Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa
File:                     AS59895.roa (raw, json)
Hash identifier:          QYy+WoUooQmYOLsPCwQE7Mk/k1jlTmytgMbkD0rRiqQ=
Subject key identifier:   01:E8:D0:7F:43:BE:38:61:8F:00:C4:10:CC:C8:F9:C6:3F:40:35:0B
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       44776C3962E241CD4E88C90EB31BCB167D27B187
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa
Signing time:             Mon 18 Nov 2024 12:43:28 +0000
ROA not before:           Mon 18 Nov 2024 12:38:28 +0000
ROA not after:            Mon 17 Nov 2025 12:43:28 +0000
asID:                     59895
IP address blocks:        89.117.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:77:6c:39:62:e2:41:cd:4e:88:c9:0e:b3:1b:cb:16:7d:27:b1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 18 12:38:28 2024 GMT
            Not After : Nov 17 12:43:28 2025 GMT
        Subject: CN=01E8D07F43BE38618F00C410CCC8F9C63F40350B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:ff:ef:14:68:00:e5:68:8d:69:5e:e4:63:
                    cb:04:01:2c:41:20:a9:9e:6e:b3:9b:87:40:a5:69:
                    00:08:9d:25:36:3b:d6:0e:cf:e2:9d:22:5d:e1:5d:
                    0d:51:bd:c3:4f:e7:6d:92:d1:d5:81:7c:c0:75:6f:
                    fe:f4:7d:fe:a4:8f:68:5b:42:58:82:4c:97:6f:a8:
                    eb:91:18:1e:2f:7b:4a:10:a8:60:1f:f8:b3:61:c7:
                    cd:af:35:4e:bd:90:79:4f:2d:66:76:cd:d0:13:ec:
                    2c:31:f7:d0:84:7b:80:c2:fa:cb:de:8d:4d:0e:c0:
                    a7:25:73:0c:f1:7d:34:df:8f:09:67:d3:ec:fb:28:
                    c9:6d:03:69:eb:dd:eb:7f:66:60:d4:3b:78:a9:47:
                    84:55:58:32:b7:61:9e:3f:b2:79:a8:20:60:17:04:
                    ce:a8:6c:c6:1b:64:c4:32:f9:e3:f9:b9:ed:27:ae:
                    e4:22:02:7f:a0:24:25:2c:3c:a1:7f:db:42:d0:0a:
                    4d:ce:9d:cd:b0:16:a0:93:b1:b5:05:84:6a:05:9b:
                    41:9a:8d:cd:da:af:b0:5c:80:a0:82:93:f3:83:6d:
                    20:d8:78:aa:6d:fb:c8:b6:b0:07:14:e0:a6:9e:87:
                    fd:49:8b:18:96:04:64:5f:b8:cd:b0:52:0c:90:ad:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:D0:7F:43:BE:38:61:8F:00:C4:10:CC:C8:F9:C6:3F:40:35:0B
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:4e:09:e9:47:c5:2f:70:83:10:c2:cf:93:14:08:a5:15:cf:
         1f:f8:7a:95:8d:8b:54:04:0c:c8:5d:0c:73:a6:ed:67:ca:46:
         df:80:f6:ad:e0:a2:c1:58:19:7a:25:33:82:c7:91:e1:ee:84:
         99:15:58:e3:75:69:16:ad:5b:d1:b7:ad:92:24:ff:6a:f6:ed:
         a1:ac:2e:62:28:d7:30:cb:0f:19:db:d4:27:44:18:63:80:43:
         e8:bf:d5:bb:4a:10:95:e1:11:de:3e:af:5a:48:79:21:b0:ef:
         1a:80:29:0f:43:b7:06:20:b9:af:3f:86:56:65:34:0e:12:a5:
         37:1f:bd:1e:fd:0b:84:25:51:a8:cb:d1:e8:b8:90:f9:89:86:
         ff:e7:53:1d:6e:f2:8b:bd:04:50:84:cf:ee:aa:9f:f5:f4:e4:
         f5:30:dd:51:84:41:1a:46:56:44:29:30:4a:3a:06:78:35:1c:
         54:46:aa:99:ed:1e:7b:66:25:47:2e:e1:2f:dd:d1:b2:76:c8:
         55:fa:54:8c:0b:1e:82:f5:91:22:e8:f6:1c:38:af:5c:2a:fa:
         31:16:b2:a2:f0:fe:ce:e0:15:fd:a7:d5:aa:46:16:db:eb:b9:
         85:43:31:8c:a1:50:0a:57:ee:76:d8:aa:19:91:24:32:1c:d6:
         57:c0:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org