Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215727.roa
File:                     AS215727.roa (raw, json)
Hash identifier:          Gv8oMSfnIwSPx5NipuAY+EBLC4MhAC2IGyuIbRtvdCY=
Subject key identifier:   9D:89:8F:17:1D:88:A9:07:FD:E8:4C:DC:70:43:67:D3:2D:57:31:07
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       23F19A2923F9E6D08B55D7621B97860364C74BD7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215727.roa
Signing time:             Sun 08 Sep 2024 20:56:03 +0000
ROA not before:           Sun 08 Sep 2024 20:51:03 +0000
ROA not after:            Sun 07 Sep 2025 20:56:03 +0000
asID:                     215727
IP address blocks:        89.116.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f1:9a:29:23:f9:e6:d0:8b:55:d7:62:1b:97:86:03:64:c7:4b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  8 20:51:03 2024 GMT
            Not After : Sep  7 20:56:03 2025 GMT
        Subject: CN=9D898F171D88A907FDE84CDC704367D32D573107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:f0:e9:40:36:33:5e:f0:a5:bd:5a:6f:54:
                    26:dd:e1:30:62:5e:88:db:dc:57:d9:bc:f4:e9:89:
                    53:55:59:6d:35:df:ac:7e:59:de:0d:d8:c4:c3:03:
                    f6:d4:69:b9:ab:bc:32:c7:4d:3c:67:d7:68:39:c7:
                    3d:7a:3b:35:a3:22:6e:ec:ba:25:d3:03:2d:2f:3e:
                    34:af:fa:69:a7:ae:26:c7:b5:8a:7d:e5:bf:1b:42:
                    29:3d:17:f1:e9:9c:95:ba:64:b9:de:17:81:20:43:
                    4b:53:ed:5b:51:e0:cb:9d:f3:77:7c:4b:39:a3:6e:
                    ac:c6:cf:7b:0c:a7:be:8d:30:12:53:54:f1:c0:b9:
                    61:29:e8:45:d3:fd:10:f1:d4:3c:86:de:5d:86:bf:
                    9c:2a:5b:84:94:34:23:d2:2b:47:04:b1:da:bf:b3:
                    82:d3:7f:c1:ef:94:2c:0d:b6:e5:96:a2:21:7b:d7:
                    24:e8:7d:d0:2f:18:fd:69:94:ee:68:e7:08:53:c0:
                    35:1a:a2:dd:c6:05:03:7a:58:da:ef:c0:78:e6:bb:
                    9c:40:2b:e3:b1:89:a4:76:06:6b:97:0f:14:2d:fc:
                    45:14:69:6f:13:bc:69:47:c9:5d:00:cd:7e:01:34:
                    c4:4b:98:ca:60:b6:dd:74:d9:e3:06:00:c7:0c:a4:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:89:8F:17:1D:88:A9:07:FD:E8:4C:DC:70:43:67:D3:2D:57:31:07
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS215727.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:02:64:b8:4d:9f:a9:a4:a7:16:9b:36:be:76:7a:f0:02:50:
         a5:7f:a3:2a:f4:c1:da:09:4b:6e:ff:cb:68:40:8f:71:02:c8:
         cb:0d:5c:f6:be:05:a5:d2:b1:1e:6c:20:3d:0d:e4:66:3d:17:
         4e:17:c0:96:bf:e5:7f:17:d1:0e:fe:59:61:3d:ea:7b:04:d0:
         a0:16:93:c8:ab:59:05:9e:24:51:ed:63:8f:df:7c:ed:bb:e1:
         bc:92:81:a6:b7:9a:7b:7d:11:f5:24:22:0e:00:47:c7:a9:fa:
         69:a1:08:6a:7a:06:e9:33:d0:7e:e6:8e:45:e1:42:5b:32:82:
         ef:fd:fe:8b:2f:57:85:31:1c:e0:a2:ce:a0:9d:ba:cd:d7:49:
         56:4c:43:37:de:ee:6c:72:cf:63:83:96:c4:d8:75:bc:73:35:
         e1:cb:f4:bc:1e:c6:40:3a:cf:28:e1:4b:60:70:5d:18:c0:85:
         c5:41:1f:61:f4:9b:e0:57:8f:c9:bc:42:8c:be:be:90:ba:ba:
         ef:79:59:26:ed:16:c3:15:7c:08:33:8f:ef:2a:31:2f:d8:37:
         fc:02:7f:35:b8:b2:96:b9:9e:ac:b1:21:1c:70:10:0c:5f:94:
         68:e7:6d:bd:63:95:7c:3e:ca:7e:52:83:08:8a:83:ad:09:2c:
         05:82:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org