Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          Da5AjUsH4dhCtAr9DoLUKx0a1JHhOVm9hMI9KVR8ghw=
Subject key identifier:   F3:22:40:70:22:F1:22:51:11:AD:B5:09:D3:55:57:9B:2C:39:49:F8
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       178A2C6A91C6B743E0D00DA82043B7411F67F31A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5650.roa
Signing time:             Wed 20 Dec 2023 14:16:02 +0000
ROA not before:           Wed 20 Dec 2023 14:11:02 +0000
ROA not after:            Wed 18 Dec 2024 14:16:02 +0000
asID:                     5650
IP address blocks:        89.116.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8a:2c:6a:91:c6:b7:43:e0:d0:0d:a8:20:43:b7:41:1f:67:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 20 14:11:02 2023 GMT
            Not After : Dec 18 14:16:02 2024 GMT
        Subject: CN=F322407022F1225111ADB509D355579B2C3949F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:55:43:aa:9a:b6:df:01:a0:e0:da:78:a8:
                    9f:d5:c9:e6:6b:1b:61:ee:46:d9:c6:d9:11:23:32:
                    af:d4:64:08:a4:67:ac:d4:a5:76:85:05:a1:74:fe:
                    21:55:c4:5c:d1:b9:cd:f4:e3:46:f6:3c:e0:7b:bc:
                    2b:6b:c3:a9:6d:fa:18:6a:47:05:39:77:96:55:4e:
                    d0:ed:a5:d4:37:93:37:1d:e0:ab:9c:e9:f4:e6:15:
                    38:5a:18:a3:f0:ed:64:59:51:a6:62:7e:15:b9:86:
                    36:f5:50:0e:40:c7:f9:3b:f0:21:0e:b3:10:df:2b:
                    84:af:5a:16:3b:7b:41:93:91:8e:1b:c4:22:84:17:
                    d6:66:7e:c2:25:06:64:a0:b4:0f:fb:48:92:84:42:
                    18:31:aa:bd:89:2f:46:08:b4:79:4f:31:e2:bb:b4:
                    b6:8c:82:af:bc:fa:fd:d1:7c:0a:3a:35:57:1d:5d:
                    ee:0c:9b:a1:33:d3:ac:45:0a:bf:09:06:df:c6:60:
                    82:76:f7:43:5d:24:e0:39:d7:0f:72:bb:f3:1d:e6:
                    00:3f:07:2c:00:da:1a:a8:4b:c2:a1:c3:83:a0:64:
                    f3:c8:0e:32:3b:b5:96:5c:8d:da:a2:64:f9:da:14:
                    95:de:21:c1:ab:81:3f:fe:70:58:fa:d2:fc:57:8f:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:22:40:70:22:F1:22:51:11:AD:B5:09:D3:55:57:9B:2C:39:49:F8
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:30:82:5c:d9:65:05:19:eb:a6:3f:fa:d3:87:d2:39:e2:
         98:53:13:16:0a:d2:dc:02:91:aa:8e:3e:c7:7f:73:02:db:41:
         52:21:ea:58:63:c8:ae:f4:38:54:9f:6b:7c:c3:40:cd:08:68:
         5a:af:16:30:ec:a1:74:c7:21:80:9f:50:a8:05:6c:c3:21:56:
         b3:74:17:d3:b1:80:a4:22:b8:0c:c0:d3:25:8d:fd:44:ca:64:
         da:f5:d5:43:8c:a1:f0:fc:e7:94:c4:c1:69:95:f4:8d:98:bf:
         67:a4:37:56:c9:7c:8d:61:5a:6d:7c:f7:52:e0:53:e7:40:be:
         a3:d3:f3:81:bb:f3:49:3a:d7:28:f3:1d:1d:b1:a6:8b:c4:02:
         d7:8c:3b:cc:17:cc:1f:d8:dc:9a:dc:39:c8:ea:f2:95:c3:15:
         e2:dd:f6:c5:46:fb:f3:4e:6f:82:0a:67:be:a8:c5:40:ca:95:
         c8:8f:44:4a:4f:60:64:77:45:c0:f3:e1:9e:6b:81:27:9f:4e:
         e4:fc:1c:cb:2b:c7:1f:c0:ea:44:7d:2b:14:93:72:f5:32:7b:
         39:07:07:8e:7d:b3:c5:d1:50:12:a2:4d:08:8a:da:dd:d9:eb:
         3e:d4:18:4b:c0:60:19:fb:29:3f:e3:d1:b2:1d:e5:72:85:17:
         ef:a7:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org