Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa
File:                     AS51847.roa (raw, json)
Hash identifier:          x2UekjQgcvuxEOrr2/YHZ1rYwDbBi5MeGUVE3/VTV5k=
Subject key identifier:   8C:83:56:27:FC:33:05:BA:FE:FD:ED:A8:77:AA:ED:80:D0:2E:36:07
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       4FDE4C58510D5A2585DB50F65036BFE40880764A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa
Signing time:             Thu 12 Oct 2023 12:21:04 +0000
ROA not before:           Thu 12 Oct 2023 12:16:04 +0000
ROA not after:            Thu 10 Oct 2024 12:21:04 +0000
asID:                     51847
IP address blocks:        89.116.88.0/23 maxlen: 23
                          89.116.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:de:4c:58:51:0d:5a:25:85:db:50:f6:50:36:bf:e4:08:80:76:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 12 12:16:04 2023 GMT
            Not After : Oct 10 12:21:04 2024 GMT
        Subject: CN=8C835627FC3305BAFEFDEDA877AAED80D02E3607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:97:9f:40:6d:ec:dd:9a:70:e2:fa:9a:ef:
                    92:79:ae:13:53:0d:f9:6d:21:6b:8a:ea:34:8c:2a:
                    55:32:81:c7:88:96:45:4a:8c:81:77:e9:15:4d:5d:
                    55:18:a2:a2:39:08:74:e9:73:b6:d0:66:aa:cc:d9:
                    3f:31:93:2c:2b:bb:22:2e:8a:b9:c8:3d:82:6a:ad:
                    95:53:6b:ff:94:53:4c:dc:08:df:20:50:ff:0d:08:
                    bb:fa:13:e9:f5:29:85:de:9c:1d:af:50:d6:84:fa:
                    da:bd:04:ef:5b:b3:fb:11:1e:e2:1c:e3:5c:fe:39:
                    d3:aa:7e:bf:3a:4c:3f:41:3c:56:36:48:37:b6:8d:
                    cf:bc:6a:b1:c0:d9:25:4d:cb:4b:77:3b:5f:16:0e:
                    d9:bb:11:48:76:8d:e6:e1:bc:95:e2:17:9c:a1:52:
                    47:5b:ab:0a:9f:40:b6:4d:eb:a3:3a:91:89:a3:16:
                    e9:92:2c:c8:61:88:d4:32:db:99:d4:b0:e0:8e:4d:
                    6d:e9:a1:04:9e:b0:05:e1:a1:90:ad:ab:18:fd:1b:
                    f1:d9:f0:b7:27:41:ac:3a:12:c8:ec:23:79:28:15:
                    40:bc:e6:00:a5:b7:08:6b:6d:04:22:51:7f:29:20:
                    2a:40:95:29:9a:b5:04:0b:ec:48:fc:ac:20:57:af:
                    2e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:56:27:FC:33:05:BA:FE:FD:ED:A8:77:AA:ED:80:D0:2E:36:07
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:35:aa:07:ce:20:23:ea:8c:d9:b8:5a:9b:18:d2:86:3d:
         91:84:d7:3f:6c:7f:78:7a:3a:bf:86:a3:8f:d8:c7:f6:15:ad:
         ac:6e:07:88:6a:b8:b5:85:61:de:73:47:08:39:a3:c4:10:71:
         95:ed:d3:e9:04:aa:39:13:5f:20:17:c4:6c:d8:56:c4:cc:46:
         4f:bb:31:19:e2:8e:71:9b:f6:9b:ff:7d:99:30:e4:90:b9:5b:
         16:c0:ea:55:69:da:8e:5b:d3:76:77:63:27:aa:ce:3b:dd:5d:
         20:c8:d3:08:4b:36:5e:2b:e4:80:65:5c:2b:1e:c6:0a:3a:0b:
         8f:47:58:4b:4f:49:02:2b:f4:86:d6:0c:da:f1:0e:7f:e9:9f:
         2d:ec:90:48:5b:6a:9c:35:d4:07:9f:24:ac:86:c7:54:9f:dc:
         f5:14:e0:95:15:4d:87:cc:1b:92:9b:e9:50:0e:76:82:8d:28:
         75:b6:52:ee:80:51:13:c1:db:fe:4c:97:7d:ec:88:cc:73:2c:
         a6:40:1f:f1:71:c3:d2:7a:65:70:34:64:7d:a1:39:42:6e:76:
         91:72:e2:80:a1:bf:a8:19:35:bb:b1:f6:86:6e:9d:e1:5b:c4:
         ef:e6:5e:e6:34:f2:26:b1:7c:52:c2:8a:ca:e1:ff:cd:8a:b9:
         81:cd:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org