Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
File:                     AS57167.roa (raw, json)
Hash identifier:          76eqK9QSD28yb2Cn1ipdFZKf09DSmg8N/E8h6Rcu+CM=
Subject key identifier:   C5:7F:A8:47:15:7A:7A:8A:25:E3:78:93:87:C6:17:A1:C1:89:13:18
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0EEE2BFA631D6867B9948D4969CCF74B063E57EE
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
Signing time:             Tue 09 Jan 2024 14:05:08 +0000
ROA not before:           Tue 09 Jan 2024 14:00:08 +0000
ROA not after:            Tue 07 Jan 2025 14:05:08 +0000
asID:                     57167
IP address blocks:        89.117.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:2b:fa:63:1d:68:67:b9:94:8d:49:69:cc:f7:4b:06:3e:57:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan  9 14:00:08 2024 GMT
            Not After : Jan  7 14:05:08 2025 GMT
        Subject: CN=C57FA847157A7A8A25E3789387C617A1C1891318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:7c:3d:49:d7:d9:53:d1:49:b2:d5:ae:94:
                    7f:0e:55:00:d1:42:bc:76:7a:a9:99:6c:81:f4:7f:
                    9e:9f:1b:d0:da:f9:19:ac:f3:75:cd:fd:bc:7a:d1:
                    b5:09:8b:15:30:c1:ba:a8:ba:71:11:d1:a8:2d:ae:
                    54:89:b4:c3:19:1e:29:1e:b8:e5:55:30:38:8d:5a:
                    d6:bc:01:16:33:72:b2:82:55:07:ea:cf:ab:9e:3b:
                    15:93:3c:75:9c:34:37:d4:7c:46:d2:ff:ca:b5:1e:
                    c7:08:29:8f:58:ae:65:36:3f:6d:6f:55:67:b6:52:
                    60:64:6b:ec:fe:d9:de:a9:9d:50:47:ff:cc:f0:81:
                    45:54:61:19:bf:18:48:ad:2f:26:2c:83:7e:d7:06:
                    23:c9:c6:8c:00:23:49:4c:a1:85:4a:c3:21:c5:a3:
                    be:ba:c2:38:9e:df:1e:36:84:bf:5e:f6:a8:1d:f3:
                    a8:46:50:df:88:86:d7:dc:c9:71:95:76:68:f8:40:
                    16:16:40:83:de:76:da:1e:17:8c:e8:ac:80:9e:85:
                    0f:af:31:bb:fc:66:36:5f:98:41:88:77:95:93:39:
                    68:cd:f3:a7:99:68:31:f7:39:a9:24:24:05:e9:dd:
                    7f:04:cc:a5:f5:03:4a:41:f8:8b:c1:19:0b:1e:b5:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7F:A8:47:15:7A:7A:8A:25:E3:78:93:87:C6:17:A1:C1:89:13:18
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:93:3b:f6:1e:8b:81:d3:5b:ef:2b:8e:c8:e0:90:81:66:d3:
         18:f5:3f:c2:c7:96:27:49:cb:b5:8e:2f:47:53:79:a9:06:7e:
         53:58:67:b5:13:a9:21:fa:e4:e7:67:41:9c:c7:39:b7:86:d9:
         4e:4e:d7:71:27:9b:56:b1:30:19:a3:89:d5:0c:7a:51:0d:fb:
         b8:65:f0:27:0f:e6:8c:99:42:95:52:a2:83:ce:4c:fb:20:2e:
         73:8f:94:30:46:a0:4d:da:8a:7f:8f:34:fa:9a:3b:35:6a:8d:
         57:e7:03:ab:76:ec:3a:46:ae:a9:f6:17:69:79:5d:0e:b9:e6:
         4e:5f:f9:fa:7d:b3:64:b9:05:25:80:3c:30:96:f0:a5:52:5a:
         8d:5c:dd:99:c6:23:df:11:7a:12:46:52:64:c0:4b:bf:7c:7b:
         05:56:2a:bf:04:c7:cf:4e:57:25:80:9a:f7:5b:04:22:67:bd:
         a6:aa:c1:43:49:dc:3b:be:36:9a:f0:f4:2b:5b:56:46:4d:7d:
         ff:82:6d:75:68:ee:82:38:78:84:46:04:fb:ca:2c:bd:fd:f7:
         4b:2e:5f:1d:b5:d2:25:6d:89:65:cc:10:4c:6a:70:0c:f8:e6:
         d3:fd:e5:45:2e:ad:2d:87:b0:f6:78:67:b6:3f:cc:04:73:97:
         fd:60:40:f3
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUDu4r+mMdaGe5lI1Jacz3SwY+V+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNDAxMDkxNDAwMDhaFw0yNTAxMDcxNDA1MDhaMDMxMTAvBgNV
BAMTKEM1N0ZBODQ3MTU3QTdBOEEyNUUzNzg5Mzg3QzYxN0ExQzE4OTEzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLXw9SdfZU9FJstWulH8OVQDR
Qrx2eqmZbIH0f56fG9Da+Rms83XN/bx60bUJixUwwbqounER0agtrlSJtMMZHike
uOVVMDiNWta8ARYzcrKCVQfqz6ueOxWTPHWcNDfUfEbS/8q1HscIKY9YrmU2P21v
VWe2UmBka+z+2d6pnVBH/8zwgUVUYRm/GEitLyYsg37XBiPJxowAI0lMoYVKwyHF
o766wjie3x42hL9e9qgd86hGUN+IhtfcyXGVdmj4QBYWQIPedtoeF4zorICehQ+v
Mbv8ZjZfmEGId5WTOWjN86eZaDH3OakkJAXp3X8EzKX1A0pB+IvBGQsetQXFAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUxX+oRxV6eool43iTh8YXocGJExgwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzU3MTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXUYMA0GCSqGSIb3DQEB
CwUAA4IBAQBtkzv2HouB01vvK47I4JCBZtMY9T/Cx5YnScu1ji9HU3mpBn5TWGe1
E6kh+uTnZ0Gcxzm3htlOTtdxJ5tWsTAZo4nVDHpRDfu4ZfAnD+aMmUKVUqKDzkz7
IC5zj5QwRqBN2op/jzT6mjs1ao1X5wOrduw6Rq6p9hdpeV0OueZOX/n6fbNkuQUl
gDwwlvClUlqNXN2ZxiPfEXoSRlJkwEu/fHsFViq/BMfPTlclgJr3WwQiZ72mqsFD
Sdw7vjaa8PQrW1ZGTX3/gm11aO6COHiERgT7yiy9/fdLLl8dtdIlbYllzBBManAM
+ObT/eVFLq0th7D2eGe2P8wEc5f9YEDz
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org