Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          QLwM+VTWcT7p8OQcNWUvvd5I0UNShfereaNsRiX5Ho4=
Subject key identifier:   4C:64:70:50:7D:9E:00:3C:EE:A2:21:86:D0:C3:08:69:89:C4:41:C3
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       49061762BFB52A59F313EA5BC6B5648528D589A4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5065.roa
Signing time:             Wed 10 Jul 2024 00:00:10 +0000
ROA not before:           Tue 09 Jul 2024 23:55:10 +0000
ROA not after:            Wed 09 Jul 2025 00:00:10 +0000
asID:                     5065
IP address blocks:        89.116.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:17:62:bf:b5:2a:59:f3:13:ea:5b:c6:b5:64:85:28:d5:89:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul  9 23:55:10 2024 GMT
            Not After : Jul  9 00:00:10 2025 GMT
        Subject: CN=4C6470507D9E003CEEA22186D0C3086989C441C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:ad:e0:eb:02:fb:ae:9f:6b:7d:7c:52:5e:
                    15:dd:d1:19:f9:8f:f9:9a:18:60:9d:9f:44:80:a9:
                    1b:11:ab:8d:1a:01:9b:eb:6d:bb:7a:65:b8:6c:08:
                    26:6c:2e:44:19:d7:49:79:a5:49:64:18:33:2d:40:
                    9e:d2:94:ec:95:2a:e1:fa:be:fa:8a:64:68:02:d4:
                    bd:88:2d:9c:99:97:bb:2f:5d:70:5e:4b:20:74:f3:
                    c7:b3:1a:04:6d:29:e7:24:c5:de:ed:1c:61:73:8b:
                    6a:4e:59:c7:23:bf:d4:fb:08:b1:e0:bc:b5:d3:6e:
                    e2:5b:1d:ec:92:19:89:53:f2:1a:93:4d:63:6d:c2:
                    d2:a1:9f:74:da:ea:30:39:3d:61:f6:54:8a:08:97:
                    da:c4:2a:fc:60:93:63:39:6e:b0:d6:16:0a:12:7e:
                    8c:63:8b:a5:6d:1d:be:12:23:08:35:45:27:bc:e4:
                    5e:48:06:c4:6b:86:21:f1:68:65:07:a4:f4:87:8a:
                    77:f8:fe:a7:81:f3:6e:0b:da:b0:d1:db:bd:36:41:
                    65:f3:82:7a:90:c5:34:01:e4:b5:c9:2c:fe:c9:73:
                    cc:6a:6e:9f:f6:67:05:8f:61:fa:a7:11:24:7d:cb:
                    0c:bb:55:83:0e:eb:b7:d3:de:82:35:07:a7:40:23:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:70:50:7D:9E:00:3C:EE:A2:21:86:D0:C3:08:69:89:C4:41:C3
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:27:ee:a5:35:cd:35:8d:78:65:2a:78:69:8b:29:08:2a:
         df:ac:b1:c2:0a:19:6e:97:19:6a:32:44:a1:1d:9c:89:c5:30:
         6f:67:47:c5:08:e2:2b:7e:cc:d1:5c:72:e4:97:87:20:e6:07:
         ba:2a:41:bd:35:f1:02:ce:25:a9:87:8c:33:6b:b7:67:d7:f4:
         ca:20:d7:4d:e5:ad:56:18:34:a4:fe:c3:77:36:a9:60:fe:30:
         60:85:df:e3:73:ae:ab:e0:ff:17:6d:76:ed:8d:a9:e8:21:99:
         13:db:9e:53:6c:d4:04:e8:ec:6b:a9:f6:4b:0a:eb:b5:66:09:
         fc:5b:d9:37:c7:bf:c5:e6:fb:37:3f:77:7f:4e:07:82:17:32:
         73:e9:75:0c:65:64:2f:99:9d:4b:1c:55:eb:3c:7a:a5:00:73:
         f8:24:4f:64:30:48:e2:72:fb:51:c4:11:08:6a:df:33:48:35:
         48:db:33:5a:92:e3:12:67:a4:e0:2f:89:d2:90:37:fd:ef:b4:
         16:f3:87:c9:92:21:87:30:9b:98:10:28:ae:05:55:96:c8:d4:
         e5:63:e9:12:ae:1a:3f:95:83:d6:cc:5e:7b:f1:74:dc:05:3f:
         14:ef:e5:b5:8f:ab:2d:dd:99:22:9b:37:c2:2c:d7:e1:62:e9:
         98:10:2a:e4
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUSQYXYr+1KlnzE+pbxrVkhSjViaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDA3MDkyMzU1MTBaFw0yNTA3MDkwMDAwMTBaMDMxMTAvBgNV
BAMTKDRDNjQ3MDUwN0Q5RTAwM0NFRUEyMjE4NkQwQzMwODY5ODlDNDQxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsAa3g6wL7rp9rfXxSXhXd0Rn5
j/maGGCdn0SAqRsRq40aAZvrbbt6ZbhsCCZsLkQZ10l5pUlkGDMtQJ7SlOyVKuH6
vvqKZGgC1L2ILZyZl7svXXBeSyB088ezGgRtKeckxd7tHGFzi2pOWccjv9T7CLHg
vLXTbuJbHeySGYlT8hqTTWNtwtKhn3Ta6jA5PWH2VIoIl9rEKvxgk2M5brDWFgoS
foxji6VtHb4SIwg1RSe85F5IBsRrhiHxaGUHpPSHinf4/qeB824L2rDR2702QWXz
gnqQxTQB5LXJLP7Jc8xqbp/2ZwWPYfqnESR9ywy7VYMO67fT3oI1B6dAIzxJAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUTGRwUH2eADzuoiGG0MMIaYnEQcMwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZdJYwDQYJKoZIhvcNAQEL
BQADggEBALoeJ+6lNc01jXhlKnhpiykIKt+sscIKGW6XGWoyRKEdnInFMG9nR8UI
4it+zNFccuSXhyDmB7oqQb018QLOJamHjDNrt2fX9Mog103lrVYYNKT+w3c2qWD+
MGCF3+Nzrqvg/xdtdu2NqeghmRPbnlNs1ATo7Gup9ksK67VmCfxb2TfHv8Xm+zc/
d39OB4IXMnPpdQxlZC+ZnUscVes8eqUAc/gkT2QwSOJy+1HEEQhq3zNINUjbM1qS
4xJnpOAvidKQN/3vtBbzh8mSIYcwm5gQKK4FVZbI1OVj6RKuGj+Vg9bMXnvxdNwF
PxTv5bWPqy3dmSKbN8Is1+Fi6ZgQKuQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org