Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          BSJt4/3+6Um7gBOL6OXhsLTTLLg/4VNY1Y+f3Jd85mo=
Subject key identifier:   23:6A:29:7E:B3:30:79:ED:6B:DD:0F:97:1B:25:88:BC:83:E5:E6:5A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3CC75465A2C22159988041BC34D59F4C4D5EEC66
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
Signing time:             Thu 05 Sep 2024 14:05:20 +0000
ROA not before:           Thu 05 Sep 2024 14:00:20 +0000
ROA not after:            Thu 04 Sep 2025 14:05:20 +0000
asID:                     46450
IP address blocks:        89.116.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c7:54:65:a2:c2:21:59:98:80:41:bc:34:d5:9f:4c:4d:5e:ec:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  5 14:00:20 2024 GMT
            Not After : Sep  4 14:05:20 2025 GMT
        Subject: CN=236A297EB33079ED6BDD0F971B2588BC83E5E65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:ad:83:48:b9:70:79:50:1e:ea:12:9e:71:
                    e0:65:43:ec:63:04:f4:61:a2:5d:39:1d:32:1d:fc:
                    10:4f:cd:25:2c:11:b2:8e:1a:47:59:8f:46:e7:cb:
                    00:b0:d4:a1:a7:7b:8e:a1:4f:8e:37:eb:d0:6c:e3:
                    78:11:24:31:7a:3a:dd:2a:59:12:df:00:c6:22:de:
                    fb:8e:62:66:fa:02:91:81:2b:15:89:f1:cf:50:ba:
                    d8:16:76:54:66:bf:5c:3d:47:45:88:dd:57:d7:8a:
                    39:80:49:d1:24:88:99:94:fb:54:a2:7b:20:8d:10:
                    9b:a5:be:40:c3:e9:6d:ba:43:f6:31:f6:3b:92:da:
                    9e:50:b8:f0:86:1f:94:6a:dc:85:28:0c:8c:13:ab:
                    b9:d6:84:a6:f1:58:bb:f2:78:54:39:72:59:7f:db:
                    8a:2f:e7:33:26:51:47:8e:65:38:65:e7:51:47:bd:
                    9f:20:8e:85:8c:e7:10:53:93:a5:f1:bd:06:85:20:
                    74:34:3f:9b:98:5e:b2:3e:df:bd:1f:bb:fe:d4:76:
                    ac:3d:5a:a1:81:69:95:07:60:ab:24:25:0b:3f:1f:
                    f6:81:e8:5f:7c:46:0b:1c:65:56:ac:e8:83:da:64:
                    de:d2:a3:76:6a:54:88:53:ba:f5:16:4a:51:8f:35:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:29:7E:B3:30:79:ED:6B:DD:0F:97:1B:25:88:BC:83:E5:E6:5A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:18:f6:69:be:da:f2:cf:1c:84:b5:ce:49:5b:82:90:61:01:
         63:05:67:72:7a:ee:5b:6a:ca:fd:07:7f:a1:8c:2c:11:0c:83:
         43:55:ef:ca:ca:b4:1c:a9:95:05:a3:04:67:0a:d9:0f:8c:7d:
         5d:2a:4e:70:0c:ac:27:ae:bd:15:76:66:5d:8d:7e:a0:6f:45:
         58:b2:8b:b0:6b:c7:1b:99:60:62:da:35:74:0b:25:15:41:2f:
         4a:4c:85:17:1b:30:44:02:2d:ee:28:82:48:eb:2b:44:82:96:
         ff:75:9b:a5:ec:0c:6d:3a:1a:ea:ab:bc:4c:36:99:33:59:ee:
         f1:a4:a9:c2:f0:cc:44:0b:6e:99:3a:26:4e:f2:bd:d6:cd:cd:
         82:51:a3:cc:9f:c6:bd:cd:55:52:16:49:88:78:14:38:21:33:
         bf:8d:15:24:2f:dc:25:df:39:a1:b1:ac:9b:bd:99:7f:de:d6:
         b9:fb:b3:60:02:74:39:03:40:ed:eb:d7:63:01:81:f2:f0:36:
         8b:f1:3b:46:7a:86:19:37:e4:a1:62:06:b0:25:19:d1:77:a3:
         d7:40:3d:dd:9e:b2:bd:3c:f9:81:5b:9c:d9:0e:c4:48:49:ca:
         5e:cd:35:e2:16:35:30:66:46:91:f4:7d:b0:66:5e:e8:bf:82:
         3c:d8:7a:7b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUPMdUZaLCIVmYgEG8NNWfTE1e7GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA5MDUxNDAwMjBaFw0yNTA5MDQxNDA1MjBaMDMxMTAvBgNV
BAMTKDIzNkEyOTdFQjMzMDc5RUQ2QkREMEY5NzFCMjU4OEJDODNFNUU2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4N62DSLlweVAe6hKeceBlQ+xj
BPRhol05HTId/BBPzSUsEbKOGkdZj0bnywCw1KGne46hT44369Bs43gRJDF6Ot0q
WRLfAMYi3vuOYmb6ApGBKxWJ8c9QutgWdlRmv1w9R0WI3VfXijmASdEkiJmU+1Si
eyCNEJulvkDD6W26Q/Yx9juS2p5QuPCGH5Rq3IUoDIwTq7nWhKbxWLvyeFQ5cll/
24ov5zMmUUeOZThl51FHvZ8gjoWM5xBTk6XxvQaFIHQ0P5uYXrI+370fu/7Udqw9
WqGBaZUHYKskJQs/H/aB6F98RgscZVas6IPaZN7So3ZqVIhTuvUWSlGPNVq1AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUI2opfrMwee1r3Q+XGyWIvIPl5lowHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQ2NDUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWXRQMA0GCSqGSIb3DQEB
CwUAA4IBAQBgGPZpvtryzxyEtc5JW4KQYQFjBWdyeu5basr9B3+hjCwRDINDVe/K
yrQcqZUFowRnCtkPjH1dKk5wDKwnrr0VdmZdjX6gb0VYsouwa8cbmWBi2jV0CyUV
QS9KTIUXGzBEAi3uKIJI6ytEgpb/dZul7AxtOhrqq7xMNpkzWe7xpKnC8MxEC26Z
OiZO8r3Wzc2CUaPMn8a9zVVSFkmIeBQ4ITO/jRUkL9wl3zmhsaybvZl/3ta5+7Ng
AnQ5A0Dt69djAYHy8DaL8TtGeoYZN+ShYgawJRnRd6PXQD3dnrK9PPmBW5zZDsRI
ScpezTXiFjUwZkaR9H2wZl7ov4I82Hp7
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org