Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          X6DIRfFAm0h+I8JQuNTXt+C63Dy2z4o5SZeuIsyH5RU=
Subject key identifier:   DE:79:CC:94:98:D3:06:69:A2:4B:83:75:0F:5D:95:C2:92:F9:0A:4D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1232F6F7524A19B606FF2B90D83D75D1E00F8A22
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
Signing time:             Fri 12 Jul 2024 04:26:20 +0000
ROA not before:           Fri 12 Jul 2024 04:21:20 +0000
ROA not after:            Fri 11 Jul 2025 04:26:20 +0000
asID:                     23470
IP address blocks:        89.116.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:f6:f7:52:4a:19:b6:06:ff:2b:90:d8:3d:75:d1:e0:0f:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 12 04:21:20 2024 GMT
            Not After : Jul 11 04:26:20 2025 GMT
        Subject: CN=DE79CC9498D30669A24B83750F5D95C292F90A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:da:45:ec:c3:23:1d:5f:cb:2c:74:64:f0:
                    2b:b4:6a:77:4d:44:66:4c:24:f5:a2:3f:7b:32:96:
                    31:f4:0f:86:e2:ab:66:a4:b8:e0:57:9b:1e:53:86:
                    06:f4:00:41:7e:cb:0a:85:6a:41:de:4a:1a:5b:50:
                    6e:3b:dc:25:34:e3:f4:6a:0b:cf:8c:e3:30:b8:b8:
                    fc:ce:8d:c3:46:05:72:82:74:44:e4:23:cb:8b:f9:
                    11:8c:2b:7a:b3:4e:a0:2c:33:15:93:d6:c6:37:f6:
                    ff:41:27:b7:e5:42:04:7d:1d:ff:3f:c3:2a:5d:7c:
                    02:9e:dd:ce:63:fb:fc:21:b1:0b:56:5f:fe:9f:fe:
                    9c:a3:db:04:7b:00:23:dd:70:9b:a4:1a:43:0b:67:
                    4e:29:8b:3b:17:44:1e:ed:fb:05:0c:6a:da:25:02:
                    65:a5:9e:3b:c2:82:67:fc:95:78:f7:dc:e0:3b:5f:
                    3f:6e:84:20:24:31:01:21:fa:3d:35:1b:5a:e1:d0:
                    05:17:85:68:78:c2:aa:2c:ae:f5:38:bd:d3:53:c9:
                    76:7b:53:1b:ab:25:d4:ae:32:74:57:68:6f:e7:fd:
                    0b:69:8b:53:ba:ae:48:6e:dd:06:d8:65:81:d1:91:
                    0d:99:31:9e:d9:e5:60:fc:34:90:0c:eb:20:e1:84:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:79:CC:94:98:D3:06:69:A2:4B:83:75:0F:5D:95:C2:92:F9:0A:4D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:2b:66:c5:ff:ca:98:92:5e:46:32:a9:b7:de:bf:99:9b:
         1a:0d:15:b9:02:72:2a:2c:4c:52:60:f8:95:ce:60:1f:6a:5f:
         d2:29:32:0b:48:e0:37:60:a2:e7:6a:85:36:c0:c6:7f:db:5e:
         27:b5:e9:7d:ab:c3:51:c9:9b:ea:26:db:68:aa:9f:d4:14:3b:
         2f:a5:50:fe:30:4c:d2:08:d9:d3:af:6d:b8:2e:80:b9:95:93:
         5c:52:91:e8:b0:e9:43:dc:a5:08:a4:91:62:35:5d:ec:b3:8c:
         de:59:b3:3c:e3:08:25:7b:ba:22:20:ec:7f:bc:37:65:3b:e2:
         a9:57:78:ba:9d:a4:51:4f:33:31:9c:0b:4a:e5:2e:d9:a0:8b:
         5e:9b:00:7b:b7:34:06:65:a7:94:8c:71:4c:17:5d:10:6e:23:
         f2:7c:32:44:43:22:5d:02:26:3d:3d:74:b2:7d:e8:7e:85:df:
         6c:39:b5:dd:ee:55:98:c1:ec:ec:14:4f:a5:12:44:72:fd:29:
         9e:4e:c7:e9:24:35:b2:c3:c2:48:c9:71:5e:ee:fa:ea:91:85:
         87:42:5c:30:c2:ee:c6:29:73:5c:d9:fb:67:7d:20:e2:6f:d9:
         94:d1:ed:a0:cd:fc:f1:0e:a3:ae:b4:92:4d:74:24:72:dd:18:
         65:79:98:e0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUEjL291JKGbYG/yuQ2D110eAPiiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA3MTIwNDIxMjBaFw0yNTA3MTEwNDI2MjBaMDMxMTAvBgNV
BAMTKERFNzlDQzk0OThEMzA2NjlBMjRCODM3NTBGNUQ5NUMyOTJGOTBBNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2b9pF7MMjHV/LLHRk8Cu0andN
RGZMJPWiP3syljH0D4biq2akuOBXmx5Thgb0AEF+ywqFakHeShpbUG473CU04/Rq
C8+M4zC4uPzOjcNGBXKCdETkI8uL+RGMK3qzTqAsMxWT1sY39v9BJ7flQgR9Hf8/
wypdfAKe3c5j+/whsQtWX/6f/pyj2wR7ACPdcJukGkMLZ04pizsXRB7t+wUMatol
AmWlnjvCgmf8lXj33OA7Xz9uhCAkMQEh+j01G1rh0AUXhWh4wqosrvU4vdNTyXZ7
UxurJdSuMnRXaG/n/Qtpi1O6rkhu3QbYZYHRkQ2ZMZ7Z5WD8NJAM6yDhhIH7AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU3nnMlJjTBmmiS4N1D12VwpL5Ck0wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSkMA0GCSqGSIb3DQEB
CwUAA4IBAQBOOitmxf/KmJJeRjKpt96/mZsaDRW5AnIqLExSYPiVzmAfal/SKTIL
SOA3YKLnaoU2wMZ/214ntel9q8NRyZvqJttoqp/UFDsvpVD+MEzSCNnTr224LoC5
lZNcUpHosOlD3KUIpJFiNV3ss4zeWbM84wgle7oiIOx/vDdlO+KpV3i6naRRTzMx
nAtK5S7ZoItemwB7tzQGZaeUjHFMF10QbiPyfDJEQyJdAiY9PXSyfeh+hd9sObXd
7lWYwezsFE+lEkRy/SmeTsfpJDWyw8JIyXFe7vrqkYWHQlwwwu7GKXNc2ftnfSDi
b9mU0e2gzfzxDqOutJJNdCRy3RhleZjg
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org