Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
File:                     AS50919.roa (raw, json)
Hash identifier:          mQTUDoI6drRBYmwQ0JieMvG5dVomG3KEaylhUl2BojU=
Subject key identifier:   EC:0D:20:76:B0:62:03:2F:69:12:97:13:DA:67:9A:73:38:F1:DC:AA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       77092C7E984806AA6EACAA135BA73A69608E61B0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa
Signing time:             Mon 28 Oct 2024 09:43:25 +0000
ROA not before:           Mon 28 Oct 2024 09:38:25 +0000
ROA not after:            Mon 27 Oct 2025 09:43:25 +0000
asID:                     50919
IP address blocks:        89.116.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:09:2c:7e:98:48:06:aa:6e:ac:aa:13:5b:a7:3a:69:60:8e:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 28 09:38:25 2024 GMT
            Not After : Oct 27 09:43:25 2025 GMT
        Subject: CN=EC0D2076B062032F69129713DA679A7338F1DCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:c2:13:59:e9:6f:d8:15:df:30:ee:cb:1d:
                    b0:79:f0:05:96:d7:21:91:f1:9b:3d:1c:78:22:78:
                    58:ce:20:9b:d1:da:df:0b:bf:68:64:35:4e:2a:53:
                    fa:50:8e:70:19:d6:26:06:7a:69:5b:4c:15:52:e9:
                    05:08:7c:63:f6:78:9e:0c:9c:62:cb:e0:43:f8:03:
                    73:26:06:d9:22:da:f4:0a:af:25:ea:a8:3e:cd:74:
                    70:0b:73:a8:b1:39:d4:a9:e8:6d:6d:d5:bc:47:03:
                    48:5c:4c:30:18:c3:28:dd:62:f6:1f:87:3d:c3:32:
                    07:4b:06:76:4f:a1:3a:d2:35:ac:24:bc:6f:31:81:
                    f6:0f:0e:8e:72:e3:45:60:5f:33:b0:54:47:77:e8:
                    71:49:87:c2:3a:3b:a6:5d:b2:f1:3c:aa:47:88:a2:
                    f8:c9:34:b2:b0:1b:50:f7:63:79:ad:71:45:86:49:
                    03:4c:88:9b:93:16:08:69:8f:85:78:be:58:81:a3:
                    72:8f:2c:8c:09:a0:9b:e3:ec:c6:1e:ad:b8:fb:79:
                    f2:20:84:d6:e8:6c:ea:a0:c3:c1:cb:8b:8e:61:9d:
                    47:48:cb:6f:39:b9:dd:12:43:29:12:49:48:63:05:
                    e2:c5:2a:cd:dc:46:29:ab:83:19:a4:98:7d:2a:b4:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:20:76:B0:62:03:2F:69:12:97:13:DA:67:9A:73:38:F1:DC:AA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:d8:07:38:7e:77:30:e0:d0:d6:74:75:a1:97:5c:1b:8c:
         6f:46:75:4f:2f:72:74:fd:dc:53:a4:6c:48:4f:7a:f3:16:d3:
         dd:89:0d:1d:e1:a3:9a:13:6c:2b:34:48:e1:97:ea:7d:bb:df:
         e5:4f:2e:00:b5:6f:77:33:68:c5:26:ae:e3:02:bf:27:5f:e5:
         dd:6e:3b:60:61:c9:76:3b:a1:02:3a:69:68:0c:70:8f:ed:b8:
         d3:42:55:b8:b9:fa:24:85:d2:8d:63:24:2e:03:c5:33:18:60:
         d1:4e:dc:2a:b2:6d:5c:37:da:18:b0:c5:91:7a:eb:dc:6b:b0:
         0d:79:2f:7b:52:85:39:75:ff:f0:20:c6:1a:40:1d:5f:8e:20:
         44:0c:d9:9c:ee:05:a7:ae:c9:5b:f5:c3:5d:b1:73:b6:64:91:
         ab:5f:9a:39:5d:31:c8:de:cb:d9:16:aa:3d:18:af:be:c5:88:
         01:28:b2:9f:d9:0a:3c:b3:80:8c:c1:57:93:f8:c9:a1:76:79:
         b2:f7:81:33:a8:97:2d:a0:7e:c8:f5:e6:51:9d:78:95:29:27:
         b5:2a:a2:da:7a:67:e6:53:df:ae:cd:b6:0c:11:5e:e6:c9:a6:
         a7:e3:32:63:51:e6:1f:3e:16:9a:ac:f5:1e:2d:b3:a8:4c:54:
         9e:6c:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org