Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
File:                     AS50673.roa (raw, json)
Hash identifier:          0r/yGhjHvdEcC2dz9MxYPCQBQ8L1xPB6XPa3EEz5OII=
Subject key identifier:   8C:EE:66:87:91:23:2D:8E:54:64:3A:B1:33:CC:30:22:E5:66:BD:6F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5648CEC9923827C5E5AA5DAA1E3EE8BA681D77D8
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
Signing time:             Wed 10 Jan 2024 08:05:08 +0000
ROA not before:           Wed 10 Jan 2024 08:00:08 +0000
ROA not after:            Wed 08 Jan 2025 08:05:08 +0000
asID:                     50673
IP address blocks:        89.117.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:48:ce:c9:92:38:27:c5:e5:aa:5d:aa:1e:3e:e8:ba:68:1d:77:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 10 08:00:08 2024 GMT
            Not After : Jan  8 08:05:08 2025 GMT
        Subject: CN=8CEE668791232D8E54643AB133CC3022E566BD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:6a:24:66:0d:0c:79:62:80:17:b2:27:3d:
                    c4:e3:2e:f2:e5:68:fb:6c:01:1a:40:11:ed:8b:7f:
                    3c:f4:be:12:af:4c:d6:c7:e8:c3:7b:b5:00:9c:e6:
                    91:47:99:04:25:cc:43:e6:4c:4f:90:6f:21:9a:4d:
                    38:0e:fc:b1:ad:6e:8b:08:7e:35:94:51:33:ef:3b:
                    82:f3:eb:9e:34:5c:37:e7:21:97:74:76:0c:88:97:
                    ae:2b:d9:b0:63:69:9e:a8:84:57:0a:c2:30:f5:ab:
                    b2:f4:00:3b:48:f9:87:e5:05:ef:92:8e:11:8d:95:
                    4f:f2:9c:e0:dc:c4:60:3d:60:ae:91:27:e3:e4:1d:
                    0e:95:7e:58:9c:f5:c3:4e:e9:e1:ac:d1:b9:99:2f:
                    88:70:10:9a:54:57:d9:ab:19:e1:1a:f2:15:cf:d2:
                    bf:d1:7f:28:b5:b1:ff:e0:6e:d9:fb:a5:53:0d:37:
                    64:09:e5:3f:45:44:bb:2f:67:7c:da:b9:c1:f7:0c:
                    17:75:f1:a4:3a:d7:93:68:fb:95:b1:41:c1:82:de:
                    d8:31:9d:e0:5b:5e:12:0f:91:fd:81:ac:85:90:29:
                    f5:3b:ff:86:c8:58:9d:b7:ea:28:44:43:03:17:b8:
                    f6:e4:5e:a2:ac:f4:28:de:ae:5d:02:d4:7f:e3:4d:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EE:66:87:91:23:2D:8E:54:64:3A:B1:33:CC:30:22:E5:66:BD:6F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:77:2a:8c:0d:97:30:36:83:02:8e:00:7f:9e:75:84:a5:
         bc:2b:39:65:5a:7e:cb:70:40:ad:b1:00:36:97:14:e3:c2:03:
         11:f9:ad:1e:51:66:f6:6b:fa:ab:df:01:f7:be:86:6f:40:e6:
         e7:33:4c:4f:aa:17:a1:2d:51:ed:1e:63:72:98:14:2a:6c:88:
         86:84:7a:7d:f3:1e:9f:4a:a1:ef:70:43:6a:4d:84:c1:38:4e:
         96:7f:8e:f4:81:ab:8a:98:bf:14:6a:40:47:32:a5:d3:f7:c7:
         02:ec:c7:05:18:fd:5b:cd:35:6c:d5:51:95:90:0a:04:ec:b9:
         52:c2:47:49:e5:22:ec:d7:67:c5:9d:6c:49:58:2e:88:4f:36:
         25:68:9e:48:c2:12:ec:44:05:ad:5f:2c:81:26:02:eb:bf:f3:
         af:09:bc:6c:a2:64:9f:4c:d4:a7:ea:66:3b:92:66:cf:ea:73:
         a4:43:76:ca:ac:22:86:89:3f:42:9e:8b:26:5c:a2:66:2d:a0:
         83:13:25:f7:9c:ba:70:48:2f:be:bc:77:ab:90:40:19:96:06:
         fa:48:2e:29:b8:d8:eb:a7:01:37:10:18:03:54:4f:63:74:f8:
         32:4b:a5:96:df:7c:a1:5d:09:ee:da:76:a3:0d:db:3e:2a:e9:
         ce:ff:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:25 2024 by rpki-client on console-ams.rpki-client.org