Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
File:                     AS49999.roa (raw, json)
Hash identifier:          ZjN2tiDJYsgpN3b20rFgA77X+BGNTSQ6QwFukQHX2ss=
Subject key identifier:   70:B8:77:4C:2D:CD:6A:5E:D0:6A:D4:4E:B4:3D:5C:BC:0F:BA:73:EF
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       38356E7596A1D8539C59E45AC4392141370F4595
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
Signing time:             Tue 30 Jan 2024 12:38:46 +0000
ROA not before:           Tue 30 Jan 2024 12:33:46 +0000
ROA not after:            Tue 28 Jan 2025 12:38:46 +0000
asID:                     49999
IP address blocks:        89.117.88.0/22 maxlen: 24
                          89.117.112.0/22 maxlen: 24
                          89.117.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:6e:75:96:a1:d8:53:9c:59:e4:5a:c4:39:21:41:37:0f:45:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 30 12:33:46 2024 GMT
            Not After : Jan 28 12:38:46 2025 GMT
        Subject: CN=70B8774C2DCD6A5ED06AD44EB43D5CBC0FBA73EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:b6:ed:70:1d:d4:ea:ce:55:fd:a1:42:ce:
                    90:13:5a:d9:08:d2:81:75:0e:c7:65:69:37:36:bd:
                    9e:0e:65:2c:9e:78:7e:a1:b3:cc:8a:5e:a4:3d:e2:
                    37:16:24:59:4a:4a:93:ff:e6:04:fd:92:58:f5:ad:
                    3f:36:35:5b:e9:0e:7b:30:9e:9f:ba:ae:03:1a:5f:
                    78:d5:74:2c:38:c0:ef:5f:c8:d1:d1:9b:73:88:41:
                    e4:49:37:76:1b:a1:89:5b:0f:5b:35:16:a8:03:52:
                    d2:42:81:0d:7d:d0:5d:06:d6:74:5a:1e:34:bd:ce:
                    dd:43:cc:24:9a:ea:ed:ae:6c:25:5d:62:21:b2:58:
                    1b:d2:bc:99:ed:59:48:48:8c:23:59:22:17:3b:83:
                    a5:b6:cd:e4:b1:e6:0c:c9:26:ab:aa:c5:1d:90:71:
                    19:3b:5f:1a:d5:fd:16:24:b1:bb:c6:e0:2e:33:5d:
                    5e:7a:ed:d6:9a:64:0e:a6:25:4b:4a:3a:23:0a:62:
                    e8:b5:03:ea:d4:a1:c3:86:b5:ee:fc:ca:d8:30:e4:
                    ed:8d:7a:d3:68:bd:f7:51:a0:f0:f4:a4:56:71:72:
                    31:47:2c:cd:d8:75:0c:35:e0:d3:23:8c:4b:cc:ae:
                    d6:c1:60:14:b5:13:d4:29:7e:6b:97:f8:b1:64:e1:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:77:4C:2D:CD:6A:5E:D0:6A:D4:4E:B4:3D:5C:BC:0F:BA:73:EF
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.88.0/22
                  89.117.112.0/22
                  89.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:3f:09:fa:8e:3b:f6:1e:11:87:a4:5c:29:83:ea:9f:ae:07:
         a7:1c:42:f5:09:3d:55:5f:1f:39:cd:35:d7:36:80:6c:c0:cb:
         08:a8:a0:51:eb:6f:94:20:6c:08:f8:65:1e:ab:6f:98:39:eb:
         cd:2c:ae:02:29:39:ef:9a:24:c5:f3:f3:6e:fe:6d:ec:42:be:
         3c:a2:e9:92:63:d1:27:92:55:e2:33:9a:2c:81:cb:1d:41:b2:
         73:19:50:f8:ea:d2:38:71:1a:dd:d0:07:ea:99:aa:1c:e4:30:
         85:16:a1:a1:cc:68:0c:0b:74:85:f8:b8:a3:6a:46:31:6a:56:
         4a:23:f1:17:86:39:a9:0f:5a:7f:e0:e3:7e:f7:4e:2e:ea:a6:
         54:7d:04:9d:50:1b:bb:85:ba:c3:a2:0b:36:20:61:54:81:00:
         dc:48:b0:a6:ec:00:bd:80:ad:15:05:94:2e:40:4c:65:b9:65:
         43:45:e7:ac:32:21:4a:e4:a4:09:c6:04:54:24:10:00:94:39:
         bc:88:65:fb:46:08:6e:13:38:96:6e:a4:b5:a7:25:75:e9:ca:
         78:9b:bd:ea:b6:fc:29:16:88:1c:67:89:09:24:3b:e5:08:b4:
         7f:1f:a4:dc:54:78:18:9c:0c:f7:b7:bb:0f:38:5f:58:09:c5:
         eb:e1:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:31:23 2024 by rpki-client on console-fra.rpki-client.org