Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa
File:                     AS59895.roa (raw, json)
Hash identifier:          WAZqW0sv0JnOBzov6PSYYI/xRuR7QHWtD3KxnM8NEIA=
Subject key identifier:   E3:DF:55:8F:C0:06:E1:96:6E:01:0C:18:AB:7C:B3:4C:6A:6D:C5:AE
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6576D038D286BE4B0A8B122E03B665D58595FB07
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa
Signing time:             Mon 18 Dec 2023 12:05:08 +0000
ROA not before:           Mon 18 Dec 2023 12:00:08 +0000
ROA not after:            Mon 16 Dec 2024 12:05:08 +0000
asID:                     59895
IP address blocks:        89.117.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:d0:38:d2:86:be:4b:0a:8b:12:2e:03:b6:65:d5:85:95:fb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 18 12:00:08 2023 GMT
            Not After : Dec 16 12:05:08 2024 GMT
        Subject: CN=E3DF558FC006E1966E010C18AB7CB34C6A6DC5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:d6:e5:7a:a3:67:82:57:4d:eb:8a:d1:14:
                    42:59:71:f5:01:08:e7:e0:36:88:de:1b:db:c3:2b:
                    f7:33:8c:c2:56:7e:3e:a5:c2:ed:f0:a1:49:f5:37:
                    5b:ed:8b:dc:c5:45:82:77:5b:ab:01:68:1f:48:ea:
                    c0:ce:18:a2:4f:ee:5d:9c:9a:51:7c:20:9c:e5:a6:
                    52:bf:2d:bd:ba:d3:41:e3:ab:73:2b:ba:aa:f7:ae:
                    88:3d:09:3e:46:0e:5e:e6:70:1a:25:c7:e7:0a:b6:
                    ac:7a:00:52:d3:6d:de:a0:3a:7e:81:99:5c:ec:55:
                    a2:ef:83:37:21:fa:1b:3a:1c:6b:c5:8e:dc:3e:2a:
                    96:69:09:61:2e:64:5b:a4:09:ed:87:1e:95:29:a0:
                    c2:b9:ba:b1:80:b5:47:17:cd:ab:0a:e6:97:42:c9:
                    20:8a:7c:aa:a5:a0:be:b9:5c:d0:b4:bc:e9:83:36:
                    fd:9e:f1:5a:f6:de:46:2f:11:13:97:77:f5:e0:89:
                    98:fa:52:9a:73:45:13:ca:c0:ee:3a:90:ef:b0:88:
                    f0:54:60:e9:fb:9e:f7:72:47:e7:97:a6:b1:f7:bc:
                    ac:fc:ef:54:08:85:22:7c:40:4f:ab:e7:e6:3b:8d:
                    b7:ba:32:80:97:70:90:62:76:41:5f:9f:80:ab:a7:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:55:8F:C0:06:E1:96:6E:01:0C:18:AB:7C:B3:4C:6A:6D:C5:AE
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:aa:83:b1:e3:62:c7:81:ce:60:ab:6a:66:12:2f:68:c0:96:
         a4:03:be:2a:23:87:3b:dc:71:46:fd:51:21:2c:99:8d:32:fd:
         42:aa:ed:a1:73:42:99:87:ee:89:55:22:5e:05:41:df:2b:6a:
         f5:88:40:e8:d2:99:62:de:3f:3d:8c:d2:26:15:69:f0:f0:a5:
         f1:48:1a:bf:e1:aa:48:b6:43:7b:4a:43:f1:8b:5f:da:9b:1c:
         d2:81:fd:1a:4c:4e:60:2c:f3:30:4a:69:cc:a5:c6:8f:68:22:
         ab:36:d1:4c:72:55:f5:cf:3c:79:ed:97:43:97:50:6b:29:5c:
         2c:43:ce:88:39:bb:cf:83:21:8e:00:4c:d1:8d:84:77:13:8e:
         6a:b1:35:70:05:94:92:80:c1:2b:9c:2c:50:f9:85:84:82:91:
         55:35:b0:cb:24:51:de:7b:4b:9c:3a:65:24:15:28:8c:88:26:
         59:5b:86:72:c5:32:a8:db:1f:1e:5e:4b:67:49:9c:e4:b6:5f:
         65:04:c3:62:fc:37:04:a1:1d:af:b2:74:9c:68:2f:73:5f:e8:
         ed:5e:ae:65:2c:9a:a8:96:d6:86:aa:f0:07:5f:7a:53:88:d2:
         c2:5c:85:ac:10:24:63:99:a6:90:c5:5a:0b:d1:ed:36:42:09:
         fd:12:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org