Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204894.roa
File:                     AS204894.roa (raw, json)
Hash identifier:          cbo9gE+GitRoyuBx3nBVWjfD5RXD96gGOBUBZAzya/k=
Subject key identifier:   AA:C0:26:E9:CF:CF:A2:2B:1E:8F:83:DC:3C:B8:71:D3:59:5A:80:33
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       313E65B99B430DE7A1E7D71A4739B92280E70965
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204894.roa
Signing time:             Mon 30 Sep 2024 12:43:22 +0000
ROA not before:           Mon 30 Sep 2024 12:38:22 +0000
ROA not after:            Mon 29 Sep 2025 12:43:22 +0000
asID:                     204894
IP address blocks:        89.117.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3e:65:b9:9b:43:0d:e7:a1:e7:d7:1a:47:39:b9:22:80:e7:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 30 12:38:22 2024 GMT
            Not After : Sep 29 12:43:22 2025 GMT
        Subject: CN=AAC026E9CFCFA22B1E8F83DC3CB871D3595A8033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:80:62:45:99:74:64:fb:bd:89:c6:e5:d1:
                    12:19:e0:ed:68:21:b9:3d:87:ec:fc:43:e6:5e:a1:
                    3e:67:ea:5c:59:14:0f:b5:ba:4b:e3:dc:3c:16:22:
                    2b:2f:d2:83:9a:98:85:0e:72:08:e3:d1:05:3c:e2:
                    04:cf:de:f8:80:15:82:b2:d8:9e:82:2b:99:fd:0b:
                    00:7a:d4:c6:39:af:9a:d9:77:cc:fd:c1:af:bc:ff:
                    dd:e5:08:12:8d:3c:20:01:3d:dd:68:e9:6b:15:cf:
                    0f:77:e4:fd:1a:18:77:1e:1a:c1:f5:34:0f:90:d6:
                    a3:a2:4a:14:24:cd:24:28:eb:b5:44:8d:2e:0c:18:
                    30:c4:96:8f:f0:b3:d7:f9:97:7e:b8:39:e1:ab:4f:
                    61:09:7f:07:47:fa:1b:b7:f5:7a:ce:80:a2:db:8a:
                    54:ca:02:14:13:0b:2c:08:47:ea:66:47:a6:0e:28:
                    7a:1c:7a:11:76:29:93:e2:b9:16:99:e6:c4:94:f7:
                    63:c0:75:50:23:0e:a6:dc:ed:f0:31:aa:1b:09:a0:
                    48:13:20:bd:37:8e:7a:fc:84:f7:3b:3f:4e:30:09:
                    17:2e:b9:b8:56:04:c5:29:3b:ba:6b:05:c4:f7:42:
                    1c:6b:73:7f:8e:33:c9:55:3a:e8:16:26:7b:6d:79:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:26:E9:CF:CF:A2:2B:1E:8F:83:DC:3C:B8:71:D3:59:5A:80:33
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204894.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:b8:54:f9:6e:13:22:04:01:9d:36:12:11:d0:db:6d:14:
         ba:73:4b:20:90:dc:03:15:f6:24:e9:d8:c5:3e:01:69:fb:e8:
         cc:c4:2b:12:7b:e7:1a:97:b6:64:52:5b:4e:62:cf:35:ca:78:
         d3:a6:cd:ae:85:4e:a6:db:ac:77:e6:82:de:0e:2c:78:41:ea:
         fd:c2:aa:e5:52:71:96:93:56:15:44:70:7b:d4:f9:a9:a5:53:
         38:33:bc:93:2e:f4:94:89:f9:72:9d:9c:5b:8e:fb:33:62:4d:
         3f:48:94:66:e8:0d:2c:dc:09:66:b6:b7:89:8d:7f:db:04:12:
         6c:c3:c5:26:12:59:7d:f4:75:64:69:4b:32:27:32:b5:d8:ca:
         23:bc:06:1f:2c:05:08:b8:0b:28:0a:1a:b1:f5:ab:2e:bc:b7:
         8b:1d:29:ec:5e:fe:71:f2:50:5e:e5:a2:8a:e9:11:e0:bd:65:
         c5:a0:b5:68:8b:cd:6e:29:5e:4b:df:9e:e2:ab:38:63:39:62:
         88:72:a0:6c:64:00:96:7b:c5:56:81:ef:29:0b:e9:1a:c5:d5:
         3e:22:dd:96:90:dd:f2:45:7a:33:07:3d:38:3d:f2:7a:70:0d:
         25:0e:b8:1b:26:2f:f3:4a:3e:20:e6:6f:98:c4:78:34:25:c0:
         d8:75:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org