Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215638.roa
File:                     AS215638.roa (raw, json)
Hash identifier:          JYgN1l7EBbZY/z90miKFM3DZ7tujHtcqbT2bklsFBVE=
Subject key identifier:   75:5B:46:A0:01:DD:46:94:07:E2:53:81:DA:86:E9:98:EB:21:EB:B4
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3792B384ED462FA6242703574FEE73E645A12114
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215638.roa
Signing time:             Sat 06 Apr 2024 08:11:00 +0000
ROA not before:           Sat 06 Apr 2024 08:06:00 +0000
ROA not after:            Sat 05 Apr 2025 08:11:00 +0000
asID:                     215638
IP address blocks:        89.117.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:92:b3:84:ed:46:2f:a6:24:27:03:57:4f:ee:73:e6:45:a1:21:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr  6 08:06:00 2024 GMT
            Not After : Apr  5 08:11:00 2025 GMT
        Subject: CN=755B46A001DD469407E25381DA86E998EB21EBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:6f:e0:68:03:7e:87:ca:77:d5:8e:ac:fd:
                    93:d3:9c:f9:11:21:3f:3c:15:ec:78:fc:a6:c4:37:
                    0d:9a:17:9b:36:80:e5:89:16:32:af:27:54:e0:78:
                    11:8f:da:13:8c:7c:8f:56:51:46:99:9a:66:17:15:
                    66:c1:6b:80:dc:11:f6:c7:79:69:03:e1:59:a4:a7:
                    86:83:7b:37:4a:a1:23:b1:ad:11:c8:4c:59:2a:dc:
                    e3:df:17:28:b9:a0:db:ae:9c:e4:07:17:8e:0d:ca:
                    50:60:ba:38:f3:14:d6:54:d8:49:1c:bc:c7:dd:e0:
                    9e:6e:f3:ad:33:94:57:7a:ad:93:c2:9d:29:bd:f7:
                    a1:38:cb:c2:8b:0d:82:59:6f:c9:45:73:6c:83:30:
                    23:9a:93:96:92:b1:70:02:f5:03:31:4b:92:9d:2c:
                    2a:be:34:16:3d:8f:54:11:cb:4f:c7:37:11:28:a8:
                    af:d1:8f:df:ab:d8:8d:41:ae:5c:15:a1:24:ba:3e:
                    a4:5b:9c:50:88:3a:ef:1c:31:f4:06:25:94:f6:8c:
                    e6:84:fe:4d:4f:f8:c9:f4:f9:9a:b1:b3:c1:82:62:
                    26:93:79:38:00:86:8d:35:da:f4:0a:41:5c:bd:da:
                    68:2d:20:f7:9d:85:1b:24:f7:f4:cc:6d:f6:ad:7d:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:46:A0:01:DD:46:94:07:E2:53:81:DA:86:E9:98:EB:21:EB:B4
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:39:2e:8f:f0:e9:8a:e0:ce:78:05:82:a2:a3:ab:7a:7c:
         95:e6:2a:d6:92:d0:68:bc:8e:1b:b6:57:02:2b:4f:7e:39:b5:
         b2:64:43:fa:2e:5c:96:0f:5c:65:ea:cb:16:a7:64:de:86:ad:
         40:9e:fd:51:f6:00:0c:af:ac:26:8f:f4:4c:41:3a:12:e1:21:
         93:bd:e3:5b:06:4b:39:a8:c7:e2:8e:3a:ad:f7:be:0d:dc:a8:
         66:29:ed:b8:f2:27:ae:c2:62:19:9e:d6:6e:3e:a2:bc:b1:79:
         aa:26:80:b1:40:75:65:72:1d:32:48:78:64:2c:ad:ac:84:5d:
         e7:55:0a:bc:0c:32:8c:a2:be:71:ec:fe:8e:49:e7:a9:95:76:
         f4:16:68:31:8b:b1:e9:3e:43:ae:5e:09:5e:36:c0:d1:a7:5f:
         bc:f9:a1:4f:37:6a:db:03:0b:27:5d:c2:b3:98:37:34:75:9c:
         a3:70:a9:73:36:b9:31:0f:51:de:2a:7d:0d:07:6d:1f:a2:69:
         dd:c3:80:11:26:e8:3d:de:1b:dd:16:19:16:4c:8d:ed:20:bc:
         27:d3:fb:2c:12:d9:a9:bb:cd:00:ce:59:4b:56:1b:de:c8:09:
         f7:0e:5c:52:b1:3d:a4:3c:1e:a0:c5:45:4f:2c:44:65:9b:7f:
         18:a4:78:f9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUN5KzhO1GL6YkJwNXT+5z5kWhIRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA0MDYwODA2MDBaFw0yNTA0MDUwODExMDBaMDMxMTAvBgNV
BAMTKDc1NUI0NkEwMDFERDQ2OTQwN0UyNTM4MURBODZFOTk4RUIyMUVCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83G/gaAN+h8p31Y6s/ZPTnPkR
IT88Fex4/KbENw2aF5s2gOWJFjKvJ1TgeBGP2hOMfI9WUUaZmmYXFWbBa4DcEfbH
eWkD4Vmkp4aDezdKoSOxrRHITFkq3OPfFyi5oNuunOQHF44NylBgujjzFNZU2Ekc
vMfd4J5u860zlFd6rZPCnSm996E4y8KLDYJZb8lFc2yDMCOak5aSsXAC9QMxS5Kd
LCq+NBY9j1QRy0/HNxEoqK/Rj9+r2I1BrlwVoSS6PqRbnFCIOu8cMfQGJZT2jOaE
/k1P+Mn0+Zqxs8GCYiaTeTgAho012vQKQVy92mgtIPedhRsk9/TMbfatfZLbAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUdVtGoAHdRpQH4lOB2obpmOsh67QwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxNTYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl12jANBgkqhkiG9w0B
AQsFAAOCAQEAuPI5Lo/w6YrgzngFgqKjq3p8leYq1pLQaLyOG7ZXAitPfjm1smRD
+i5clg9cZerLFqdk3oatQJ79UfYADK+sJo/0TEE6EuEhk73jWwZLOajH4o46rfe+
DdyoZintuPInrsJiGZ7Wbj6ivLF5qiaAsUB1ZXIdMkh4ZCytrIRd51UKvAwyjKK+
cez+jknnqZV29BZoMYux6T5Drl4JXjbA0adfvPmhTzdq2wMLJ13Cs5g3NHWco3Cp
cza5MQ9R3ip9DQdtH6Jp3cOAESboPd4b3RYZFkyN7SC8J9P7LBLZqbvNAM5ZS1Yb
3sgJ9w5cUrE9pDweoMVFTyxEZZt/GKR4+Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org