Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          URqWYV7BYrsVFHoCcmjhriQlEnFgT08iiQNPB8WFUDk=
Subject key identifier:   37:C4:9B:0B:6F:30:88:0C:32:A6:DB:77:93:60:FA:2A:0C:E9:0E:60
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6C062001F336A2E71D8A99D381CFA06ED83C0ED5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa
Signing time:             Mon 07 Aug 2023 00:00:12 +0000
ROA not before:           Sun 06 Aug 2023 23:55:12 +0000
ROA not after:            Mon 05 Aug 2024 00:00:12 +0000
asID:                     42831
IP address blocks:        89.116.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:06:20:01:f3:36:a2:e7:1d:8a:99:d3:81:cf:a0:6e:d8:3c:0e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  6 23:55:12 2023 GMT
            Not After : Aug  5 00:00:12 2024 GMT
        Subject: CN=37C49B0B6F30880C32A6DB779360FA2A0CE90E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:9b:67:ab:7b:7f:1e:dd:cf:fc:46:7e:58:
                    cf:fc:54:23:88:61:1d:58:9b:6b:35:37:cb:31:d3:
                    d3:06:6e:97:85:b7:9f:49:33:2e:af:81:ac:b2:7a:
                    95:3e:8b:14:38:30:40:4e:bd:82:36:9d:22:4c:90:
                    6c:02:f3:dd:95:c9:2a:a2:c8:20:fb:40:21:b4:9e:
                    90:3d:de:0f:06:6c:06:98:00:a2:d8:a0:8f:7f:29:
                    83:fa:10:5a:46:3c:ff:98:ce:92:0e:2c:a7:9b:09:
                    e5:43:68:bf:4c:61:63:00:b0:84:4b:53:5b:5b:6e:
                    b8:8f:a0:12:bf:a7:1b:d0:c9:8d:19:29:d2:c7:0a:
                    44:98:a7:89:7c:11:ea:e5:06:bb:87:21:f8:6d:cb:
                    a4:28:83:19:72:78:a1:08:7e:e4:30:21:a8:7c:d2:
                    9e:0d:55:e0:e5:a5:99:6b:76:a3:91:2e:52:db:3c:
                    e5:77:c6:86:48:9b:57:16:53:5c:7d:c9:bc:f6:48:
                    c5:d1:09:ee:f9:e9:b6:78:f4:9d:49:14:70:dd:c1:
                    ad:58:2b:35:d4:ec:ad:38:0d:1c:bd:7a:68:b7:1b:
                    69:7d:fb:52:13:39:87:9e:af:fb:2c:51:1a:99:59:
                    e0:bd:8d:d0:f7:71:f2:1f:47:5f:8a:fa:b0:fe:ae:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:9B:0B:6F:30:88:0C:32:A6:DB:77:93:60:FA:2A:0C:E9:0E:60
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:62:d5:1d:6b:46:a7:f7:dd:e6:00:5c:4d:47:7e:a4:71:
         54:a3:5b:94:0c:bb:84:e4:99:2b:0b:7b:5d:81:51:50:bc:af:
         62:44:8e:63:a0:c8:53:8e:f3:a1:e1:f1:c3:ec:e8:aa:92:0e:
         bb:3b:89:50:9f:55:bc:f0:bb:40:3d:9e:69:05:8c:1d:03:25:
         dd:4c:22:ab:40:e4:e9:44:2c:3c:84:4e:63:48:0f:0f:fa:2b:
         2c:57:80:23:07:24:e4:b1:0c:92:3d:bc:cc:11:db:0d:d8:47:
         76:20:7f:e0:9e:0f:1c:d8:b2:72:75:a0:b6:8b:a6:1e:20:2f:
         79:31:31:4c:79:57:b7:03:bd:00:d6:2b:0d:4a:55:52:68:b6:
         13:d1:51:2d:2e:ce:d8:73:29:e9:ce:57:17:b5:db:e4:e5:1e:
         8c:ac:39:42:0c:59:24:e8:cd:36:df:e8:0a:64:cb:87:e1:e6:
         98:f1:4e:dc:57:47:d7:33:6b:81:3b:00:bd:9e:c3:b3:9c:2c:
         73:d6:8e:27:72:db:96:d1:15:8b:bf:c6:8c:1a:40:99:4a:f4:
         31:34:0b:69:32:79:7e:3d:78:31:3f:65:36:e1:b2:86:b1:69:
         97:4b:06:5a:5d:92:18:ba:bc:b8:21:4b:bb:eb:66:c0:e1:67:
         cb:ec:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:16:50 2024 by rpki-client on console-fra.rpki-client.org