Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49703.roa
File:                     AS49703.roa (raw, json)
Hash identifier:          hnLgyMjzkFjhSnVxsbX/cHuWVDHVuX1L9VK99vceNGk=
Subject key identifier:   BA:7B:9E:41:B0:15:B4:E0:B1:2E:47:F9:7C:B9:A9:1C:66:A1:D4:C7
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7F96E640CE104545BFE127ED1F52820F99286B22
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49703.roa
Signing time:             Wed 10 Apr 2024 09:05:16 +0000
ROA not before:           Wed 10 Apr 2024 09:00:16 +0000
ROA not after:            Wed 09 Apr 2025 09:05:16 +0000
asID:                     49703
IP address blocks:        89.116.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:e6:40:ce:10:45:45:bf:e1:27:ed:1f:52:82:0f:99:28:6b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 10 09:00:16 2024 GMT
            Not After : Apr  9 09:05:16 2025 GMT
        Subject: CN=BA7B9E41B015B4E0B12E47F97CB9A91C66A1D4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:e9:50:ec:77:00:2d:db:db:ae:b8:f9:17:
                    98:9d:00:19:71:d2:9f:95:3b:9e:c6:31:77:dd:e0:
                    40:90:00:49:a5:df:43:2f:a4:80:19:24:5a:22:88:
                    d7:0a:23:aa:02:6b:d3:5c:1c:e7:83:68:c5:a6:8a:
                    76:98:03:eb:d3:97:72:6b:82:34:63:d0:fc:c3:25:
                    51:f6:13:df:5a:a8:60:2f:d7:30:e9:16:f6:ae:2e:
                    3d:dc:42:1d:2c:47:2b:3e:c1:d3:db:f2:45:08:f1:
                    bd:cd:a8:28:f1:a8:a6:29:47:bd:5b:13:77:83:d3:
                    31:06:77:43:38:98:cb:c3:e4:23:17:dc:f1:2f:ed:
                    6d:d4:f0:54:38:de:89:41:9b:24:c5:2c:65:e7:1a:
                    4b:27:01:d8:75:0a:6a:86:ae:ec:9d:d4:6c:96:71:
                    04:d6:40:6f:05:52:b0:48:5d:7c:8d:65:96:1f:6c:
                    7e:09:9e:66:08:08:55:53:67:1f:db:85:65:ad:cc:
                    cf:66:f6:15:b2:79:98:48:2d:87:6a:cc:5a:0c:09:
                    7d:e2:e4:3b:31:41:fb:84:e6:67:0e:b9:57:d0:31:
                    10:01:d0:79:cc:a0:2d:98:cd:5f:38:5b:a7:b8:d7:
                    f6:40:08:00:55:35:6c:0d:c8:68:af:15:5a:ba:9b:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:9E:41:B0:15:B4:E0:B1:2E:47:F9:7C:B9:A9:1C:66:A1:D4:C7
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49703.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:35:80:56:1f:45:e2:3d:00:64:45:83:29:34:6e:e9:86:9b:
         5b:52:55:23:b9:e9:53:a1:c8:de:8c:b7:5e:de:1b:97:dd:f3:
         b3:62:22:0c:8e:be:02:23:5a:ab:3b:63:b4:7f:f0:af:4d:83:
         ee:2e:c2:82:1d:b1:5c:7b:e6:b6:4c:81:76:7e:0a:c6:0a:7e:
         63:2b:6c:bd:fa:b1:ac:35:0f:68:85:e3:6f:a1:09:de:90:9e:
         d1:31:a5:7c:6c:df:c3:35:ae:62:81:7e:2c:7e:30:84:b1:e2:
         2b:b5:c7:bd:ca:13:b3:f0:b8:37:b2:3a:b8:38:cb:51:09:ee:
         e1:bc:d3:68:07:2b:0d:e4:69:50:a8:89:5a:dc:c0:34:85:7e:
         8b:29:90:fa:02:62:26:37:cf:5c:da:7c:77:80:c8:a9:21:f3:
         3e:f9:76:ae:cf:49:c9:2d:60:a6:7b:94:50:f3:bb:5d:bc:8c:
         9e:89:a0:45:83:02:67:35:48:51:33:d8:ee:a0:37:67:65:b6:
         9c:f4:5b:30:4f:93:72:af:38:47:ea:7e:69:e4:30:f9:88:af:
         c6:6c:6e:8e:c4:f9:17:d1:25:9e:ce:f7:0b:c4:48:93:e2:d0:
         cc:af:1f:1c:c9:26:ee:cd:b5:8b:dd:86:73:f6:0f:05:2d:02:
         40:61:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org