Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa
File:                     AS211439.roa (raw, json)
Hash identifier:          aaOUTc8FeYEcUUIq+vbDlUJT3snCitPHSCC53OazJCM=
Subject key identifier:   BB:8C:01:B2:52:43:76:AD:8B:82:0B:72:CB:0F:62:23:81:BD:9E:6D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5F2BD2EFBD864CD57937B46D523FCF577E71398C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa
Signing time:             Wed 24 Jan 2024 15:51:35 +0000
ROA not before:           Wed 24 Jan 2024 15:46:35 +0000
ROA not after:            Wed 22 Jan 2025 15:51:35 +0000
asID:                     211439
IP address blocks:        86.38.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:d2:ef:bd:86:4c:d5:79:37:b4:6d:52:3f:cf:57:7e:71:39:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 24 15:46:35 2024 GMT
            Not After : Jan 22 15:51:35 2025 GMT
        Subject: CN=BB8C01B2524376AD8B820B72CB0F622381BD9E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:63:ca:27:d6:f9:86:26:f7:db:ec:6d:82:
                    1f:0c:ee:b6:f5:24:a3:4a:07:02:cc:d3:1d:53:76:
                    60:e4:84:74:5e:b5:c2:15:45:69:19:ce:ce:57:30:
                    c6:7e:bc:fc:66:92:90:2f:8b:a5:d0:2a:e2:9e:6e:
                    ca:1e:8c:30:9b:5c:75:61:d4:9e:ac:93:5e:d8:20:
                    89:d3:59:b3:89:51:74:89:e1:93:50:b6:2a:32:d1:
                    1c:df:81:6a:f0:a7:0e:fb:22:2b:31:72:45:3e:e8:
                    d1:0f:1f:f6:8b:d0:76:dc:ff:88:bd:5c:bf:31:c3:
                    95:b0:0a:37:6b:bd:65:7a:51:9a:c8:a1:c7:ef:7b:
                    c3:64:21:62:7e:ea:0b:3f:ae:cd:90:2c:2d:90:23:
                    f3:7f:6a:45:0c:a7:2e:dd:23:e3:ca:af:ab:5d:c6:
                    e7:62:35:c3:c2:9e:3f:87:f2:e2:cf:37:bc:2c:35:
                    9f:01:fd:5c:38:6e:de:b5:ae:cc:34:95:4f:09:fe:
                    89:87:03:48:78:36:cf:89:b1:ce:13:e8:7d:ab:cb:
                    d7:12:dd:d6:89:93:52:79:a5:df:07:cb:04:8a:e6:
                    6c:61:ff:90:fe:74:61:93:15:eb:d4:17:b2:a8:b5:
                    4d:98:4d:e9:25:80:b6:be:4f:3d:c8:c3:58:21:42:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:01:B2:52:43:76:AD:8B:82:0B:72:CB:0F:62:23:81:BD:9E:6D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:44:3e:fe:da:fb:4d:43:80:84:d5:9d:c3:72:34:6f:05:
         96:96:85:a8:77:bf:d2:99:e8:d7:e1:48:00:02:73:1c:a0:9d:
         2c:86:23:d2:51:ce:50:13:68:5a:7e:ee:4e:fd:4c:db:75:c8:
         72:61:4f:73:9b:a6:10:b6:3e:a5:13:4d:24:7c:6b:75:78:e4:
         00:35:6d:4e:0a:c1:23:4e:17:71:02:1c:d0:67:ca:26:ab:f3:
         35:bb:1e:a5:67:b9:79:52:9f:ae:be:9b:d6:a3:4e:da:1d:30:
         34:93:80:d6:e0:d8:65:67:8c:19:d6:fa:81:3d:b9:e4:3e:fa:
         f9:f9:2d:e0:47:d6:cd:1d:8e:57:52:98:33:ca:c5:e8:2c:f4:
         77:da:bc:7a:9e:65:7f:ba:b9:7f:9f:24:b4:54:c5:db:6f:02:
         fb:d6:bc:77:b4:b0:b4:9e:b0:13:38:89:3f:59:58:d5:5f:5e:
         76:98:dd:5c:4e:d3:35:2f:cb:25:91:1f:62:74:1f:99:32:24:
         9d:d1:ff:62:46:8d:58:10:28:b3:ac:28:b4:70:8b:f1:83:f6:
         e8:b1:71:95:59:41:bc:18:5f:98:63:d6:ca:66:50:36:bb:b3:
         e8:b1:46:54:c7:7c:9d:a5:f9:33:3d:ca:22:de:c6:ce:f8:dd:
         dd:d4:70:b6
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUXyvS772GTNV5N7RtUj/PV35xOYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDAxMjQxNTQ2MzVaFw0yNTAxMjIxNTUxMzVaMDMxMTAvBgNV
BAMTKEJCOEMwMUIyNTI0Mzc2QUQ4QjgyMEI3MkNCMEY2MjIzODFCRDlFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vmPKJ9b5hib32+xtgh8M7rb1
JKNKBwLM0x1TdmDkhHRetcIVRWkZzs5XMMZ+vPxmkpAvi6XQKuKebsoejDCbXHVh
1J6sk17YIInTWbOJUXSJ4ZNQtioy0RzfgWrwpw77IisxckU+6NEPH/aL0Hbc/4i9
XL8xw5WwCjdrvWV6UZrIocfve8NkIWJ+6gs/rs2QLC2QI/N/akUMpy7dI+PKr6td
xudiNcPCnj+H8uLPN7wsNZ8B/Vw4bt61rsw0lU8J/omHA0h4Ns+Jsc4T6H2ry9cS
3daJk1J5pd8HywSK5mxh/5D+dGGTFevUF7KotU2YTeklgLa+Tz3Iw1ghQm/VAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUu4wBslJDdq2Lggtyyw9iI4G9nm0wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYmGDANBgkqhkiG9w0B
AQsFAAOCAQEApjtEPv7a+01DgITVncNyNG8FlpaFqHe/0pno1+FIAAJzHKCdLIYj
0lHOUBNoWn7uTv1M23XIcmFPc5umELY+pRNNJHxrdXjkADVtTgrBI04XcQIc0GfK
JqvzNbsepWe5eVKfrr6b1qNO2h0wNJOA1uDYZWeMGdb6gT255D76+fkt4EfWzR2O
V1KYM8rF6Cz0d9q8ep5lf7q5f58ktFTF228C+9a8d7SwtJ6wEziJP1lY1V9edpjd
XE7TNS/LJZEfYnQfmTIkndH/YkaNWBAos6wotHCL8YP26LFxlVlBvBhfmGPWymZQ
Nruz6LFGVMd8naX5Mz3KIt7Gzvjd3dRwtg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org