Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa
File:                     AS211192.roa (raw, json)
Hash identifier:          gdrE/94+0x5diMXBiF5XAYOcmja1ed9M25ReH/uBKo0=
Subject key identifier:   32:B0:C2:60:65:60:76:C4:1D:D0:7D:7B:E0:83:DD:74:B9:B6:FC:59
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       15362B9279D4393427B1BEEBF3449E60E99EB965
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa
Signing time:             Wed 27 Mar 2024 09:10:02 +0000
ROA not before:           Wed 27 Mar 2024 09:05:02 +0000
ROA not after:            Wed 26 Mar 2025 09:10:02 +0000
asID:                     211192
IP address blocks:        89.116.103.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:2b:92:79:d4:39:34:27:b1:be:eb:f3:44:9e:60:e9:9e:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 27 09:05:02 2024 GMT
            Not After : Mar 26 09:10:02 2025 GMT
        Subject: CN=32B0C260656076C41DD07D7BE083DD74B9B6FC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:86:de:c0:de:df:88:6e:a1:76:fe:88:ae:
                    b6:fd:39:95:c9:d2:43:b0:e2:37:c8:30:c5:32:f6:
                    d0:7f:6f:d0:4b:b9:1b:94:1a:a2:26:4a:ba:52:35:
                    18:98:04:02:b1:41:10:af:a4:3e:c3:90:7b:99:f7:
                    85:5d:08:e4:6c:34:3c:02:ab:50:11:1b:5e:f9:f4:
                    b3:4e:2e:7d:7f:67:d4:4f:56:07:63:44:8c:a6:89:
                    f6:53:bd:49:90:c0:3a:8d:0b:66:6c:f5:69:53:bf:
                    d0:25:97:cc:97:65:c3:92:a2:2a:b9:c9:d8:93:55:
                    bd:0c:de:ed:37:5f:16:10:36:4a:6b:20:9a:75:6e:
                    f7:5a:f3:26:06:f5:bc:ae:02:eb:ff:93:86:a0:08:
                    01:bc:96:1c:c8:63:7e:02:69:e3:e4:89:c4:d3:76:
                    d8:1a:c1:a2:73:01:a8:42:a1:f2:f9:e5:ef:a4:5f:
                    02:8e:49:2d:e9:fd:71:a4:6d:f9:b9:66:45:a3:d5:
                    d3:b2:99:ce:a7:fb:e1:f0:c4:93:62:76:90:fa:11:
                    e3:2e:e0:fd:f5:37:32:3c:db:58:ef:45:5f:56:f8:
                    dd:27:b8:20:88:bf:41:c2:e0:38:9a:84:3c:c7:2c:
                    68:61:fa:a2:cc:1d:35:f3:25:2e:0b:d2:63:1d:f0:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B0:C2:60:65:60:76:C4:1D:D0:7D:7B:E0:83:DD:74:B9:B6:FC:59
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.103.0/24
                  89.116.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:4e:c2:86:5a:83:ca:28:f0:28:71:46:35:31:05:cf:49:
         b3:77:a4:50:f3:c6:c3:b0:b5:69:5b:94:90:29:10:11:79:0e:
         37:e3:c8:7c:84:6c:ed:8f:7d:3c:62:ed:5a:8a:d5:26:2e:86:
         ab:6a:f4:f0:51:a6:a4:37:6e:3a:90:ad:0f:34:2c:d1:74:6b:
         c1:95:86:64:92:5f:dc:e3:36:fe:1e:b5:8d:5d:8a:20:ba:85:
         09:6c:0f:bc:da:71:10:de:72:e4:7d:c5:55:de:7c:2f:9a:80:
         81:88:e0:57:84:c3:81:22:a4:ef:13:7d:01:30:2f:38:03:a5:
         03:6f:e9:42:c6:11:4d:3c:f0:5d:b5:b8:30:c4:b8:65:63:b0:
         a6:18:28:4b:88:fb:8b:64:76:4b:45:fc:0a:29:6e:d3:80:d7:
         d6:3e:d5:6f:20:f5:a1:c5:0b:8d:5c:22:56:09:fa:19:b8:31:
         92:19:fb:21:b5:dc:59:0b:ff:bc:91:53:87:8c:44:4a:45:c8:
         16:5b:9e:60:d0:a1:59:2e:cc:7d:32:17:03:23:77:c1:ad:78:
         66:33:29:46:a3:62:7b:f6:0b:c6:f7:f0:5f:a4:1d:61:f4:13:
         75:ef:00:7e:46:28:df:44:2a:43:24:1e:84:82:30:1a:6d:74:
         fd:d4:ee:b7
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUFTYrknnUOTQnsb7r80SeYOmeuWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDAzMjcwOTA1MDJaFw0yNTAzMjYwOTEwMDJaMDMxMTAvBgNV
BAMTKDMyQjBDMjYwNjU2MDc2QzQxREQwN0Q3QkUwODNERDc0QjlCNkZDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSY4bewN7fiG6hdv6Irrb9OZXJ
0kOw4jfIMMUy9tB/b9BLuRuUGqImSrpSNRiYBAKxQRCvpD7DkHuZ94VdCORsNDwC
q1ARG1759LNOLn1/Z9RPVgdjRIymifZTvUmQwDqNC2Zs9WlTv9All8yXZcOSoiq5
ydiTVb0M3u03XxYQNkprIJp1bvda8yYG9byuAuv/k4agCAG8lhzIY34CaePkicTT
dtgawaJzAahCofL55e+kXwKOSS3p/XGkbfm5ZkWj1dOymc6n++HwxJNidpD6EeMu
4P31NzI821jvRV9W+N0nuCCIv0HC4DiahDzHLGhh+qLMHTXzJS4L0mMd8JAjAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUMrDCYGVgdsQd0H174IPddLm2/FkwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTE5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0ZwMEAVl00DANBgkq
hkiG9w0BAQsFAAOCAQEAqe1OwoZag8oo8ChxRjUxBc9Js3ekUPPGw7C1aVuUkCkQ
EXkON+PIfIRs7Y99PGLtWorVJi6Gq2r08FGmpDduOpCtDzQs0XRrwZWGZJJf3OM2
/h61jV2KILqFCWwPvNpxEN5y5H3FVd58L5qAgYjgV4TDgSKk7xN9ATAvOAOlA2/p
QsYRTTzwXbW4MMS4ZWOwphgoS4j7i2R2S0X8Cilu04DX1j7VbyD1ocULjVwiVgn6
Gbgxkhn7IbXcWQv/vJFTh4xESkXIFlueYNChWS7MfTIXAyN3wa14ZjMpRqNie/YL
xvfwX6QdYfQTde8AfkYo30QqQyQehIIwGm10/dTutw==
-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org