Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24961.roa
File:                     AS24961.roa (raw, json)
Hash identifier:          hOvoSGKh/sBTtOrUsapQxMaZekmotmiTF2UZ9ZNfUUY=
Subject key identifier:   05:8E:3E:03:94:E5:EA:D9:27:57:C0:DF:ED:46:73:03:27:EF:CE:DF
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       46B323F4D98E2CADF255B46CCF1917E159513731
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24961.roa
Signing time:             Mon 04 Dec 2023 18:05:08 +0000
ROA not before:           Mon 04 Dec 2023 18:00:08 +0000
ROA not after:            Mon 02 Dec 2024 18:05:08 +0000
asID:                     24961
IP address blocks:        89.117.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:23:f4:d9:8e:2c:ad:f2:55:b4:6c:cf:19:17:e1:59:51:37:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec  4 18:00:08 2023 GMT
            Not After : Dec  2 18:05:08 2024 GMT
        Subject: CN=058E3E0394E5EAD92757C0DFED46730327EFCEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:68:dc:bd:74:d0:d8:0a:bc:da:6b:45:b3:
                    57:80:f0:71:69:5d:44:ec:6e:20:3e:aa:97:f7:4a:
                    6a:53:96:a5:1e:d1:54:54:91:87:ef:c0:14:97:b4:
                    33:c9:5e:e4:7c:1f:76:90:f6:1f:82:79:ec:92:48:
                    58:85:68:d2:b8:e8:08:55:62:17:bd:12:50:f6:fc:
                    69:54:6d:be:16:eb:96:f9:72:5f:66:fc:72:b7:31:
                    0e:b3:30:18:cd:1d:1a:67:dd:00:67:29:1c:a6:a5:
                    f6:94:24:c4:a4:72:e7:02:a8:69:52:7d:ed:14:e7:
                    fe:e9:01:90:41:8e:0c:42:ea:3d:af:e2:a1:bd:df:
                    93:90:1b:0e:71:e0:05:e4:6a:90:05:67:be:36:03:
                    35:20:42:5d:0c:5e:cd:f3:08:42:e2:8b:bf:54:05:
                    f1:c4:61:01:14:fa:a5:98:db:32:c4:aa:87:53:d6:
                    e2:ee:6a:12:66:04:5f:4f:1a:8a:30:c2:32:2f:dc:
                    38:17:59:db:b1:6f:17:7c:b2:29:e5:a7:e3:2a:38:
                    07:49:06:aa:6f:d5:f1:82:67:ba:99:53:ba:dc:42:
                    aa:ab:ac:97:f4:03:4b:62:22:0d:83:11:4e:95:dd:
                    02:1d:95:eb:04:19:de:b4:29:76:a1:81:b4:0d:b1:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:3E:03:94:E5:EA:D9:27:57:C0:DF:ED:46:73:03:27:EF:CE:DF
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24961.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:e9:84:8e:9c:ff:da:d5:b8:80:d6:71:3e:85:38:3a:c4:
         a9:67:72:09:e4:59:3d:ec:89:c8:8c:aa:5d:80:51:6b:7f:dd:
         8a:9c:e9:c2:4d:ad:67:81:4a:7f:48:ac:37:ab:3f:7b:21:82:
         8a:2b:82:c1:3f:1d:cf:5b:81:58:9b:fe:47:d1:a0:6d:43:00:
         c1:e9:4b:59:de:a0:90:95:b2:68:70:31:1e:c8:fb:1b:a1:99:
         cc:e5:43:71:70:1d:84:1c:2e:c1:a4:7e:42:90:60:a6:28:52:
         a7:30:d9:1d:9e:a4:f3:d7:c5:2c:b8:43:ba:03:91:ff:7f:63:
         80:fc:db:23:05:3a:86:d6:9a:8b:04:41:b9:1e:f2:a1:31:49:
         17:aa:bd:40:70:db:53:84:e8:66:f4:e6:a1:49:18:2d:5a:12:
         df:19:90:47:49:b0:39:22:e6:13:1b:14:de:2a:75:ae:b2:30:
         09:7e:11:3c:18:fe:d8:74:af:89:89:9d:25:7a:05:1a:9d:2e:
         e5:4d:38:64:7a:e7:e8:f5:bd:85:82:37:a3:b6:52:7b:d0:70:
         ab:9b:64:61:1a:86:db:0b:94:7b:e6:43:c5:de:ae:42:4c:bc:
         e4:d7:2b:d3:f5:9e:9c:53:d0:a0:11:21:6f:91:00:40:6b:63:
         de:29:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org