Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa
File:                     AS212815.roa (raw, json)
Hash identifier:          Nje/AH2I7mSVNO00EGkQvZF05rdLuEAu0LFOkQeJDmM=
Subject key identifier:   BF:37:6F:62:84:35:28:0E:D8:11:41:39:AC:4A:85:92:3C:B7:D3:F6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       74F7A9E2E85775AC2ED8836956929C226CEBB8ED
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa
Signing time:             Thu 30 Nov 2023 20:04:10 +0000
ROA not before:           Thu 30 Nov 2023 19:59:10 +0000
ROA not after:            Thu 28 Nov 2024 20:04:10 +0000
asID:                     212815
IP address blocks:        89.116.127.0/24 maxlen: 24
                          89.117.70.0/24 maxlen: 24
                          89.117.71.0/24 maxlen: 24
                          89.117.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:a9:e2:e8:57:75:ac:2e:d8:83:69:56:92:9c:22:6c:eb:b8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 30 19:59:10 2023 GMT
            Not After : Nov 28 20:04:10 2024 GMT
        Subject: CN=BF376F628435280ED8114139AC4A85923CB7D3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:b5:5a:42:b2:07:12:d6:7a:7d:7f:96:22:
                    1e:07:5b:9f:7c:e6:aa:ed:30:d4:04:12:f3:1f:54:
                    7b:83:f9:bc:9b:d8:1b:b4:0b:72:c6:55:05:de:c0:
                    6e:2d:6b:13:b1:52:2c:e7:b0:d4:ee:a4:81:4e:a0:
                    e8:b7:e4:fb:43:4e:7b:f3:c1:65:3c:bb:4e:35:b3:
                    43:00:ff:21:00:ae:95:c1:1e:6a:26:8f:cf:65:81:
                    1f:79:bf:28:72:e3:51:60:af:0b:fc:6f:2b:38:83:
                    4e:7a:14:e7:12:6f:8d:ae:6c:90:79:ba:61:6a:a5:
                    7d:a6:4a:62:80:b4:81:57:ce:fc:02:cf:1b:a5:5a:
                    91:c7:12:66:bd:4c:94:e9:b7:f4:80:b9:8f:55:ef:
                    a9:b8:23:71:c5:5c:ea:44:53:38:1f:38:d1:97:66:
                    94:1b:e7:3e:ed:6d:ef:34:f9:a4:4b:88:62:d7:ca:
                    9a:db:6e:e9:77:92:e8:7b:48:70:47:b5:0d:b3:e7:
                    c5:f1:23:42:da:65:c0:91:58:8b:24:aa:ba:07:e4:
                    72:2e:94:7c:05:69:fe:c7:ad:af:37:b2:27:6e:b1:
                    7f:92:15:e4:cf:4e:24:f4:dc:5f:77:ec:6e:c1:7e:
                    8b:73:c8:f7:cd:5b:0a:57:eb:42:e9:c5:0a:4d:a1:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:6F:62:84:35:28:0E:D8:11:41:39:AC:4A:85:92:3C:B7:D3:F6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.127.0/24
                  89.117.70.0/23
                  89.117.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:e6:d3:35:0d:76:0a:c8:e9:89:ee:5b:20:bd:fd:97:76:a4:
         6d:bf:89:c7:b1:0a:b3:a2:c6:25:a1:de:a3:ac:33:e3:c3:28:
         0b:7f:1e:a3:66:81:2d:83:d2:d8:02:b6:2f:97:e7:df:0b:d3:
         9a:0c:da:61:59:7f:d1:1f:9e:5b:6d:64:f3:a0:bc:d7:62:2b:
         00:82:95:64:4a:20:90:57:c6:1a:4b:4f:16:e5:c3:49:6a:83:
         b3:8a:f1:f2:d3:e1:bc:fc:b2:18:41:49:b6:df:f1:78:bc:37:
         a6:20:5e:1f:07:a3:00:30:87:12:21:b1:33:ce:f7:cb:ca:39:
         6d:4a:3b:ab:45:c6:f9:8e:21:ed:e2:13:d9:17:87:02:87:18:
         5c:1c:28:83:06:de:7e:58:3b:f5:e2:b8:31:c9:65:f4:bd:22:
         6e:55:ac:3a:27:98:25:94:89:a2:78:a0:6f:48:14:4f:4b:5f:
         46:5b:55:d7:54:51:41:e1:36:35:21:8b:4a:5c:6d:4e:e4:de:
         7a:d3:3b:dc:46:67:e4:23:e3:fc:7d:20:81:b8:da:4f:04:93:
         1f:b5:93:38:53:cb:0f:79:6b:0e:d5:37:bb:ec:b9:cc:bc:14:
         03:30:96:ee:2f:0a:37:1f:92:4a:19:c6:aa:1d:61:52:6e:c0:
         db:4b:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org