Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa
File:                     AS211936.roa (raw, json)
Hash identifier:          2bFaM+TyLZgl5wjetB4OSFvjXLn2nR4NOareoWNzz0U=
Subject key identifier:   D0:7A:1B:0F:A1:63:4E:F0:B4:E1:A6:44:5F:E9:D2:53:EE:65:45:EE
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7CF6108E701F5ED162D7199A1BF33E56C6D8C92F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa
Signing time:             Tue 30 Jan 2024 12:33:14 +0000
ROA not before:           Tue 30 Jan 2024 12:28:14 +0000
ROA not after:            Tue 28 Jan 2025 12:33:14 +0000
asID:                     211936
IP address blocks:        86.38.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 12:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f6:10:8e:70:1f:5e:d1:62:d7:19:9a:1b:f3:3e:56:c6:d8:c9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 30 12:28:14 2024 GMT
            Not After : Jan 28 12:33:14 2025 GMT
        Subject: CN=D07A1B0FA1634EF0B4E1A6445FE9D253EE6545EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:e5:6f:41:eb:81:d5:8c:9f:b6:ef:17:9d:
                    06:73:b5:87:51:b1:94:b7:aa:52:0e:c8:ae:0f:9a:
                    f8:83:d9:7b:2d:38:73:d8:ef:c8:58:c3:9c:e4:8c:
                    f4:18:6c:74:16:f8:82:82:93:75:a2:57:27:15:e4:
                    6a:b8:59:38:ad:15:55:7b:f5:61:0a:5b:79:7f:76:
                    9c:a4:c7:7d:b2:c9:2c:70:86:3c:fd:b5:5e:b9:f0:
                    1d:90:bf:9e:93:cd:64:3b:2e:a9:d3:00:6d:cb:4c:
                    fa:ac:81:5d:09:50:ba:84:45:25:aa:56:af:f0:bb:
                    23:a0:79:6e:6a:50:d1:4f:bc:df:ab:ef:51:b9:77:
                    b7:71:9a:eb:c0:58:a5:98:fd:8b:bc:bb:af:1f:76:
                    ad:60:c6:7b:90:e2:47:30:bb:a6:29:96:d7:70:79:
                    01:68:6a:fc:20:ae:a6:90:39:f7:43:f7:8f:71:b3:
                    dc:f1:f6:5a:fc:a1:42:05:00:9f:40:5e:14:9b:bd:
                    8e:98:53:bb:2e:1c:56:2e:2f:d3:50:50:40:e0:a5:
                    2b:54:ba:a0:99:b4:54:1a:bc:98:10:fa:4a:ce:54:
                    59:94:9e:b7:b7:b8:68:a7:1c:63:50:8c:c8:78:7a:
                    e2:ce:80:39:41:e2:ae:c9:98:56:3c:74:cd:eb:e7:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:1B:0F:A1:63:4E:F0:B4:E1:A6:44:5F:E9:D2:53:EE:65:45:EE
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:44:bc:d1:05:eb:32:1b:ac:be:1f:f2:f8:03:dc:31:5a:
         f5:33:18:f5:42:9c:27:db:28:f7:98:f7:86:49:9f:df:69:11:
         8d:aa:10:19:39:18:d4:79:6f:1c:1e:27:55:9e:20:82:c0:1f:
         c8:37:d2:d6:23:b6:3a:5a:38:12:c3:37:0f:66:71:86:1f:81:
         7d:94:2f:f6:40:c3:f4:04:ec:e2:bc:f1:b0:69:20:b6:58:48:
         47:43:37:0c:0c:0c:6f:a0:c5:b6:6e:32:e4:ba:60:47:3a:9f:
         ce:64:f3:ef:65:3e:39:2f:df:55:d0:5f:8d:bb:77:de:6c:b7:
         8f:e4:55:93:19:18:20:c0:8c:6d:2b:11:e7:94:a6:84:31:62:
         d2:a3:bb:84:77:b4:5d:ef:22:91:c2:02:44:e0:b8:42:08:7f:
         30:dd:70:0f:3a:f9:e0:4f:8f:2c:12:1f:0f:de:6d:22:d1:71:
         9b:be:01:aa:68:c4:66:13:5b:76:dc:72:a6:eb:ed:41:9b:20:
         e5:0a:dc:44:e5:02:b5:40:78:b3:66:e2:c0:24:03:9b:be:bf:
         24:3e:39:d3:2b:47:33:fe:f9:4d:97:00:a4:ed:a6:83:49:53:
         f5:85:06:39:27:18:39:76:a1:6a:49:a8:9c:7e:67:4b:30:b7:
         cb:98:2d:3a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUfPYQjnAfXtFi1xmaG/M+VsbYyS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDAxMzAxMjI4MTRaFw0yNTAxMjgxMjMzMTRaMDMxMTAvBgNV
BAMTKEQwN0ExQjBGQTE2MzRFRjBCNEUxQTY0NDVGRTlEMjUzRUU2NTQ1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOuVvQeuB1Yyftu8XnQZztYdR
sZS3qlIOyK4PmviD2XstOHPY78hYw5zkjPQYbHQW+IKCk3WiVycV5Gq4WTitFVV7
9WEKW3l/dpykx32yySxwhjz9tV658B2Qv56TzWQ7LqnTAG3LTPqsgV0JULqERSWq
Vq/wuyOgeW5qUNFPvN+r71G5d7dxmuvAWKWY/Yu8u68fdq1gxnuQ4kcwu6Ypltdw
eQFoavwgrqaQOfdD949xs9zx9lr8oUIFAJ9AXhSbvY6YU7suHFYuL9NQUEDgpStU
uqCZtFQavJgQ+krOVFmUnre3uGinHGNQjMh4euLOgDlB4q7JmFY8dM3r5y5DAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU0HobD6FjTvC04aZEX+nSU+5lRe4wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1Ym+DANBgkqhkiG9w0B
AQsFAAOCAQEAKLpEvNEF6zIbrL4f8vgD3DFa9TMY9UKcJ9so95j3hkmf32kRjaoQ
GTkY1HlvHB4nVZ4ggsAfyDfS1iO2Olo4EsM3D2Zxhh+BfZQv9kDD9ATs4rzxsGkg
tlhIR0M3DAwMb6DFtm4y5LpgRzqfzmTz72U+OS/fVdBfjbt33my3j+RVkxkYIMCM
bSsR55SmhDFi0qO7hHe0Xe8ikcICROC4Qgh/MN1wDzr54E+PLBIfD95tItFxm74B
qmjEZhNbdtxypuvtQZsg5QrcROUCtUB4s2biwCQDm76/JD450ytHM/75TZcApO2m
g0lT9YUGOScYOXahakmonH5nSzC3y5gtOg==
-----END CERTIFICATE-----
Generated at Thu May 23 02:36:13 2024 by rpki-client on console-ams.rpki-client.org