Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3320.roa
File:                     AS3320.roa (raw, json)
Hash identifier:          P56wc9Iuk8m25QXAVU5qhHuqPB/I4rI8rINnaZqW7k4=
Subject key identifier:   0F:69:A6:22:51:3A:99:4C:D1:81:F6:B3:69:D6:12:26:BF:89:C2:3C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5DE4CB29C271A7C6140B93549DB04E030DCC51FC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3320.roa
Signing time:             Sat 11 May 2024 00:00:22 +0000
ROA not before:           Fri 10 May 2024 23:55:22 +0000
ROA not after:            Sat 10 May 2025 00:00:22 +0000
asID:                     3320
IP address blocks:        86.38.37.0/24 maxlen: 24
                          86.38.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:cb:29:c2:71:a7:c6:14:0b:93:54:9d:b0:4e:03:0d:cc:51:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 10 23:55:22 2024 GMT
            Not After : May 10 00:00:22 2025 GMT
        Subject: CN=0F69A622513A994CD181F6B369D61226BF89C23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:a5:ab:17:fe:49:e4:aa:86:47:dc:59:0f:
                    bc:17:62:2a:a4:d5:7a:a1:d2:98:a8:0e:6e:99:29:
                    a5:9b:cd:1d:e4:c7:34:a0:fd:61:c5:3d:fa:2e:09:
                    7d:bb:52:78:77:84:71:20:33:c8:c4:ae:3f:e0:3b:
                    2c:3f:d9:b4:18:b1:44:84:79:a9:6f:ac:67:e6:c0:
                    b0:99:55:de:d1:46:4e:8d:df:13:7b:f4:0f:e0:c4:
                    43:95:e4:36:f9:60:2d:81:93:79:2a:8b:50:06:94:
                    fd:7f:ed:01:a7:ad:cb:9c:c5:49:7d:4d:d1:08:a3:
                    6f:19:5c:42:7c:15:96:39:28:61:f8:19:0b:f4:f1:
                    3f:7a:e8:ee:50:c2:6f:de:74:66:18:1f:4f:fb:1d:
                    cd:75:70:e1:37:95:83:a0:76:82:db:6f:91:86:38:
                    5c:c7:45:e8:c4:57:9a:8a:c0:5f:dc:71:5f:d1:9a:
                    16:0e:3b:16:02:9d:2b:9e:a8:6e:99:d1:0a:95:0a:
                    b0:7c:4c:99:7e:44:57:22:15:99:c5:28:8a:4b:54:
                    ed:c2:d8:f7:cb:07:f5:9c:90:5d:e3:ed:5d:78:84:
                    4d:98:f2:5b:2c:b9:aa:93:cc:7b:ec:1f:df:6f:23:
                    cd:90:e5:5f:d5:55:eb:63:75:b1:13:af:d4:79:7e:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:69:A6:22:51:3A:99:4C:D1:81:F6:B3:69:D6:12:26:BF:89:C2:3C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.37.0/24
                  86.38.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:dd:1a:e5:f0:62:ae:e1:47:dd:e5:e0:da:c4:58:04:20:
         74:b0:d1:3b:1a:76:f1:32:25:d0:9d:8f:92:ed:b5:5d:7d:da:
         d1:d5:05:56:ef:57:a9:66:52:e0:19:ad:65:f8:f7:4f:81:67:
         44:df:a7:4f:1d:8e:12:50:87:28:fa:a3:7e:8a:6b:73:f8:ee:
         90:76:4c:28:46:11:7a:ec:e4:59:f8:54:74:f6:63:27:0a:9b:
         4a:47:7c:a9:cb:2e:70:c2:32:d7:76:de:1b:f9:36:25:fc:b6:
         c6:72:af:e3:43:60:f2:40:9b:11:3a:3b:48:1e:83:b2:03:03:
         a9:48:ee:95:38:2f:df:30:4d:bf:7e:8a:ec:3d:ed:d7:2e:2c:
         07:1f:c4:24:19:2e:9c:43:57:85:05:58:4c:7d:96:3c:67:b9:
         a6:ee:23:4e:c5:be:c1:f0:6e:ba:2f:3f:4b:57:84:8e:2d:20:
         e5:1d:8b:e1:4d:ab:2a:a5:67:8d:72:25:57:24:13:3f:5e:ba:
         1a:38:0d:e5:d4:c1:45:da:16:ff:73:d2:e3:35:06:23:6b:d9:
         06:07:4d:81:6c:af:f2:e2:30:a8:72:b8:e6:dc:e6:08:5e:1e:
         5a:01:6d:91:be:bb:75:54:e5:08:ee:29:cf:4e:07:8a:b2:41:
         86:ab:bb:ca
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUXeTLKcJxp8YUC5NUnbBOAw3MUfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA1MTAyMzU1MjJaFw0yNTA1MTAwMDAwMjJaMDMxMTAvBgNV
BAMTKDBGNjlBNjIyNTEzQTk5NENEMTgxRjZCMzY5RDYxMjI2QkY4OUMyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLaWrF/5J5KqGR9xZD7wXYiqk
1Xqh0pioDm6ZKaWbzR3kxzSg/WHFPfouCX27Unh3hHEgM8jErj/gOyw/2bQYsUSE
ealvrGfmwLCZVd7RRk6N3xN79A/gxEOV5Db5YC2Bk3kqi1AGlP1/7QGnrcucxUl9
TdEIo28ZXEJ8FZY5KGH4GQv08T966O5Qwm/edGYYH0/7Hc11cOE3lYOgdoLbb5GG
OFzHRejEV5qKwF/ccV/RmhYOOxYCnSueqG6Z0QqVCrB8TJl+RFciFZnFKIpLVO3C
2PfLB/WckF3j7V14hE2Y8lssuaqTzHvsH99vI82Q5V/VVetjdbETr9R5fsavAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUD2mmIlE6mUzRgfazadYSJr+JwjwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzMzMjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABWJiUDBANWJvgwDQYJKoZI
hvcNAQELBQADggEBACsw3Rrl8GKu4Ufd5eDaxFgEIHSw0TsadvEyJdCdj5LttV19
2tHVBVbvV6lmUuAZrWX490+BZ0Tfp08djhJQhyj6o36Ka3P47pB2TChGEXrs5Fn4
VHT2YycKm0pHfKnLLnDCMtd23hv5NiX8tsZyr+NDYPJAmxE6O0geg7IDA6lI7pU4
L98wTb9+iuw97dcuLAcfxCQZLpxDV4UFWEx9ljxnuabuI07FvsHwbrovP0tXhI4t
IOUdi+FNqyqlZ41yJVckEz9euho4DeXUwUXaFv9z0uM1BiNr2QYHTYFsr/LiMKhy
uObc5gheHloBbZG+u3VU5QjuKc9OB4qyQYaru8o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org