Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa
File:                     AS51167.roa (raw, json)
Hash identifier:          Vh39U76JRQjF1NOgbmKjMXsblwU5JeRs14R1lMgvYXs=
Subject key identifier:   B4:55:50:E3:6C:26:9C:C4:3E:E7:D8:F0:71:9A:6C:2E:5B:20:0D:6F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       28E0F92D10B3E611FC892FA38A5FCE11871395F2
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa
Signing time:             Mon 04 Sep 2023 14:10:16 +0000
ROA not before:           Mon 04 Sep 2023 14:05:16 +0000
ROA not after:            Mon 02 Sep 2024 14:10:16 +0000
asID:                     51167
IP address blocks:        84.46.240.0/20 maxlen: 24
                          89.116.24.0/21 maxlen: 24
                          89.117.16.0/21 maxlen: 21
                          89.117.48.0/20 maxlen: 24
                          89.117.72.0/21 maxlen: 24
                          89.117.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e0:f9:2d:10:b3:e6:11:fc:89:2f:a3:8a:5f:ce:11:87:13:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  4 14:05:16 2023 GMT
            Not After : Sep  2 14:10:16 2024 GMT
        Subject: CN=B45550E36C269CC43EE7D8F0719A6C2E5B200D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:41:8e:0c:1d:58:b7:d6:28:57:49:58:29:
                    b8:d6:a4:34:64:f5:05:61:f1:2b:7d:f5:4e:70:de:
                    7b:ae:ce:83:d6:cb:2f:92:a5:eb:86:57:d1:7f:42:
                    db:11:01:19:f1:8d:20:af:93:0a:1d:cd:bf:43:e8:
                    9d:59:b1:e3:47:8f:13:fd:bb:d0:51:48:3a:03:26:
                    de:c5:7a:9b:17:cc:22:41:21:3a:65:0c:4a:40:13:
                    58:47:06:55:40:e7:ac:bb:ca:f7:db:0a:b4:34:c4:
                    b0:d1:a9:82:19:1a:fc:63:4c:58:d5:62:22:a5:86:
                    c4:95:51:0b:01:e9:c8:65:f1:14:e1:fe:c6:11:24:
                    40:58:f1:a0:e1:b7:c9:9f:2e:99:58:8d:5c:cc:f2:
                    18:07:2d:c6:c0:cd:24:2a:98:15:ab:a8:3d:6d:df:
                    bd:5e:da:e9:fb:61:bf:5b:82:2f:86:b9:f8:9f:32:
                    7d:16:79:9b:67:7a:6b:e9:e1:e9:cd:5e:35:63:25:
                    47:14:a6:bf:78:37:e2:ea:78:9b:1f:22:1e:2d:84:
                    00:7f:fd:1e:f2:b1:a2:3d:b7:f3:ed:0c:42:a8:9e:
                    5e:13:bc:ea:f6:33:c1:46:72:58:40:8e:c0:54:35:
                    a3:4c:ea:4d:9d:87:9f:0e:3e:4b:41:30:87:8e:bd:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:50:E3:6C:26:9C:C4:3E:E7:D8:F0:71:9A:6C:2E:5B:20:0D:6F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.240.0/20
                  89.116.24.0/21
                  89.117.16.0/21
                  89.117.48.0/20
                  89.117.72.0/21
                  89.117.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:f8:ce:bf:86:42:cd:f0:a1:87:bb:e3:b1:8d:c0:38:7e:
         46:de:d7:04:d0:08:22:41:d5:60:8a:f9:a8:c1:42:b1:c7:a4:
         42:7e:99:c2:14:7d:1b:43:90:33:c7:56:26:72:94:ea:7e:c6:
         5b:fc:6c:a1:57:6e:27:d8:75:57:ce:ba:be:6b:e9:d8:c7:da:
         52:89:b6:05:c2:bf:34:b3:d3:62:61:67:22:43:73:6b:e2:69:
         d1:00:67:0f:14:57:5d:10:25:ee:5d:2b:00:ed:c0:de:f7:cd:
         0a:39:4f:be:7b:bf:6a:5a:af:a1:37:ca:33:a1:ea:a8:6f:de:
         66:8d:c5:93:e5:8c:27:7b:2e:bc:a9:90:59:2d:55:90:c2:af:
         46:c9:21:71:6c:5c:2d:30:cb:ae:75:9e:8f:82:5f:d1:d0:e5:
         50:e9:e6:50:c9:04:69:f4:52:7f:c2:1e:17:48:1a:b3:50:80:
         7b:6f:e1:7d:47:af:9e:90:c0:a6:6e:4a:13:b0:29:1c:df:a4:
         b7:bc:f5:cb:f8:ba:f7:33:5a:9e:ef:dd:7d:54:ba:d8:2a:e5:
         0f:b1:66:02:87:b1:40:36:b4:60:af:dc:5e:6c:c3:34:f7:35:
         fc:55:d0:53:55:e5:17:9a:9b:0e:8d:66:1a:ee:ab:c0:6d:45:
         1e:fb:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org