Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa
File:                     AS50565.roa (raw, json)
Hash identifier:          hWDNwAU7RpWTCSlBVbmz5F8n0HzZSIYZ47UzeZFoPuI=
Subject key identifier:   C3:D0:3C:B9:0F:29:AE:A4:C1:88:77:04:FE:9F:87:4E:A4:62:3B:F7
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5C2E49984124EE98CC32694F5E39539A8ABB49C4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa
Signing time:             Mon 19 Feb 2024 19:05:12 +0000
ROA not before:           Mon 19 Feb 2024 19:00:12 +0000
ROA not after:            Mon 17 Feb 2025 19:05:12 +0000
asID:                     50565
IP address blocks:        86.38.184.0/24 maxlen: 24
                          89.116.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2e:49:98:41:24:ee:98:cc:32:69:4f:5e:39:53:9a:8a:bb:49:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb 19 19:00:12 2024 GMT
            Not After : Feb 17 19:05:12 2025 GMT
        Subject: CN=C3D03CB90F29AEA4C1887704FE9F874EA4623BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:ae:f7:a6:c8:62:19:1c:77:7c:42:38:a8:
                    0e:31:bd:93:f4:8f:3d:22:e5:4b:21:ee:85:61:30:
                    6b:5e:d3:67:d7:3c:fe:88:11:85:43:ef:51:4b:88:
                    9b:a6:b4:c9:4e:7c:fc:a4:d8:09:ec:6c:b3:0d:cf:
                    73:9d:9f:b6:85:c7:d4:25:c5:5f:b6:84:97:43:cc:
                    ba:1b:2d:7d:7a:d5:55:39:6c:0c:03:d8:6b:05:4c:
                    2e:32:d7:a3:a5:3f:a1:95:aa:d9:6f:ac:46:c0:12:
                    db:89:a9:cb:76:e7:e3:c1:13:24:58:e2:a9:77:0a:
                    4d:72:30:48:1e:34:b4:f1:54:e1:1c:e4:77:4b:bd:
                    86:97:bd:3b:fb:bb:4b:35:eb:5f:fe:24:a6:58:93:
                    7c:c0:ef:88:64:97:17:aa:9a:c1:ae:c1:47:1c:59:
                    93:01:ed:e2:4c:57:ad:5a:34:2e:48:f3:67:0e:69:
                    9b:32:17:d8:71:86:68:fc:fe:a0:b8:2c:3f:76:bf:
                    f1:7b:7a:33:8a:b9:7f:17:f2:90:e2:04:aa:96:a5:
                    fb:0d:6b:81:86:26:9c:d7:9c:57:0e:5f:7f:66:0f:
                    db:c9:bd:a6:07:77:79:e9:f4:3a:ac:23:fb:24:75:
                    a4:a6:c0:b4:41:33:2b:00:e2:5a:14:8d:99:af:7a:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:3C:B9:0F:29:AE:A4:C1:88:77:04:FE:9F:87:4E:A4:62:3B:F7
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.184.0/24
                  89.116.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:13:7a:0d:0a:7b:06:e0:a0:ab:79:8e:e1:92:13:47:74:70:
         2a:3b:66:19:4a:e5:97:6f:5b:7d:ab:53:f7:91:88:f3:f5:c2:
         17:d6:32:ae:91:80:97:d5:66:e1:bd:cf:0c:9f:00:80:e9:df:
         0d:c6:dc:e8:84:04:0a:1f:13:ec:fc:01:00:9e:ab:32:f9:e0:
         66:fe:28:d7:3b:0a:cf:f1:14:6a:3a:10:cf:ef:d9:0f:bd:e2:
         ba:a7:07:bb:94:c9:83:5c:4b:60:c9:8c:95:b5:e4:a9:2e:a9:
         98:93:d9:55:0b:e2:95:4e:f1:dc:d0:7d:86:3f:71:00:71:8a:
         c1:70:b0:bd:85:30:6a:ed:e5:30:32:01:1e:12:c0:2a:1d:c7:
         53:6a:66:6d:9b:f3:b3:b2:42:cb:94:09:b3:96:6d:bb:77:dd:
         2c:72:05:6d:6d:ca:40:f8:c1:7d:00:79:5c:c4:cb:eb:07:19:
         e1:32:fd:d5:a3:24:b5:15:de:4b:f3:e8:80:e3:9e:ff:81:41:
         65:93:f9:76:28:fa:b8:4a:07:c0:2b:17:a9:cc:07:9d:0d:cb:
         8a:f1:74:ac:9e:aa:6a:c3:43:35:65:57:37:ad:1b:66:df:f3:
         be:69:97:b2:6f:b6:af:ec:a7:96:2e:2a:25:ca:3f:77:9b:a7:
         13:09:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org