Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
File:                     AS55720.roa (raw, json)
Hash identifier:          SqZq386H2pNQKT5lDNExaIemm62EbrFN57RYkjZllmM=
Subject key identifier:   20:F8:C0:1E:C6:3E:92:1C:67:C4:07:ED:29:82:2A:71:32:C3:45:76
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       4D2EE09F4CD8A2C5CAA85285ECE0C86CA7D62469
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
Signing time:             Thu 28 Mar 2024 07:53:10 +0000
ROA not before:           Thu 28 Mar 2024 07:48:10 +0000
ROA not after:            Thu 27 Mar 2025 07:53:10 +0000
asID:                     55720
IP address blocks:        89.116.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2e:e0:9f:4c:d8:a2:c5:ca:a8:52:85:ec:e0:c8:6c:a7:d6:24:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 28 07:48:10 2024 GMT
            Not After : Mar 27 07:53:10 2025 GMT
        Subject: CN=20F8C01EC63E921C67C407ED29822A7132C34576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:25:21:9d:41:5c:12:b9:05:50:39:90:c2:
                    d5:c3:97:4f:f6:aa:b2:94:24:12:f6:f0:4c:ee:11:
                    7d:9e:89:41:81:e9:85:04:86:3d:9a:05:2a:31:98:
                    74:ff:e1:34:28:f7:0e:d1:68:6c:b2:b5:b1:83:b6:
                    7d:a1:cf:d9:3d:fa:96:e9:f4:6a:ab:db:39:a4:6d:
                    49:0d:05:2d:60:c3:94:2d:aa:d3:86:75:48:f5:8f:
                    71:da:85:f9:5c:8b:64:eb:8f:d7:a9:fb:74:ad:e3:
                    e1:93:e3:e9:98:3b:dc:51:ca:4d:b1:d3:2e:bb:38:
                    1e:9f:ff:ed:a2:1e:71:79:aa:b1:f6:25:dd:0b:82:
                    f6:15:63:57:25:09:49:78:86:b6:24:56:cc:9f:e5:
                    ef:f5:42:a0:d6:63:20:8e:29:c0:c2:a0:ec:1f:93:
                    1f:66:9b:19:70:f1:a9:a6:d3:32:7b:b6:9d:bd:43:
                    74:3e:55:c7:b0:12:68:19:ee:8d:ec:2f:27:19:74:
                    01:5f:78:ad:ca:27:87:2c:b1:1e:50:05:82:54:d0:
                    fc:10:5d:7e:ab:82:f7:be:9e:57:a1:6f:9e:a6:55:
                    0a:b5:8e:8c:e3:5e:85:51:7e:46:82:53:8a:24:c7:
                    9f:3f:94:fd:7a:4d:ca:de:f2:b1:5d:0a:91:80:c2:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F8:C0:1E:C6:3E:92:1C:67:C4:07:ED:29:82:2A:71:32:C3:45:76
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:0c:67:4a:ba:04:2b:44:f7:c4:d0:17:4f:21:8a:53:2c:
         be:cc:86:fd:c5:e3:00:f0:64:74:f0:3b:f6:75:82:06:9c:b3:
         70:8b:46:1c:e8:b2:ce:af:30:8f:16:79:04:4a:97:64:b6:58:
         4b:4b:91:65:bd:7f:8d:4e:e5:66:c6:9b:cc:94:48:f2:38:f9:
         14:34:84:5b:2c:52:5b:f1:69:13:58:67:84:86:61:f6:7f:26:
         31:d2:e1:00:9e:2b:47:7d:53:8e:b0:e6:f4:f2:5c:7e:a3:b4:
         9d:0a:64:88:1c:d0:f4:4f:91:cc:ec:04:d7:0c:20:2e:06:7b:
         b7:50:3f:e3:30:59:07:58:87:52:30:bc:10:3c:9b:96:01:e6:
         bf:df:48:d3:a1:59:ce:61:8f:ff:b7:5f:d0:fc:02:ae:f7:33:
         74:bd:40:02:89:d6:83:1c:f3:5b:02:2f:92:5e:55:74:8d:1d:
         e2:a9:6d:83:7b:71:a5:80:49:cc:a6:7c:93:9e:7e:4d:25:a2:
         21:2e:6a:99:0b:9c:3a:dd:f3:d3:c9:1b:d0:0c:f0:54:67:d3:
         0f:f7:70:16:b1:66:25:c5:d7:f9:1a:f2:68:b1:f0:f1:81:c4:
         85:f0:ef:a4:ca:2b:7b:2d:55:9b:dc:74:11:bd:f8:cb:1c:7e:
         9a:8f:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org