Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
File:                     AS48412.roa (raw, json)
Hash identifier:          O8XWAFEy6UulfhjMgxULPDa54gCRTmavS80aivFi6rw=
Subject key identifier:   76:6F:B9:27:61:A6:D4:C6:D5:D8:7B:37:E3:A8:4F:C8:AF:1D:F7:19
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3CED8803F6B1B3CCA16AB6A048BBE0DD8A0FC039
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
Signing time:             Fri 21 Feb 2025 13:53:55 +0000
ROA not before:           Fri 21 Feb 2025 13:48:55 +0000
ROA not after:            Fri 20 Feb 2026 13:53:55 +0000
asID:                     48412
IP address blocks:        84.46.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 08:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ed:88:03:f6:b1:b3:cc:a1:6a:b6:a0:48:bb:e0:dd:8a:0f:c0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb 21 13:48:55 2025 GMT
            Not After : Feb 20 13:53:55 2026 GMT
        Subject: CN=766FB92761A6D4C6D5D87B37E3A84FC8AF1DF719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:41:a4:6d:a9:98:2a:af:50:29:cd:5e:7d:
                    dc:0d:2d:a8:13:57:3c:32:fc:ee:3c:92:7f:07:60:
                    85:fc:38:d6:45:e1:2d:29:a0:69:df:b9:e0:0c:3e:
                    24:ac:02:fa:c7:98:59:80:33:a1:79:b5:94:b3:e3:
                    a5:65:17:95:03:f7:5b:bf:c0:69:50:10:7a:61:6a:
                    18:29:60:95:ba:ed:32:2a:76:81:67:4e:4f:25:f4:
                    61:50:3b:b8:01:f3:ed:cb:a3:ce:c5:11:6d:c6:fe:
                    24:36:22:6b:d0:f4:27:7d:ad:88:a0:5d:b1:31:a3:
                    e8:45:7c:05:e3:1f:85:02:cc:28:a0:06:51:e7:e7:
                    fc:2a:27:86:3c:fb:2f:2c:b5:21:b8:ff:32:34:15:
                    8d:55:a2:71:fb:d9:f2:fa:e5:f7:2b:67:85:01:2b:
                    f0:ce:9e:ca:99:df:6a:c1:40:cf:c7:8d:d8:6f:d2:
                    cd:e6:b4:a5:f1:92:c1:d5:15:7c:53:25:76:38:e5:
                    9d:39:ed:5f:73:e9:e4:d7:c5:a8:f6:62:02:a9:3e:
                    d7:81:1b:d0:4b:90:ee:9b:12:b7:01:a4:da:38:a0:
                    44:90:09:45:f0:3b:d9:39:21:9f:d4:50:80:13:0e:
                    07:aa:60:73:99:19:49:e9:4a:85:24:ce:04:ba:bf:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6F:B9:27:61:A6:D4:C6:D5:D8:7B:37:E3:A8:4F:C8:AF:1D:F7:19
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:83:b6:02:8d:b6:c6:20:1d:91:43:18:e2:7d:17:10:a1:
         c1:5e:d5:31:4a:79:ed:41:2c:a2:ac:0e:39:b9:f6:a3:f6:15:
         9b:57:6d:9a:10:9b:e9:2c:d5:e5:bb:7d:b3:d3:91:77:ee:ae:
         87:c7:23:47:d8:89:21:2a:2e:4c:fd:74:bc:bd:be:91:9a:97:
         e1:13:03:b0:be:a2:07:e3:47:af:f4:19:52:b5:b6:02:e1:2e:
         3e:82:e5:70:cb:e3:47:cf:f8:32:86:ac:2c:35:ae:b1:75:8e:
         03:fa:74:de:f9:b3:db:0f:87:cd:0e:51:ca:3b:46:a6:35:3a:
         90:da:31:17:fa:c4:f1:0a:2e:f0:75:a8:4b:d4:d6:af:d5:80:
         61:35:5d:6e:3a:35:dd:ae:6a:8b:8a:35:59:e1:c9:30:fc:64:
         2d:ed:b6:bc:44:1c:c0:46:21:9f:a7:a4:25:11:aa:d4:ee:6d:
         fc:01:2f:51:dc:dd:86:ce:54:24:6b:05:90:da:41:b9:d9:1c:
         99:5a:ac:fe:18:93:2e:e4:1e:fb:b7:74:27:82:1e:49:a4:d0:
         8f:91:6d:75:4a:76:e9:37:ea:f5:ef:8f:2f:95:92:b5:21:68:
         8b:fa:69:9e:6f:97:8a:ce:ee:4b:8c:27:c4:e5:b4:e3:30:3b:
         75:bc:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:23 2025 by rpki-client