Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          DTIDqgMDOgQf9FNz/XY3kFYmPLDO9dbPSqrTsDMdocI=
Subject key identifier:   22:A0:81:3A:75:B5:08:BE:C3:D4:F7:2C:F1:94:69:E5:74:78:09:A4
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7390A2CD9BFEB6EB11FCB3A6210FEA7B59A33A1F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
Signing time:             Thu 05 Oct 2023 13:47:09 +0000
ROA not before:           Thu 05 Oct 2023 13:42:09 +0000
ROA not after:            Thu 03 Oct 2024 13:47:09 +0000
asID:                     46450
IP address blocks:        89.116.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:90:a2:cd:9b:fe:b6:eb:11:fc:b3:a6:21:0f:ea:7b:59:a3:3a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct  5 13:42:09 2023 GMT
            Not After : Oct  3 13:47:09 2024 GMT
        Subject: CN=22A0813A75B508BEC3D4F72CF19469E5747809A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:f7:0a:14:3d:d0:4c:3f:fb:1a:38:0a:c5:
                    57:20:fd:b8:67:70:55:be:95:64:7a:cf:d7:d5:02:
                    60:50:c2:29:2b:ad:2b:11:1e:b5:23:7b:6b:c1:72:
                    ce:55:8e:29:dd:7a:4d:18:e2:c6:ac:03:3d:70:07:
                    4e:c7:44:09:bf:00:ca:7a:e7:f8:8e:44:f0:2d:9e:
                    b1:e9:c3:7a:7c:57:c9:6b:15:9b:a2:21:e7:d5:e6:
                    7c:56:c0:ea:3b:45:24:a4:c6:67:2a:d8:21:e3:fe:
                    6a:a7:a8:88:6e:ca:a8:a4:ac:7e:0c:71:4a:8a:9b:
                    64:13:be:0a:75:39:3a:6f:34:44:8b:3d:46:c6:2a:
                    08:d9:04:c2:a2:96:3f:09:56:ef:73:4b:89:e2:21:
                    ef:f9:fe:41:67:ef:43:be:bf:dc:91:74:9f:95:70:
                    d3:9f:a7:c6:3e:13:0a:f2:80:53:fb:45:09:9b:fa:
                    b4:a3:7e:cf:93:df:3d:7f:d9:3f:11:0d:97:a4:18:
                    88:81:38:3b:25:10:55:b6:f2:cd:c7:e5:97:94:f6:
                    85:b0:30:c3:d7:23:6b:31:2f:a5:b0:46:01:e2:a1:
                    75:8e:73:a9:dd:72:af:ab:5d:ad:05:00:85:a1:a2:
                    a7:55:30:db:a9:ff:0e:d3:0b:4b:47:57:df:20:86:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A0:81:3A:75:B5:08:BE:C3:D4:F7:2C:F1:94:69:E5:74:78:09:A4
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:69:50:bb:2f:47:4b:8c:a1:11:d7:f3:8a:0f:e6:ea:72:62:
         2c:32:5a:d4:98:62:42:ad:bd:23:6d:3b:3d:63:6e:b5:66:0b:
         bb:71:46:55:1f:e9:10:4c:a4:9f:f1:f2:4d:5a:06:1c:59:3f:
         dc:4a:9e:82:95:3a:ef:c8:18:01:6b:ac:5f:4a:68:c8:28:cb:
         52:6e:b1:02:3a:94:40:aa:a7:70:c7:91:1b:54:d9:4d:6a:f6:
         97:47:f1:c9:98:84:57:be:4f:2d:87:5a:fd:27:cc:1d:1a:c0:
         03:22:da:1d:22:69:cc:c0:2c:b0:49:69:23:19:6a:01:1e:2c:
         81:93:b7:d0:b2:34:29:7b:c9:69:0d:db:bb:f3:8d:40:de:6e:
         9a:1b:a5:ae:a6:0e:53:b1:4f:21:b1:c5:75:21:48:94:cc:33:
         f1:7b:14:f9:d4:a0:aa:8f:f8:db:f5:57:8d:66:37:0e:f4:bc:
         95:b7:10:84:11:32:43:83:0b:21:da:71:05:16:b8:22:9b:19:
         ee:ca:08:bf:f5:4a:4a:13:0e:ee:7c:d1:62:77:c6:ce:4f:d5:
         6b:98:4e:4f:eb:5e:2c:77:86:85:7e:66:f5:85:75:fb:95:25:
         05:ac:23:54:7b:76:7e:67:9e:3b:ed:2a:89:3e:81:11:ad:4b:
         a7:35:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org