Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
File:                     AS23161.roa (raw, json)
Hash identifier:          h26AlQWtTYOQa1I7K2CP9Nzhf2ZH+e3FeBHIEVQ7PIA=
Subject key identifier:   0C:1F:52:AE:40:F5:BD:F6:70:C7:9B:69:6D:BC:30:1B:39:BC:70:02
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7AB94886D7C76DEC621224EB1B0F2F96FE474B34
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
Signing time:             Fri 12 Jan 2024 17:05:08 +0000
ROA not before:           Fri 12 Jan 2024 17:00:08 +0000
ROA not after:            Fri 10 Jan 2025 17:05:08 +0000
asID:                     23161
IP address blocks:        89.117.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b9:48:86:d7:c7:6d:ec:62:12:24:eb:1b:0f:2f:96:fe:47:4b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 12 17:00:08 2024 GMT
            Not After : Jan 10 17:05:08 2025 GMT
        Subject: CN=0C1F52AE40F5BDF670C79B696DBC301B39BC7002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:2a:5e:11:09:cc:90:c7:8d:28:58:02:7a:
                    f7:f5:00:1f:6a:fc:b7:c3:32:39:86:86:05:29:31:
                    fb:7c:78:4f:ac:ae:a3:7b:d1:2b:22:a6:02:6e:94:
                    7f:9a:18:d2:ee:d7:39:c7:d7:38:33:e4:48:e8:57:
                    e9:16:9a:b7:52:72:81:77:f4:33:c8:53:0c:27:d6:
                    f6:43:5d:53:c5:03:00:ea:5c:2f:3b:a1:24:6d:90:
                    e1:da:73:0a:eb:56:7f:56:df:4a:bc:44:81:08:31:
                    fc:72:a1:56:1d:a6:5b:7a:52:ab:95:40:f5:d2:95:
                    2f:5d:7f:9b:27:75:80:8f:f2:5f:c2:cc:0e:3d:a2:
                    e0:1c:a9:8c:8d:b1:8b:a8:e0:f8:f6:56:e2:15:21:
                    2f:f5:74:8c:4e:b8:aa:28:c3:66:e8:74:c7:bd:1e:
                    71:99:58:7d:86:bf:56:e7:36:5e:28:61:e0:f5:a8:
                    40:87:1c:07:df:c6:4c:72:51:f9:08:e0:52:23:85:
                    b0:10:8a:67:ea:5c:db:d3:84:50:8a:4a:35:24:22:
                    c9:c9:79:9d:cf:7a:7c:f1:44:a6:20:b7:6d:53:75:
                    c5:d9:34:24:b2:7c:e5:a3:0b:63:81:74:0e:94:b2:
                    95:0a:f8:4c:dc:9b:c6:29:4a:3c:64:e3:e2:b4:2a:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:52:AE:40:F5:BD:F6:70:C7:9B:69:6D:BC:30:1B:39:BC:70:02
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:11:b3:30:7d:04:d2:fa:28:d8:35:bd:05:32:f1:03:28:43:
         e3:35:00:e6:fd:8d:92:7b:e6:3c:ea:45:ab:33:71:b4:69:ef:
         9d:5f:56:ef:32:1e:63:c7:1a:2f:fd:7f:90:89:05:91:d9:3e:
         7c:7b:e3:cc:ee:43:e5:dd:39:70:b2:7a:57:34:12:68:4e:cd:
         65:79:b0:f0:74:fc:fd:a7:9d:f5:41:c1:43:c2:05:d4:01:1f:
         c8:1c:e2:53:1e:24:9c:64:80:ce:69:07:c5:67:fc:a5:4b:a3:
         38:4e:0c:71:aa:a6:8a:15:80:9c:a4:ad:ff:10:d5:5a:9e:9f:
         ed:e0:85:93:d9:d1:3e:91:79:56:8a:5c:6a:96:7c:a3:45:8b:
         e4:6a:88:a2:e9:31:ba:5a:61:26:8f:75:0c:c2:bf:7e:b6:d2:
         29:3c:1b:b7:14:43:96:2c:08:73:72:7e:26:8f:24:23:73:8e:
         93:82:5e:e3:f5:8f:94:f6:7b:bb:8f:39:ea:bd:22:e9:dd:86:
         26:91:27:a8:c1:9f:f3:6b:20:da:9b:d1:17:eb:3d:30:95:fd:
         1c:bd:4e:24:3e:11:5b:6a:13:00:e4:c4:cc:5b:e7:a8:6a:79:
         92:7e:ea:0f:38:49:ba:7d:ed:dd:28:66:15:2f:55:3f:7d:56:
         63:8f:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:18 2024 by rpki-client on console-ams.rpki-client.org