Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa
File:                     AS400799.roa (raw, json)
Hash identifier:          SQvNwDxuu8yDbJRccJJDxd3p3CvHZF0lW0f4fHOhII0=
Subject key identifier:   64:49:15:2C:62:25:F0:9B:4F:E4:69:B3:D8:24:F0:33:B2:25:21:2F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1B67F977B58A090BA9E19D37CB58FA0BECF1B977
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa
Signing time:             Thu 05 Oct 2023 13:47:12 +0000
ROA not before:           Thu 05 Oct 2023 13:42:12 +0000
ROA not after:            Thu 03 Oct 2024 13:47:12 +0000
asID:                     400799
IP address blocks:        89.116.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:67:f9:77:b5:8a:09:0b:a9:e1:9d:37:cb:58:fa:0b:ec:f1:b9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct  5 13:42:12 2023 GMT
            Not After : Oct  3 13:47:12 2024 GMT
        Subject: CN=6449152C6225F09B4FE469B3D824F033B225212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:ae:2b:4c:38:c3:32:de:fd:2a:4e:41:1b:
                    dd:c2:7c:ae:65:1f:ac:9d:60:0f:0c:52:ae:6a:25:
                    01:e6:9b:63:f7:57:b9:68:f7:51:78:ce:86:6d:13:
                    99:2d:83:3b:40:f7:a3:1c:69:cc:95:82:9e:3f:00:
                    cf:cb:eb:ed:21:05:86:96:59:4d:45:1e:4b:f5:4f:
                    20:69:0e:62:c3:a6:9f:cc:98:94:fc:04:f8:8d:7f:
                    fd:c3:f5:e5:82:c8:5a:b7:9c:e2:66:ca:7d:0e:d4:
                    6b:d3:92:52:9f:be:1b:22:f3:40:4f:fb:80:8a:17:
                    db:17:85:88:1c:25:0a:22:b1:cd:23:83:1b:0b:c5:
                    db:2a:69:58:24:6b:52:11:33:1b:eb:86:d6:f5:76:
                    cb:0b:07:58:a6:85:2b:90:f4:3c:8f:18:01:1d:9a:
                    df:15:d2:58:0d:9a:9f:7c:a0:4f:9f:28:b7:12:a1:
                    74:35:83:45:81:ab:ef:9e:b0:4f:73:8d:88:5d:80:
                    90:f3:3c:a8:a6:d8:e0:98:ed:1e:40:76:d8:38:2c:
                    bc:fc:1c:98:52:5e:e9:fe:2c:05:bc:4c:22:50:3c:
                    21:70:47:d4:0d:56:b6:1d:0b:14:9f:76:ad:e4:87:
                    5a:8f:4a:23:1d:53:7c:f1:79:14:98:35:65:ab:5f:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:49:15:2C:62:25:F0:9B:4F:E4:69:B3:D8:24:F0:33:B2:25:21:2F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:0a:a1:71:5f:d2:b1:1f:b7:7d:1a:73:35:0e:56:84:11:04:
         b2:7a:f0:2d:e5:b7:5c:b8:8e:ad:bf:c9:c7:3d:57:3f:3b:64:
         3b:4e:de:07:97:84:ef:d4:0b:08:5c:e9:27:9c:62:2f:dc:8e:
         e0:4d:28:91:62:e1:cc:f4:e9:98:2a:39:44:64:84:ba:e8:89:
         4b:5c:d9:77:a5:a4:c0:4f:2b:9a:61:bc:53:fd:d0:50:a3:e0:
         85:31:12:e5:b7:ae:dc:c5:8e:bc:ee:0b:70:8b:27:4d:f5:38:
         4f:b1:8f:35:e1:e6:4d:32:3a:12:49:6f:f7:2a:44:3a:d2:20:
         22:ed:94:a9:2f:7b:eb:ae:31:6c:47:81:c4:fa:ca:9d:05:54:
         52:8d:70:b4:53:79:39:96:bc:5b:4f:bf:6f:64:ee:9f:97:92:
         95:c6:86:9a:81:bc:74:fe:87:aa:3e:29:20:ae:fb:f6:a8:3b:
         0f:e9:57:de:cf:6b:1a:87:f9:4c:9f:8a:9e:7d:f4:19:ce:7a:
         0f:f8:57:c7:80:c7:41:28:54:89:18:f7:23:81:c0:6c:74:f5:
         78:d6:f1:4d:14:9b:66:1a:3e:18:0b:dc:d3:68:d1:49:a6:d5:
         81:31:7c:ae:c9:5b:d9:83:37:59:a5:16:88:b6:ed:cb:3d:f7:
         1d:d7:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org