Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          4wGLHbN/h2ejXiEzCokn9YDwOjOSwg7noBMr/dthnWo=
Subject key identifier:   35:3D:D9:0B:AE:34:86:8E:10:A5:5E:0A:70:3E:07:DC:1B:D2:07:7A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0FAFBB2230AAB20D96352AC7A1CEE7813295EC20
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa
Signing time:             Fri 12 Jan 2024 13:53:24 +0000
ROA not before:           Fri 12 Jan 2024 13:48:24 +0000
ROA not after:            Fri 10 Jan 2025 13:53:24 +0000
asID:                     211585
IP address blocks:        89.116.48.0/22 maxlen: 24
                          89.117.104.0/22 maxlen: 24
                          89.117.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:af:bb:22:30:aa:b2:0d:96:35:2a:c7:a1:ce:e7:81:32:95:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 12 13:48:24 2024 GMT
            Not After : Jan 10 13:53:24 2025 GMT
        Subject: CN=353DD90BAE34868E10A55E0A703E07DC1BD2077A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:b9:eb:11:f2:45:1d:93:ef:59:d3:37:b6:
                    b5:2f:e8:3f:bf:4b:48:1e:a0:71:52:a3:f2:b8:15:
                    00:55:85:68:55:13:71:29:7e:44:ee:57:ab:c3:9c:
                    12:1d:8f:86:7f:b1:c2:60:a8:4f:50:75:e7:f7:bc:
                    93:cc:9d:55:52:5c:ab:fa:b5:3b:0e:8a:a7:e1:a5:
                    27:0e:72:7e:41:63:24:26:f7:f1:c9:6f:c0:e2:74:
                    fc:9e:12:94:b0:2c:72:85:50:e2:69:bc:c9:97:77:
                    65:55:b8:9c:ad:10:74:b2:c4:b2:ef:20:7a:a6:bd:
                    d2:7d:3a:b7:f5:ef:ba:0c:04:2a:a5:7f:4e:95:3e:
                    8f:a3:02:c0:f8:b2:7d:b8:4a:b9:02:3b:0a:d7:c5:
                    b6:7b:36:0a:90:ea:f7:ca:97:e7:1c:2f:b8:49:16:
                    1f:ee:24:30:27:d8:cf:ce:ed:de:2b:ae:b5:50:9a:
                    7d:6c:43:59:0c:2b:e0:17:59:b3:58:4b:d0:63:bb:
                    4e:47:c5:7d:d4:7f:28:a8:3f:8e:88:18:cd:f8:d1:
                    61:12:09:69:a2:f6:b6:e3:87:8e:10:da:bd:52:f0:
                    0c:cb:8c:16:35:b7:f9:b8:3b:20:9c:c2:43:3f:20:
                    4d:ef:27:59:b8:9e:bc:76:c3:d8:63:b1:2d:fd:34:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:D9:0B:AE:34:86:8E:10:A5:5E:0A:70:3E:07:DC:1B:D2:07:7A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22
                  89.117.104.0/22
                  89.117.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:34:9e:3c:a5:52:3a:cc:d7:9a:1c:73:33:68:1f:55:8a:
         19:23:6d:b1:fc:8c:92:e2:64:4f:0f:87:2f:9e:5c:52:4f:87:
         b9:33:27:50:8a:b5:8d:6a:d9:78:d6:cd:3f:5d:be:c9:19:c1:
         89:0e:04:e3:62:5c:85:2b:89:ad:81:60:81:07:6d:63:63:46:
         7f:24:96:f0:33:bb:bf:bf:51:5b:bb:ab:d6:f4:37:8b:3a:10:
         bd:eb:7f:62:c0:fa:92:45:11:26:6d:5b:d2:b1:f1:41:40:c6:
         24:bd:cc:ad:98:8c:e5:dd:cb:d6:d7:b7:e6:11:9d:fc:4e:1f:
         72:2a:b4:e0:8d:60:2d:40:4a:db:15:b3:3e:d9:f0:81:2c:f4:
         4e:94:d3:f4:51:6c:93:17:d6:e6:af:16:1e:91:82:63:7f:ba:
         ce:d5:40:79:5d:2d:cd:9f:5d:f2:12:e5:c0:a8:02:c6:48:69:
         2e:64:bf:bb:dc:66:88:53:69:ca:23:bb:f5:1a:e9:a6:e0:94:
         73:8d:78:e3:1a:2a:92:ba:1c:9c:b7:17:b3:ba:55:dc:28:8d:
         e7:bb:ec:fc:47:12:26:db:3d:96:37:b5:a6:08:b1:bb:a6:d4:
         36:8d:d9:0c:b0:40:e0:60:3d:ba:8d:27:19:79:4b:34:1d:d5:
         e2:85:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org