Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
File:                     AS49870.roa (raw, json)
Hash identifier:          DY+yo6FVpa6OvcGynIeaeF1DAbEHfQQ7yT+l5gHvqOA=
Subject key identifier:   62:5F:44:77:DF:52:EA:E3:2B:B0:E8:EA:21:73:47:D8:51:39:C2:6C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       172ADFEB8AA34FA5790143ED227452D875B64B7C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
Signing time:             Sat 20 Apr 2024 10:05:16 +0000
ROA not before:           Sat 20 Apr 2024 10:00:16 +0000
ROA not after:            Sat 19 Apr 2025 10:05:16 +0000
asID:                     49870
IP address blocks:        89.116.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2a:df:eb:8a:a3:4f:a5:79:01:43:ed:22:74:52:d8:75:b6:4b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 20 10:00:16 2024 GMT
            Not After : Apr 19 10:05:16 2025 GMT
        Subject: CN=625F4477DF52EAE32BB0E8EA217347D85139C26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:03:9e:a7:4a:36:10:ae:ba:b7:92:40:e6:
                    26:d2:00:84:75:38:de:78:61:43:9d:01:96:c6:65:
                    62:11:f8:1d:80:92:27:63:db:33:ff:2d:22:f0:34:
                    b9:84:bb:76:6f:b6:48:2d:b9:9a:41:18:04:ce:1e:
                    a7:cb:96:9e:98:90:3f:9f:ec:27:f4:3d:4d:55:26:
                    be:9b:b2:c2:c8:6a:bb:ea:29:b8:26:d8:a3:49:00:
                    7c:da:22:8a:00:a0:76:a4:94:c6:78:53:62:88:31:
                    08:58:0e:db:06:be:bf:01:28:72:96:ed:68:29:10:
                    d8:9b:c0:a2:c8:dc:ed:3e:91:0e:c9:49:40:d5:97:
                    41:61:41:0f:62:0e:d8:7a:98:81:91:76:6a:3f:9f:
                    de:e5:7e:d6:84:6b:fd:4a:fa:94:57:2e:c0:cf:1d:
                    75:69:e1:31:6f:8d:79:b1:65:be:1b:12:92:12:c9:
                    d8:d4:6d:56:12:74:c6:89:22:e1:e2:84:05:2b:da:
                    23:d3:90:8c:c0:40:6b:1d:b1:cb:86:e9:63:aa:d5:
                    88:ba:8e:61:83:29:19:56:89:ad:ee:33:8f:d3:04:
                    c6:72:f4:bd:31:19:df:4f:9c:09:41:5b:9f:3a:07:
                    f0:2f:7a:a7:d3:8e:fd:73:42:2d:9b:83:e5:85:f4:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:44:77:DF:52:EA:E3:2B:B0:E8:EA:21:73:47:D8:51:39:C2:6C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:90:c2:e4:ec:f6:90:19:47:9e:55:e9:0a:16:39:56:a2:63:
         4c:40:9f:49:d1:6f:2b:8c:a8:ab:d7:17:63:8e:33:6e:8f:6d:
         df:88:e0:44:4f:60:9f:14:cd:3a:66:ba:9a:da:ba:22:0f:68:
         64:83:ab:72:36:96:cd:8f:31:9f:9f:26:4f:a8:f6:6e:0f:98:
         dd:25:f7:8e:cd:d1:3a:8a:d0:9c:06:f0:2d:c8:bd:42:b7:ae:
         45:50:3f:e0:6b:d7:05:86:ea:32:80:45:1f:33:75:56:d5:65:
         b5:b3:f1:43:d5:b8:f7:c7:21:28:c1:8e:da:77:5f:f3:7a:72:
         d8:6f:3a:05:32:46:40:aa:32:12:c4:43:1b:27:b0:32:36:c3:
         ab:34:5c:9a:ec:88:bf:60:0b:b4:b6:c2:5e:c4:7d:7d:05:ff:
         18:19:8b:76:59:74:a9:55:a0:0d:fc:a1:90:75:3f:3d:3a:ec:
         77:e3:a9:1f:2e:18:01:6b:45:12:f5:83:ab:9a:55:02:7c:d7:
         f1:32:6e:09:32:33:28:6c:a7:b5:58:ce:cb:08:27:c8:a5:f2:
         2b:da:66:97:41:62:1f:7c:f5:ea:06:67:11:5b:76:c6:8c:57:
         a4:95:78:80:75:73:cf:de:c2:89:b0:af:9d:da:42:b6:3f:3a:
         ff:7c:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:50 2024 by rpki-client on console-fra.rpki-client.org