Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa
File:                     AS204372.roa (raw, json)
Hash identifier:          Ax00OoMn7AHyPn/qkdJZUIOlUuQ70+O9ibw+6iEB15I=
Subject key identifier:   EA:80:EF:76:7D:FC:A1:D4:23:AE:19:38:63:68:8A:E4:F0:3F:F7:6A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1719107C9900C059824D58AD26B1A5A4BC2A3E04
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa
Signing time:             Sun 15 Sep 2024 00:02:00 +0000
ROA not before:           Sat 14 Sep 2024 23:57:00 +0000
ROA not after:            Sun 14 Sep 2025 00:02:00 +0000
asID:                     204372
IP address blocks:        89.116.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:10:7c:99:00:c0:59:82:4d:58:ad:26:b1:a5:a4:bc:2a:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 14 23:57:00 2024 GMT
            Not After : Sep 14 00:02:00 2025 GMT
        Subject: CN=EA80EF767DFCA1D423AE193863688AE4F03FF76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:fb:95:84:98:8e:15:9e:19:78:84:b5:d8:
                    57:84:ec:20:7c:37:0d:b7:03:31:a9:6d:9c:06:d2:
                    6a:f1:74:ad:4d:ad:d0:c2:b5:d6:9f:8a:b5:20:fd:
                    e0:4d:ac:d1:dc:fa:da:f6:e6:e0:c3:92:d5:ff:f5:
                    43:c7:45:a8:dc:e7:e6:55:bf:dc:06:09:0b:74:4a:
                    78:40:7a:fb:fa:c4:1a:28:87:82:83:5d:c8:21:f3:
                    af:12:d4:8f:4c:ec:a5:8a:a5:44:8f:2e:c6:6b:da:
                    5e:20:c6:84:e6:b6:34:bd:83:e9:da:cb:63:bb:c1:
                    62:92:7c:09:69:5c:21:41:ea:dd:1b:c8:5e:43:f2:
                    5d:ca:fd:97:c8:be:56:d9:5f:b7:2a:53:53:05:28:
                    5c:b7:f1:95:87:df:f2:c7:2a:23:52:7a:25:d3:68:
                    93:0d:8e:40:c0:e9:ad:56:15:48:e1:65:74:9f:dd:
                    0f:7f:7f:fa:05:55:8d:ff:87:77:76:9c:78:81:56:
                    99:f6:2d:9f:fc:e5:28:29:5c:bc:45:af:dc:06:ff:
                    87:e7:eb:3d:30:0e:17:97:97:5c:fc:92:f1:58:2b:
                    23:90:c1:82:88:1b:ff:87:1c:24:2a:c3:46:93:a2:
                    89:36:7e:da:c2:3f:41:6c:31:69:f9:7b:66:73:00:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:EF:76:7D:FC:A1:D4:23:AE:19:38:63:68:8A:E4:F0:3F:F7:6A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:46:09:45:85:75:ad:f9:6e:24:2c:4e:c4:04:a1:dd:e2:08:
         52:db:08:43:0a:4e:98:98:e0:d8:70:3a:5e:85:56:5a:2d:6d:
         cb:30:ec:33:70:4e:ba:04:58:79:e8:d3:ef:6d:5f:c0:26:38:
         4b:f5:94:6a:98:c8:5c:91:bd:f4:62:34:72:d1:44:42:b0:ab:
         34:69:bd:57:23:90:0c:9c:b0:61:88:41:1b:50:6d:ab:fa:1f:
         12:de:62:88:1b:cc:12:f1:19:30:14:c2:aa:63:59:29:bb:8b:
         2e:d1:df:4b:62:69:37:12:27:17:2b:8e:07:cb:89:a6:2b:7d:
         88:0d:e6:8c:4b:61:41:ca:3f:13:17:6b:f5:02:b1:3e:74:15:
         ab:da:99:56:53:df:91:55:fd:2f:d7:3b:82:cb:71:0e:c5:87:
         db:d2:df:ef:b6:74:d5:df:44:5a:0d:1e:41:6e:2f:8f:9e:ee:
         8c:3c:10:16:55:d6:38:4f:61:d9:ce:a5:2d:a0:ff:f2:0d:3c:
         2d:65:f6:f2:66:ca:7c:9b:4e:ed:b9:36:1a:d0:d1:a7:86:d9:
         7e:8e:39:df:e4:fd:4f:4a:81:13:b6:1a:c7:91:29:28:34:fc:
         5c:89:36:54:d3:61:20:7e:24:62:f4:d9:16:13:26:af:23:77:
         29:08:98:ca
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUFxkQfJkAwFmCTVitJrGlpLwqPgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA5MTQyMzU3MDBaFw0yNTA5MTQwMDAyMDBaMDMxMTAvBgNV
BAMTKEVBODBFRjc2N0RGQ0ExRDQyM0FFMTkzODYzNjg4QUU0RjAzRkY3NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztvuVhJiOFZ4ZeIS12FeE7CB8
Nw23AzGpbZwG0mrxdK1NrdDCtdafirUg/eBNrNHc+tr25uDDktX/9UPHRajc5+ZV
v9wGCQt0SnhAevv6xBooh4KDXcgh868S1I9M7KWKpUSPLsZr2l4gxoTmtjS9g+na
y2O7wWKSfAlpXCFB6t0byF5D8l3K/ZfIvlbZX7cqU1MFKFy38ZWH3/LHKiNSeiXT
aJMNjkDA6a1WFUjhZXSf3Q9/f/oFVY3/h3d2nHiBVpn2LZ/85SgpXLxFr9wG/4fn
6z0wDheXl1z8kvFYKyOQwYKIG/+HHCQqw0aTook2ftrCP0FsMWn5e2ZzACBvAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU6oDvdn38odQjrhk4Y2iK5PA/92owHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIwNDM3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0fzANBgkqhkiG9w0B
AQsFAAOCAQEA00YJRYV1rfluJCxOxASh3eIIUtsIQwpOmJjg2HA6XoVWWi1tyzDs
M3BOugRYeejT721fwCY4S/WUapjIXJG99GI0ctFEQrCrNGm9VyOQDJywYYhBG1Bt
q/ofEt5iiBvMEvEZMBTCqmNZKbuLLtHfS2JpNxInFyuOB8uJpit9iA3mjEthQco/
Exdr9QKxPnQVq9qZVlPfkVX9L9c7gstxDsWH29Lf77Z01d9EWg0eQW4vj57ujDwQ
FlXWOE9h2c6lLaD/8g08LWX28mbKfJtO7bk2GtDRp4bZfo453+T9T0qBE7Yax5Ep
KDT8XIk2VNNhIH4kYvTZFhMmryN3KQiYyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org