Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa
File:                     AS212815.roa (raw, json)
Hash identifier:          aJ2TzCMeoOEsYTOQeh9bGxPTKTVjaw4JaX3BD+LQqgg=
Subject key identifier:   36:78:BB:B9:23:D3:F4:F8:9C:8E:5A:79:4C:C1:73:6B:8E:99:56:2D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       20F4AF31BAC78FBA3A96FDD9B9F0CF16A5C9179D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa
Signing time:             Sun 15 Sep 2024 00:01:59 +0000
ROA not before:           Sat 14 Sep 2024 23:56:59 +0000
ROA not after:            Sun 14 Sep 2025 00:01:59 +0000
asID:                     212815
IP address blocks:        89.116.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f4:af:31:ba:c7:8f:ba:3a:96:fd:d9:b9:f0:cf:16:a5:c9:17:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 14 23:56:59 2024 GMT
            Not After : Sep 14 00:01:59 2025 GMT
        Subject: CN=3678BBB923D3F4F89C8E5A794CC1736B8E99562D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:d9:25:75:88:af:ff:e2:80:91:99:a4:40:
                    1d:94:41:91:54:b8:12:54:0b:3a:9c:f8:a4:86:d0:
                    42:18:ce:1d:93:38:80:82:53:bc:90:32:b2:34:19:
                    15:37:93:15:84:87:af:10:6a:57:f4:e2:15:39:7b:
                    d2:64:e6:b6:ca:1f:cf:30:96:e8:92:4c:93:1a:4d:
                    f1:0a:ab:20:62:b1:e2:89:81:41:df:49:c4:64:cf:
                    b8:5b:a8:83:3a:f3:79:be:32:75:a1:66:d7:16:cc:
                    f3:76:c7:38:1c:a5:3c:70:e0:4c:fb:7a:c4:1f:9e:
                    3c:55:e8:59:f8:67:f6:c7:af:f1:1b:8f:bc:7e:99:
                    26:ab:52:32:5b:0c:f2:73:b8:a1:ec:ad:0e:e9:bf:
                    10:7d:a1:a3:0a:85:51:20:95:08:8d:81:66:fd:73:
                    55:7e:8b:93:e2:be:a9:ee:23:11:57:36:60:43:ea:
                    7c:77:6d:39:27:88:ed:08:b7:8f:b0:49:3b:f1:1f:
                    e6:b6:0f:53:b3:07:1b:b9:0e:ed:2c:66:65:e3:59:
                    01:52:58:cc:4d:57:0f:f5:6a:12:7d:2e:fa:ed:99:
                    91:46:94:47:8a:f2:e4:b7:6d:2e:f2:fc:41:c3:8d:
                    88:9f:71:26:15:bb:0b:66:a0:52:3b:64:e7:7f:28:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:BB:B9:23:D3:F4:F8:9C:8E:5A:79:4C:C1:73:6B:8E:99:56:2D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:72:a0:a5:40:24:37:02:e5:78:62:b6:78:2e:42:18:8e:83:
         bf:da:83:c9:bb:88:27:53:00:9b:59:d1:df:b8:61:34:6e:a3:
         4a:9b:89:27:99:82:ae:80:67:2f:58:5e:f8:29:87:9a:22:29:
         28:dc:3a:df:5b:6f:a8:a8:46:46:b1:08:c6:c8:52:4e:55:24:
         fb:80:98:73:9d:a7:39:c8:91:60:d2:6e:66:72:d7:b4:14:78:
         fa:67:27:fe:db:54:56:3a:87:75:5e:1d:e1:ca:e9:89:01:bf:
         2f:5d:7f:5b:40:05:19:94:66:ef:21:d6:44:25:7c:05:66:dc:
         8d:37:8e:ae:15:7d:63:72:6e:e8:74:4f:ec:63:50:13:2d:30:
         af:ca:ea:7e:2e:ac:d4:92:b8:ac:b5:78:45:68:f2:08:b6:a8:
         e7:13:5a:4d:86:7e:c9:1d:fd:05:70:5a:d3:46:4a:58:ca:90:
         e7:a8:0e:25:55:3d:8b:8f:f2:a1:32:0f:cf:05:86:f7:57:52:
         af:f2:8d:56:7b:23:72:cd:7a:a5:65:dd:7f:b3:af:de:26:4d:
         c3:96:1e:d4:6f:00:71:49:a8:f3:b9:6e:72:3a:48:d3:de:80:
         cd:4e:1d:94:b4:d6:20:8f:67:98:ad:cf:f4:25:54:ff:73:7e:
         19:c5:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org