Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
File:                     AS48412.roa (raw, json)
Hash identifier:          OzpIGEK1lHgTdO6vIZrNAjf2tlbPfF8udMWFPZjQjrs=
Subject key identifier:   80:97:04:A8:47:3E:21:08:11:F3:6E:2E:30:ED:A4:BF:F2:1F:48:20
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0C82323845FE57877EE1727BDC6887BABE5A3A1A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
Signing time:             Fri 22 Mar 2024 13:05:14 +0000
ROA not before:           Fri 22 Mar 2024 13:00:14 +0000
ROA not after:            Fri 21 Mar 2025 13:05:14 +0000
asID:                     48412
IP address blocks:        84.46.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:32:38:45:fe:57:87:7e:e1:72:7b:dc:68:87:ba:be:5a:3a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 22 13:00:14 2024 GMT
            Not After : Mar 21 13:05:14 2025 GMT
        Subject: CN=809704A8473E210811F36E2E30EDA4BFF21F4820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:bf:98:0e:d5:32:2e:bf:10:35:86:ec:ce:
                    58:4c:a2:00:19:30:d1:c2:3e:17:84:a2:71:8c:0d:
                    dc:f1:45:5a:7b:14:53:93:c7:a5:8b:c6:b1:14:2d:
                    19:ab:0e:d8:19:2e:51:c3:e8:39:4f:29:fc:33:63:
                    e9:4d:99:0d:f2:35:d3:8a:f2:d1:f7:f9:a4:a0:fb:
                    93:41:23:73:c7:c4:d3:6c:ac:b9:cf:cd:db:be:dd:
                    fb:af:35:39:77:33:49:5d:02:17:0c:c0:c4:a4:90:
                    11:b4:49:61:a1:85:42:e0:e6:38:64:b9:78:bb:82:
                    bf:54:59:5c:03:90:11:ce:56:1a:73:4d:5c:6a:ba:
                    6b:c4:d5:a6:a3:ff:bf:d5:27:ff:0c:2e:a2:ed:b7:
                    3a:11:99:35:54:b7:7b:99:0d:7b:d0:86:c9:ea:d3:
                    2b:04:af:0b:ac:7b:34:e3:7e:ac:75:9c:e0:af:88:
                    55:c9:83:0a:3d:e2:6f:8c:4f:d0:78:52:dc:90:bc:
                    c1:90:0d:3c:da:45:3e:7f:e9:54:1e:c7:1c:e9:28:
                    35:a6:97:be:5e:ec:0f:46:4e:66:67:d9:ff:2a:52:
                    0c:28:5a:3f:72:9b:5d:da:65:b4:57:50:b6:71:e3:
                    66:4e:fc:50:0d:94:4f:ab:ac:b8:0b:64:8a:ae:22:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:04:A8:47:3E:21:08:11:F3:6E:2E:30:ED:A4:BF:F2:1F:48:20
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:be:1c:f9:7a:f7:f9:cf:3e:eb:5b:54:b4:4e:97:83:38:2f:
         56:51:41:83:b0:45:04:c7:3c:92:67:3e:b6:1b:c5:d5:9d:fc:
         dd:30:58:a8:a0:a6:21:df:4a:75:fd:aa:89:ea:36:3e:aa:ab:
         69:6a:3a:08:11:83:29:c0:0f:b5:b7:dc:73:8a:26:a6:31:2b:
         8f:c5:ae:cc:e2:65:72:ea:85:5e:0a:98:a3:6a:b9:62:6b:f7:
         3c:33:3a:ab:8f:07:5a:be:7c:cd:b4:55:f4:43:7c:77:2f:8e:
         a9:f2:f7:82:20:7f:20:3f:50:bc:59:ba:5d:01:d2:39:a9:67:
         4b:c7:53:c0:fd:9d:bb:5d:89:42:15:8a:a1:eb:3f:4c:f3:68:
         3f:4c:6a:6a:91:04:19:06:01:b0:f8:3d:42:f1:d4:d0:a8:64:
         90:d8:2e:04:b3:58:4a:8d:e9:14:cc:82:01:a6:5a:47:50:ac:
         51:53:cc:56:25:27:0b:f5:4b:ba:ab:67:ef:d9:7e:c2:d8:10:
         eb:2e:03:8d:eb:09:4b:a6:0d:77:3e:61:5d:0e:d1:84:0a:33:
         1d:a2:66:13:c8:56:b5:17:2f:02:65:4c:f6:a8:52:18:80:37:
         95:ac:ef:a1:55:15:1f:2a:77:ce:71:01:06:92:b7:7a:a8:f5:
         21:9d:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org