Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          x3rF6vaka5p+3AKKb9bINZrtnypumh2qr5A7rMN9iSU=
Subject key identifier:   F4:1A:C0:EA:F1:01:33:42:D0:9A:5D:A4:2C:64:22:BB:A9:7D:07:FA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       44345842F3B1A4A00F72A1AB420E3E450D18D9AA
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
Signing time:             Tue 30 Jan 2024 12:38:21 +0000
ROA not before:           Tue 30 Jan 2024 12:33:21 +0000
ROA not after:            Tue 28 Jan 2025 12:38:21 +0000
asID:                     398465
IP address blocks:        86.38.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:58:42:f3:b1:a4:a0:0f:72:a1:ab:42:0e:3e:45:0d:18:d9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 30 12:33:21 2024 GMT
            Not After : Jan 28 12:38:21 2025 GMT
        Subject: CN=F41AC0EAF1013342D09A5DA42C6422BBA97D07FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:cf:fc:12:b0:ea:02:9a:90:bb:60:c7:46:
                    94:fb:c6:b4:d6:33:97:a8:c9:3e:23:44:ac:92:e9:
                    d9:6a:f4:81:75:39:58:35:15:37:cc:e3:7d:51:d1:
                    00:c8:67:b3:45:c0:ca:2a:62:df:e5:71:99:c1:a6:
                    3b:02:10:a2:82:16:46:2d:f3:db:5c:08:03:e0:87:
                    32:1e:12:11:e7:10:61:ee:39:fe:46:02:92:97:f2:
                    30:64:ee:c3:da:a8:02:b8:45:d4:ef:22:62:68:12:
                    8c:1d:1e:d1:33:78:f2:03:80:cb:b8:46:90:2a:1d:
                    74:c4:1c:77:35:42:bd:c6:1f:3b:b6:57:07:b4:7a:
                    1f:fa:28:bb:85:5c:28:0d:37:74:0d:86:14:b9:a8:
                    43:3f:ae:10:c2:78:ea:02:61:dc:3a:83:7c:a3:c3:
                    8c:9c:a5:f6:08:2d:f9:be:37:01:e7:a3:a7:21:c7:
                    60:d4:38:d9:97:72:50:e9:2a:1a:4e:3b:f2:2f:24:
                    da:f1:0c:77:78:a8:5d:f6:a6:de:ba:c6:8a:57:8d:
                    48:3c:23:68:69:e4:70:e0:d2:6f:bf:34:b4:97:9d:
                    c6:c2:84:48:1a:85:ec:4b:78:1f:2c:df:68:c8:71:
                    e3:fa:13:b8:7c:2d:2d:4c:29:c9:53:17:1a:6c:f2:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1A:C0:EA:F1:01:33:42:D0:9A:5D:A4:2C:64:22:BB:A9:7D:07:FA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:03:3a:d9:b2:01:0a:3e:71:46:f3:90:17:43:b4:36:c2:ec:
         59:a0:64:3a:a2:bd:8f:c2:ef:1b:35:4a:3f:04:b6:4d:1c:81:
         14:49:0f:1c:50:98:95:fc:32:c8:fa:d2:d6:b0:a3:2c:ba:d9:
         a9:db:41:33:97:87:36:7b:ac:d7:a8:75:2d:9c:f2:51:cc:fe:
         c1:b7:de:b4:c4:eb:c4:bd:43:be:d1:bb:da:0a:94:d7:4d:b3:
         82:eb:b8:d1:77:a3:23:36:cc:3a:a2:88:53:7c:de:d0:b5:6d:
         02:d0:1f:56:3e:5b:10:b4:4f:c6:36:62:2e:41:17:0c:ac:4f:
         28:58:12:c0:ac:d3:24:fc:e2:d7:b1:7d:91:44:92:55:9b:4b:
         e0:15:0e:ef:e3:3e:08:4d:9a:f0:c3:d8:c4:98:2e:77:30:6b:
         06:19:d5:c6:9c:2a:6f:ca:e9:9f:ef:50:b6:19:3e:b9:c7:25:
         ec:ec:68:6e:87:b7:8c:16:22:37:d3:9d:58:83:c6:27:be:83:
         7a:77:52:d9:a5:5d:15:d9:98:90:04:fe:37:2d:a4:37:be:ef:
         08:dc:9a:fc:ff:c4:fb:a8:c0:e8:e4:17:32:07:08:c8:67:d5:
         58:21:78:cb:ad:99:b0:bc:8d:c9:25:87:c7:d8:26:f5:19:57:
         25:da:30:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org