Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa
File:                     AS216285.roa (raw, json)
Hash identifier:          G5iVeybwniXTyzCFTpN4f9R/FOv/tSUEfnHXpnz6wwU=
Subject key identifier:   43:81:BA:C9:11:5F:69:6D:3C:DF:E2:C4:39:55:B7:08:63:8F:3C:2A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3E8A5EFF27AC14776E68F43892C5669365C16E74
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa
Signing time:             Thu 21 Sep 2023 18:32:38 +0000
ROA not before:           Thu 21 Sep 2023 18:27:38 +0000
ROA not after:            Thu 19 Sep 2024 18:32:38 +0000
asID:                     216285
IP address blocks:        89.117.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:5e:ff:27:ac:14:77:6e:68:f4:38:92:c5:66:93:65:c1:6e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 21 18:27:38 2023 GMT
            Not After : Sep 19 18:32:38 2024 GMT
        Subject: CN=4381BAC9115F696D3CDFE2C43955B708638F3C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:03:32:c3:ba:55:3a:31:73:3a:f4:dd:a9:
                    4c:31:0a:08:3e:50:ea:b0:83:ea:fc:5d:25:d3:df:
                    ef:29:0e:4f:ad:e6:6b:d9:2d:dd:43:0d:d5:60:85:
                    5e:6d:5f:de:77:12:87:47:85:47:0c:6f:1c:c3:27:
                    35:58:78:d3:07:90:65:7b:d8:40:7f:2d:bf:2e:ac:
                    4d:24:9e:6e:41:3b:cf:9a:19:cb:46:24:8e:64:a0:
                    59:b5:71:70:d6:23:bc:88:e0:d6:60:6a:a6:a6:1f:
                    1c:d4:2a:b0:4e:b5:0f:fa:43:f7:3f:c2:2c:99:9e:
                    ad:0a:9f:49:eb:88:c9:8e:f2:35:c4:9a:09:b4:7f:
                    d7:80:a0:f6:ca:9c:61:0d:38:ac:a9:fa:40:9d:c9:
                    4f:5c:36:88:b2:88:5c:97:73:0e:87:7a:0e:79:22:
                    8b:44:c9:a5:3d:07:f7:71:3b:b9:44:41:ee:16:08:
                    c0:e4:c9:54:6a:87:a5:34:fd:16:64:3b:53:83:b4:
                    8e:6f:7c:94:fc:5c:39:d7:85:7c:a8:16:eb:73:0b:
                    87:14:84:7f:8f:df:b0:ac:10:c4:63:c0:25:5c:be:
                    98:46:6c:3e:52:84:aa:07:72:78:a0:aa:0b:d0:0e:
                    a8:72:e4:87:d3:62:cb:2c:6f:30:85:eb:ca:8e:52:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:BA:C9:11:5F:69:6D:3C:DF:E2:C4:39:55:B7:08:63:8F:3C:2A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216285.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:2e:79:0c:c7:0a:5e:24:b8:ae:26:b5:e9:78:92:08:7f:
         17:c0:48:e1:bf:40:24:31:97:70:7b:6e:96:f5:c7:96:53:8d:
         5b:b2:8b:1b:53:cc:b5:5a:35:29:73:aa:71:d6:a9:63:01:cf:
         0f:fd:55:17:06:d5:e3:4e:8b:9a:97:cf:e2:6a:32:ae:4c:b1:
         57:8e:79:45:36:35:fc:03:de:83:76:a8:1c:e2:16:38:38:bf:
         2a:3c:bd:7f:b6:58:6a:18:6f:c4:80:ac:f9:89:a7:08:dd:e1:
         76:96:37:94:87:fe:fb:65:2c:d0:e7:80:a0:30:c4:91:17:71:
         78:c5:9b:48:c6:06:67:38:30:f7:c8:1f:f4:98:62:94:82:8d:
         7d:af:76:14:c9:76:06:f0:23:1f:3c:1c:24:4d:e4:5a:8f:15:
         1c:ac:3c:68:88:09:07:9f:c3:75:01:14:97:e6:93:98:8e:a8:
         7d:c4:e4:40:e1:4b:d9:94:69:be:7d:c9:36:e3:c9:d2:85:09:
         ad:41:77:f4:fc:ae:2a:49:fa:28:fc:86:df:6a:a8:55:f1:20:
         1b:85:f8:ae:3d:2d:d6:1f:dd:c6:a8:44:6d:c5:2d:f2:71:36:
         ba:b9:d4:8c:23:d5:6b:0c:b2:61:d5:df:ca:e4:7c:77:d0:79:
         20:28:71:ef
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUPope/yesFHduaPQ4ksVmk2XBbnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzA5MjExODI3MzhaFw0yNDA5MTkxODMyMzhaMDMxMTAvBgNV
BAMTKDQzODFCQUM5MTE1RjY5NkQzQ0RGRTJDNDM5NTVCNzA4NjM4RjNDMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKgMyw7pVOjFzOvTdqUwxCgg+
UOqwg+r8XSXT3+8pDk+t5mvZLd1DDdVghV5tX953EodHhUcMbxzDJzVYeNMHkGV7
2EB/Lb8urE0knm5BO8+aGctGJI5koFm1cXDWI7yI4NZgaqamHxzUKrBOtQ/6Q/c/
wiyZnq0Kn0nriMmO8jXEmgm0f9eAoPbKnGENOKyp+kCdyU9cNoiyiFyXcw6Heg55
IotEyaU9B/dxO7lEQe4WCMDkyVRqh6U0/RZkO1ODtI5vfJT8XDnXhXyoFutzC4cU
hH+P37CsEMRjwCVcvphGbD5ShKoHcnigqgvQDqhy5IfTYsssbzCF68qOUpLjAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUQ4G6yRFfaW083+LEOVW3CGOPPCowHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxNjI4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1mDANBgkqhkiG9w0B
AQsFAAOCAQEAbogueQzHCl4kuK4mtel4kgh/F8BI4b9AJDGXcHtulvXHllONW7KL
G1PMtVo1KXOqcdapYwHPD/1VFwbV406LmpfP4moyrkyxV455RTY1/APeg3aoHOIW
ODi/Kjy9f7ZYahhvxICs+YmnCN3hdpY3lIf++2Us0OeAoDDEkRdxeMWbSMYGZzgw
98gf9JhilIKNfa92FMl2BvAjHzwcJE3kWo8VHKw8aIgJB5/DdQEUl+aTmI6ofcTk
QOFL2ZRpvn3JNuPJ0oUJrUF39PyuKkn6KPyG32qoVfEgG4X4rj0t1h/dxqhEbcUt
8nE2urnUjCPVawyyYdXfyuR8d9B5IChx7w==
-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org