Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa
File:                     AS59432.roa (raw, json)
Hash identifier:          hEM4+s3GKMXsonlBrBe5JHmcblHgjLXtiQxIH0JxzP8=
Subject key identifier:   49:7B:65:46:62:F7:EA:3F:DA:77:DD:B8:C0:21:D0:A8:AA:C6:77:43
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0174E0A770AEC3A27C3E44FF84E451410E3A8ABB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa
Signing time:             Mon 15 Jul 2024 00:05:18 +0000
ROA not before:           Mon 15 Jul 2024 00:00:18 +0000
ROA not after:            Mon 14 Jul 2025 00:05:18 +0000
asID:                     59432
IP address blocks:        89.116.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:e0:a7:70:ae:c3:a2:7c:3e:44:ff:84:e4:51:41:0e:3a:8a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 15 00:00:18 2024 GMT
            Not After : Jul 14 00:05:18 2025 GMT
        Subject: CN=497B654662F7EA3FDA77DDB8C021D0A8AAC67743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:62:3e:77:c1:76:a1:71:e5:80:94:4a:dc:
                    91:cc:67:3c:83:3a:53:b0:f9:84:a2:39:9a:3d:6b:
                    7f:d6:50:75:9b:39:ca:a7:a3:39:8d:40:2a:e7:19:
                    6b:06:ec:21:6b:e4:52:03:68:6b:0c:80:52:4f:a0:
                    69:b6:28:e7:c2:66:ad:1e:30:b4:12:ca:c0:5e:d3:
                    5b:79:19:57:0b:8b:13:3d:a7:93:26:a5:26:93:89:
                    c3:4a:cf:99:ab:3a:f3:59:b7:37:b9:d6:69:05:72:
                    d5:3d:1a:58:9e:9f:b7:d7:67:11:a2:62:3f:d7:e3:
                    8c:74:ca:e4:81:36:9b:2a:ab:c3:6c:2d:3a:b4:ed:
                    56:50:43:bc:e0:02:c3:96:78:6d:59:ba:12:c5:6f:
                    22:50:43:1d:0e:a3:b9:75:7b:a9:5e:1e:e2:cd:f1:
                    94:bf:df:8d:bc:c2:33:4b:1d:a1:da:39:2c:08:7e:
                    4c:80:8f:a4:a6:c1:fc:f0:8a:14:e2:22:6d:9a:1c:
                    8c:a1:81:11:87:34:29:72:2d:e5:35:73:a3:a7:f8:
                    7f:62:ed:b4:c7:d7:fe:e0:dd:f6:c1:53:08:cd:fc:
                    39:2c:93:30:77:43:59:7a:b3:97:1a:37:89:0f:9d:
                    c8:4b:e3:9b:8f:45:1f:1c:fc:e4:dd:28:bf:0a:3b:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7B:65:46:62:F7:EA:3F:DA:77:DD:B8:C0:21:D0:A8:AA:C6:77:43
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:f1:db:94:8b:6f:38:ac:b0:4e:78:4a:ff:89:a7:54:a9:
         f8:37:04:cf:0b:f6:c2:1e:87:17:06:09:6e:93:49:7f:1f:2a:
         81:b5:ee:c0:51:36:b3:b9:7a:c4:3c:b2:69:fe:e6:ab:f5:f2:
         bd:54:d7:5d:51:15:c6:6b:9f:56:5e:b9:c6:9a:1b:3a:c9:81:
         98:40:f8:df:90:d4:f1:ad:f2:cf:40:8a:9e:59:b8:ed:ab:15:
         23:0b:de:dc:e2:9b:a1:25:4c:79:56:c6:69:40:a2:e4:fc:82:
         08:e6:ad:17:0f:98:14:72:f0:de:e5:b3:6f:58:ad:6a:e9:ac:
         42:16:2e:cc:8a:51:c5:39:8c:35:b8:6a:77:b8:87:c4:1c:6b:
         e5:34:a8:00:18:1b:3b:bc:d1:e0:dd:1f:2f:83:99:fa:d4:02:
         05:87:c3:4f:a4:f6:81:04:69:e1:af:dd:21:8a:a6:84:72:de:
         54:e3:da:43:df:b7:a9:7e:8b:20:98:fb:38:a4:53:60:41:9c:
         b1:ff:9e:d7:50:9d:43:fe:86:80:27:58:40:5a:d6:dc:2e:6a:
         c1:d4:e0:50:dc:3a:2e:55:32:c4:95:c0:ed:2e:c6:c7:56:76:
         5a:1a:b1:87:4b:be:c5:20:b0:fa:4f:86:50:8c:b8:50:57:84:
         6c:40:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org