:16:b6:e2:5f:81:09:68:28:
         51:a4:e4:fb:7a:04:da:08:f1:63:5e:a6:66:38:78:63:93:89:
         04:7b:3a:71:a7:ca:23:7b:0d:b3:9e:7c:dd:c3:85:db:bc:4f:
         e5:8e:89:46:4a:83:29:73:87:54:77:14:04:d0:b8:f8:95:40:
         ab:0b:db:94:bc:63:3c:aa:b4:12:4b:d2:8e:99:7f:1b:36:0d:
         73:e0:2a:76:db:a1:86:90:89:ff:9d:19:cc:e9:58:9c:c7:87:
         21:26:c9:8b:91:35:6e:72:49:bf:ed:90:06:cb:50:74:b2:63:
         84:39:5a:48:ec:a1:32:c4:26:54:72:1e:c3:d2:9f:fa:88:5a:
         79:2b:85:24:89:c6:39:60:11:33:9e:59:72:ab:20:d7:70:4f:
         d5:ab:e2:65:8e:4f:dd:d1:a4:52:70:ed:9d:b3:97:dd:f5:7f:
         7b:ed:45:c0:2f:b7:c1:f4:d8:83:0a:cb:b9:94:8b:5d:7b:02:
         26:ca:f8:86
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVW/L2/rymIxBkRZbkVVwaRJm8zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDExMTIxNzM4MjdaFw0yNTExMTExNzQzMjdaMDMxMTAvBgNV
BAMTKDQ4MjY3ODlFODc1RTE5NkE3RThGNTAxMjM2QzlBMkIyNDVBOTE1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByFcDXHTRtS+viYi+SczG9MTv
TBY4cPl9rBle5XsYbxkSXY5iNc/nETJ47Zk76J19/4HjPmhk8ybPW0Z8upV+hwzr
PVXh/cGuVdO06qBnd5YMzwgr2QieEW2AnMLixmRi3vVS0uvU7TuqFf8of8x9IG5h
xVQMEmqONaNQbO/GMPAkeoVLxrdMkFktiHQ7e6l0G+2ZMJsj7W7RN7yM/I/fzg6m
rDkFYZkZZqboazeOEQ2PpBH51M45Yyh+ru0FExAW2VAe58NtxYBKtuxjA2IY8zaw
OqAYUkrhgs6dlfR71U59kvno2gvj5coC0TNGzi09ptZ1e5kXirPGH/qYxP1RAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUSCZ4nodeGWp+j1ASNsmiskWpFdwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIwMDAxOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAll1QAMEAll1aAMEAll1
hAMEAll1oDANBgkqhkiG9w0BAQsFAAOCAQEA1FxWJ96vNUDxPIXTj9erNlhe7it1
AUwGCb2EzoSLXhuE/BqMoqncoSGWBO4ZGUZCiV73AETPYs4YmoSpMEJBbBa24l+B
CWgoUaTk+3oE2gjxY16mZjh4Y5OJBHs6cafKI3sNs5583cOF27xP5Y6JRkqDKXOH
VHcUBNC4+JVAqwvblLxjPKq0EkvSjpl/GzYNc+AqdtuhhpCJ/50ZzOlYnMeHISbJ
i5E1bnJJv+2QBstQdLJjhDlaSOyhMsQmVHIew9Kf+ohaeSuFJInGOWARM55Zcqsg
13BP1aviZY5P3dGkUnDtnbOX3fV/e+1FwC+3wfTYgwrLuZSLXXsCJsr4hg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org