Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
File:                     AS24723.roa (raw, json)
Hash identifier:          3IqwKygIbYbRbaU9JguGoGjCt5V+7RUQAHVTpBlKDnM=
Subject key identifier:   1B:A5:DE:77:48:EF:01:FD:CB:48:D0:86:87:54:DF:F4:23:02:A6:05
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       73B6295C490B3DCE833734EDCBE114FC5E00353A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
Signing time:             Fri 17 Nov 2023 06:14:59 +0000
ROA not before:           Fri 17 Nov 2023 06:09:59 +0000
ROA not after:            Fri 15 Nov 2024 06:14:59 +0000
asID:                     24723
IP address blocks:        89.117.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 May 2024 04:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b6:29:5c:49:0b:3d:ce:83:37:34:ed:cb:e1:14:fc:5e:00:35:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 17 06:09:59 2023 GMT
            Not After : Nov 15 06:14:59 2024 GMT
        Subject: CN=1BA5DE7748EF01FDCB48D0868754DFF42302A605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:f5:eb:c6:12:12:cc:d8:f5:08:88:af:0b:
                    84:6b:7a:e6:c9:e1:60:c3:b0:80:24:80:aa:f5:16:
                    48:9a:f8:5c:9e:34:4c:3b:63:26:08:8c:aa:fb:3b:
                    f7:e5:73:cd:98:4a:3c:5a:fb:57:19:26:d6:5f:db:
                    83:26:9d:db:ff:74:9b:56:b8:e1:f1:64:2f:98:9b:
                    37:2c:17:e0:0a:5c:85:cd:70:c1:e8:8e:3e:7b:2c:
                    8e:f1:13:20:aa:17:9d:c9:af:99:f1:8b:cf:a9:6d:
                    d1:fe:0c:4a:b8:d1:d8:a5:9f:15:0e:8d:8d:5f:48:
                    e8:5c:7d:88:25:7e:cc:7f:a1:6c:1f:d0:20:b7:60:
                    3d:00:64:17:65:1b:ea:3d:6b:db:33:4f:07:1b:9e:
                    c9:e0:52:54:ab:31:f3:11:60:30:41:c3:5e:5f:13:
                    b7:f2:29:1c:6b:a2:cf:52:85:8a:04:9c:a5:d6:9d:
                    2d:d0:34:49:26:a1:5a:94:ae:44:13:af:3a:8e:04:
                    43:11:8a:48:75:d4:3f:3e:31:ad:b8:43:5a:f5:75:
                    1e:23:b5:e1:ba:a8:6d:b3:fb:03:65:d6:2f:27:73:
                    5c:01:f7:6c:f4:74:c6:f8:96:2f:60:ba:74:62:30:
                    6b:24:9c:bd:be:4c:4a:cb:4e:cd:71:43:9f:6d:22:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:DE:77:48:EF:01:FD:CB:48:D0:86:87:54:DF:F4:23:02:A6:05
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:65:41:42:56:ae:6f:43:6e:f9:f3:6b:d5:6f:19:0f:a6:08:
         62:59:6c:d9:c1:c9:7f:6b:62:ee:e0:c1:94:0a:8f:c2:91:67:
         9f:00:01:b6:ad:1f:ea:5a:be:19:f5:4f:c2:59:cd:47:5b:94:
         e2:d1:51:a8:8a:1c:6a:fb:5f:f6:26:6f:09:14:ad:28:c4:e3:
         d7:2a:f6:21:53:11:cf:eb:37:88:3d:1a:55:c1:0f:d1:57:e0:
         7c:f1:67:44:1a:49:29:89:f7:e4:1f:e0:b5:af:5a:98:2b:fc:
         19:8a:cc:90:01:c4:e9:7f:72:69:e1:94:4e:02:6c:8f:6f:34:
         05:fb:07:60:5d:69:92:fd:e4:8e:0c:7c:2e:46:a9:ac:79:19:
         c1:f1:ab:81:70:ba:25:6b:21:b7:0e:23:6c:20:2f:d8:13:b5:
         c4:cb:13:9c:fa:56:17:2b:e4:a3:a8:92:be:26:44:0c:ad:54:
         7d:56:89:c0:4b:13:0e:08:ff:fc:83:0a:21:33:7b:5c:be:df:
         f0:e6:96:d3:d9:4a:1d:6f:32:e3:1f:ce:a9:a1:71:5d:03:d2:
         bc:e7:a1:ec:7d:ca:5a:ba:49:79:84:b5:47:ba:fa:19:84:e5:
         79:73:6c:19:6a:df:68:da:59:1c:c5:2d:56:db:61:56:ff:e6:
         46:ce:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 13:49:10 2024 by rpki-client on console-ams.rpki-client.org