Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
File:                     AS24723.roa (raw, json)
Hash identifier:          nwRZXkGYTOAAnRDNu6N4/FsQwtUniF5+ff2ZrX1c7Gs=
Subject key identifier:   1E:2A:35:18:0D:6A:48:3B:F9:B7:8E:1E:7D:B8:AE:FF:63:BF:D0:4D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       74BD67A2DF0CB353818338C2CE29A4637D67A0B0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
Signing time:             Fri 18 Oct 2024 06:43:25 +0000
ROA not before:           Fri 18 Oct 2024 06:38:25 +0000
ROA not after:            Fri 17 Oct 2025 06:43:25 +0000
asID:                     24723
IP address blocks:        89.117.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:67:a2:df:0c:b3:53:81:83:38:c2:ce:29:a4:63:7d:67:a0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 18 06:38:25 2024 GMT
            Not After : Oct 17 06:43:25 2025 GMT
        Subject: CN=1E2A35180D6A483BF9B78E1E7DB8AEFF63BFD04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:c8:01:11:ac:47:c8:37:28:ce:36:9f:6b:
                    d9:21:05:46:b3:34:3a:c6:74:88:dd:9d:16:47:95:
                    76:52:56:a7:2e:67:3b:2d:a7:73:99:fb:46:bf:41:
                    4a:f9:f6:83:18:85:7e:d0:bf:92:f0:b0:fa:87:5d:
                    d9:4b:a6:e8:fb:2a:7d:d1:cb:62:16:93:af:cf:02:
                    df:4c:41:25:44:57:1f:19:4d:84:a3:26:96:ab:42:
                    d4:04:10:cb:1a:57:4b:8f:23:85:8f:3e:14:f2:65:
                    67:63:2b:b4:f1:33:8c:8f:90:92:69:5f:5a:03:d6:
                    9e:1e:cc:bb:81:2a:ec:aa:54:38:13:0f:31:55:61:
                    db:66:e7:25:43:58:b7:21:8f:18:ab:e1:50:da:61:
                    01:9b:1d:5c:95:5a:b4:91:d6:c9:69:d1:10:43:8b:
                    00:76:ee:63:c1:83:3e:a1:4d:33:e2:83:a7:f8:d7:
                    fb:97:10:fb:72:b3:db:a5:04:97:e4:bd:5a:bc:bf:
                    79:37:ee:d6:45:d4:3d:c4:fe:61:e9:32:98:fc:43:
                    97:1b:03:09:e7:c8:75:49:08:18:20:07:3e:fe:c2:
                    94:87:4a:fd:55:6a:f3:07:b6:d9:79:88:00:f7:c0:
                    8c:21:d8:20:80:60:69:be:5d:6e:d4:1c:e5:52:a6:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:35:18:0D:6A:48:3B:F9:B7:8E:1E:7D:B8:AE:FF:63:BF:D0:4D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:35:f8:0e:7f:c4:02:eb:33:91:24:8c:47:49:44:5f:8e:
         ed:b8:82:2d:4b:80:f3:a7:86:44:ea:d4:2c:b0:d9:6c:de:08:
         38:f5:f3:ef:4f:cf:b6:95:cf:e4:52:bd:c9:17:43:63:a3:72:
         1d:8d:91:1d:cc:d4:f2:a3:e5:ae:fd:05:2e:35:4e:0c:3d:40:
         0a:23:ab:5b:8c:c3:09:27:82:a7:99:75:89:ff:45:74:7f:8f:
         54:3f:3f:e9:ce:99:dc:ab:23:4d:50:0b:d8:1e:9c:aa:52:0f:
         ef:67:8f:65:58:c2:68:5d:0f:f0:c3:d5:ad:51:4e:1c:cf:f3:
         a0:f6:d3:ee:58:1f:12:6a:41:97:df:64:56:1c:ed:f1:6a:ec:
         7f:2e:e3:b6:26:6b:13:04:d2:07:fc:72:0d:c7:9c:1b:0f:8c:
         44:c7:e3:bd:87:95:7c:ab:5e:71:98:b2:d9:9e:f9:87:5b:7e:
         30:97:03:e6:72:5f:d6:3d:66:73:fb:c9:03:dc:64:05:34:d2:
         c9:84:b3:c1:37:88:24:00:73:e5:28:f6:1b:df:25:7f:35:b2:
         9c:16:65:a8:e9:f4:ea:4d:5f:3a:fc:79:c3:6b:7a:88:f0:8a:
         8d:ae:ff:56:b6:05:7b:77:30:03:39:48:1e:75:9d:d1:fa:34:
         d9:3c:24:a6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUdL1not8Ms1OBgzjCzimkY31noLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDEwMTgwNjM4MjVaFw0yNTEwMTcwNjQzMjVaMDMxMTAvBgNV
BAMTKDFFMkEzNTE4MEQ2QTQ4M0JGOUI3OEUxRTdEQjhBRUZGNjNCRkQwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL88gBEaxHyDcozjafa9khBUaz
NDrGdIjdnRZHlXZSVqcuZzstp3OZ+0a/QUr59oMYhX7Qv5LwsPqHXdlLpuj7Kn3R
y2IWk6/PAt9MQSVEVx8ZTYSjJparQtQEEMsaV0uPI4WPPhTyZWdjK7TxM4yPkJJp
X1oD1p4ezLuBKuyqVDgTDzFVYdtm5yVDWLchjxir4VDaYQGbHVyVWrSR1slp0RBD
iwB27mPBgz6hTTPig6f41/uXEPtys9ulBJfkvVq8v3k37tZF1D3E/mHpMpj8Q5cb
AwnnyHVJCBggBz7+wpSHSv1VavMHttl5iAD3wIwh2CCAYGm+XW7UHOVSpmV7AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUHio1GA1qSDv5t44efbiu/2O/0E0wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzI0NzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXWnMA0GCSqGSIb3DQEB
CwUAA4IBAQAsMzX4Dn/EAuszkSSMR0lEX47tuIItS4Dzp4ZE6tQssNls3gg49fPv
T8+2lc/kUr3JF0Njo3IdjZEdzNTyo+Wu/QUuNU4MPUAKI6tbjMMJJ4KnmXWJ/0V0
f49UPz/pzpncqyNNUAvYHpyqUg/vZ49lWMJoXQ/ww9WtUU4cz/Og9tPuWB8SakGX
32RWHO3xaux/LuO2JmsTBNIH/HINx5wbD4xEx+O9h5V8q15xmLLZnvmHW34wlwPm
cl/WPWZz+8kD3GQFNNLJhLPBN4gkAHPlKPYb3yV/NbKcFmWo6fTqTV86/HnDa3qI
8IqNrv9WtgV7dzADOUgedZ3R+jTZPCSm
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org