Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS34779.roa
File:                     AS34779.roa (raw, json)
Hash identifier:          Ng0+K5oH3wCxMwNSwIaY0jVIf8OWn1duiswzC/UyQgw=
Subject key identifier:   3A:D6:90:09:66:E1:19:15:38:F0:D0:7B:31:E0:8C:62:33:28:82:D1
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       254C0C0E8206E6C53C6CCF8EA0B7EF4F18C1A245
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS34779.roa
Signing time:             Thu 05 Sep 2024 14:05:20 +0000
ROA not before:           Thu 05 Sep 2024 14:00:20 +0000
ROA not after:            Thu 04 Sep 2025 14:05:20 +0000
asID:                     34779
IP address blocks:        89.116.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:0c:0e:82:06:e6:c5:3c:6c:cf:8e:a0:b7:ef:4f:18:c1:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  5 14:00:20 2024 GMT
            Not After : Sep  4 14:05:20 2025 GMT
        Subject: CN=3AD6900966E1191538F0D07B31E08C62332882D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:93:87:01:76:30:45:6b:69:cf:e9:fe:1c:
                    66:7f:61:85:da:7c:1f:94:61:00:b7:e0:f9:5e:08:
                    c6:ba:99:b2:1a:cf:ee:81:ce:69:ee:b7:0c:be:89:
                    df:4a:38:b9:b5:80:07:6f:cc:d8:69:6e:df:21:40:
                    76:74:31:2d:01:38:8b:43:c0:64:91:63:71:15:67:
                    8c:c0:f5:da:b5:41:20:13:36:0d:36:78:0e:2a:80:
                    d8:50:11:98:62:4b:42:56:c5:74:52:29:1b:28:7b:
                    da:0e:dc:a0:22:a8:41:ca:e5:86:51:2c:30:47:07:
                    8e:21:5c:88:cc:a7:00:38:d2:8e:d3:fe:05:2c:b3:
                    3b:2f:47:3b:81:38:aa:d2:87:f7:fe:7a:94:d9:28:
                    55:9e:8e:ea:57:87:8a:8a:3f:e6:dc:5c:bd:d9:d4:
                    28:48:a6:aa:6d:31:00:15:10:8a:ff:03:15:3b:e9:
                    39:a6:3e:28:6b:f8:8a:e6:6c:40:dc:f6:5c:51:eb:
                    af:59:87:b0:21:fd:5d:e3:dc:b3:5b:75:a3:cf:b0:
                    8c:aa:2c:23:50:22:9d:2e:ba:dc:06:f3:a1:2f:4c:
                    1f:16:ff:40:51:aa:f9:4a:8e:28:23:fc:46:95:ac:
                    73:24:86:b3:3c:16:5c:04:ae:46:c3:c4:20:40:59:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:90:09:66:E1:19:15:38:F0:D0:7B:31:E0:8C:62:33:28:82:D1
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS34779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:64:83:e6:a5:84:6a:cf:80:82:24:09:ba:3e:8a:67:ea:7f:
         ee:d3:c9:1e:64:d6:57:9a:04:fb:6b:a8:a8:44:7d:c3:09:b4:
         28:92:0e:8c:92:3c:87:82:d5:2c:c6:04:7d:6c:9a:e2:db:05:
         40:8c:ed:e5:58:cd:7b:18:92:f5:b3:ab:ff:73:e5:0d:3e:39:
         de:18:23:fc:02:2e:f6:47:4c:98:56:50:07:08:2e:74:d5:ae:
         bb:d9:ba:7f:95:03:37:41:61:0d:16:58:80:3b:0d:0b:a7:43:
         8f:81:35:97:93:82:64:5b:50:16:ae:76:53:9e:af:32:57:d6:
         17:04:bc:6d:57:0b:5d:51:c0:50:34:3a:b5:21:e0:75:7e:47:
         0c:6a:18:74:0a:9d:68:47:d8:8d:4f:eb:9c:a8:fe:ba:7a:43:
         48:db:b5:7e:52:5c:bd:71:e3:92:b7:ee:ae:75:e5:16:e1:06:
         37:8b:f3:1f:b9:de:f0:5b:dd:07:f2:1a:5a:3d:ca:f2:26:6f:
         48:3e:40:c7:6d:8e:05:85:aa:5e:e8:fa:48:1d:36:8f:c5:68:
         5c:71:98:79:85:71:a9:ba:d7:f1:5c:b2:3a:3d:22:6a:cd:aa:
         1c:20:39:31:75:a9:89:82:3b:04:26:2c:05:0f:b2:c4:8e:1b:
         20:d8:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org