Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          uHtYb04a7nsXFE3LpQ8SYktU/mCWF3Mn0zPSxEYwVjU=
Subject key identifier:   4C:1A:DC:77:49:62:88:A4:4C:3A:0A:B6:8D:92:76:05:A2:12:B1:FB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5FEC4F6BFABD4A8CFEB48675D7E826B37635F0C7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS64267.roa
Signing time:             Tue 21 Nov 2023 15:08:38 +0000
ROA not before:           Tue 21 Nov 2023 15:03:38 +0000
ROA not after:            Tue 19 Nov 2024 15:08:38 +0000
asID:                     64267
IP address blocks:        89.116.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ec:4f:6b:fa:bd:4a:8c:fe:b4:86:75:d7:e8:26:b3:76:35:f0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 21 15:03:38 2023 GMT
            Not After : Nov 19 15:08:38 2024 GMT
        Subject: CN=4C1ADC77496288A44C3A0AB68D927605A212B1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:12:5f:f3:f3:68:0c:bf:e1:1a:a0:83:8a:
                    78:7a:44:84:fe:c2:b4:5f:d7:08:20:03:98:fb:b3:
                    e5:7e:e5:14:45:a8:7b:d0:92:40:d2:ea:b7:eb:3b:
                    9e:5f:b3:1d:0a:e0:93:dd:62:d0:f6:4c:9f:15:46:
                    86:65:1a:c3:81:e8:a3:7e:75:15:c3:53:10:46:f2:
                    65:77:42:4d:ba:86:fd:85:6b:9a:b3:ba:f3:05:5d:
                    0a:4d:f2:22:fb:96:78:a3:f7:eb:34:2e:bd:d4:e4:
                    d1:6a:11:16:1b:0a:b0:b7:3c:53:75:50:00:75:41:
                    7c:ae:a0:85:f7:91:8a:95:db:76:34:7c:ae:94:d9:
                    d3:08:97:90:c5:fc:a6:12:6a:16:04:f0:09:9b:24:
                    47:e5:61:f6:7f:77:18:e8:e9:92:58:9a:bc:1e:f6:
                    2a:68:96:79:b6:24:26:d6:de:34:9a:a0:4f:d7:e5:
                    22:11:e9:b8:e7:82:35:40:c2:81:39:0f:5f:a3:67:
                    01:4b:33:a2:7b:ea:d3:f1:42:6e:62:9f:09:85:e6:
                    7d:6f:2f:d0:93:ff:e3:53:71:3f:bc:b7:72:3d:e9:
                    df:53:04:4c:ef:26:f0:89:15:64:be:ea:18:93:68:
                    16:58:cf:45:c4:c6:a9:ed:34:bb:85:74:e1:cf:38:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1A:DC:77:49:62:88:A4:4C:3A:0A:B6:8D:92:76:05:A2:12:B1:FB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:69:2c:d7:7d:54:09:76:10:5b:c1:a9:42:d1:c0:5b:dd:
         53:db:a5:6f:d2:4d:90:35:d1:26:17:65:fe:5a:1b:14:c6:11:
         ec:8e:1f:97:52:84:ab:4e:b1:b9:83:86:88:1c:2d:8f:ca:e6:
         0f:97:69:08:c9:84:1f:d7:bd:92:5d:27:97:46:9d:42:81:05:
         e9:77:f4:78:bc:de:4b:7f:4f:d8:95:a1:f8:fc:e7:64:2a:35:
         52:8f:89:db:ca:fd:fc:23:d5:31:53:4b:96:0a:fb:6c:e8:17:
         8e:91:a4:83:c5:c1:41:9c:28:03:dc:34:b9:07:ad:83:6b:d7:
         8c:88:f1:9e:58:8d:fd:f3:24:ae:c7:e0:8a:27:59:b8:5e:64:
         15:28:3f:83:db:c3:b3:a2:8a:56:0c:40:33:3a:2e:9d:b5:12:
         c6:37:c0:7e:a0:f4:45:54:c3:02:a3:ed:27:bc:e6:14:ae:f5:
         4d:98:66:6b:ea:ba:3e:2f:37:22:5e:2e:8c:16:26:56:06:12:
         83:25:6d:6e:13:83:8f:b6:f3:e1:4d:3a:fc:76:cd:43:61:bd:
         1d:dc:bc:04:1e:06:e6:64:15:60:b5:00:00:74:45:be:50:71:
         fd:7e:f6:f8:c2:df:99:2b:df:89:2c:6f:59:a0:81:e0:bc:ee:
         29:ab:d6:8b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUX+xPa/q9Soz+tIZ11+gms3Y18McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yMzExMjExNTAzMzhaFw0yNDExMTkxNTA4MzhaMDMxMTAvBgNV
BAMTKDRDMUFEQzc3NDk2Mjg4QTQ0QzNBMEFCNjhEOTI3NjA1QTIxMkIxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35BJf8/NoDL/hGqCDinh6RIT+
wrRf1wggA5j7s+V+5RRFqHvQkkDS6rfrO55fsx0K4JPdYtD2TJ8VRoZlGsOB6KN+
dRXDUxBG8mV3Qk26hv2Fa5qzuvMFXQpN8iL7lnij9+s0Lr3U5NFqERYbCrC3PFN1
UAB1QXyuoIX3kYqV23Y0fK6U2dMIl5DF/KYSahYE8AmbJEflYfZ/dxjo6ZJYmrwe
9ipolnm2JCbW3jSaoE/X5SIR6bjngjVAwoE5D1+jZwFLM6J76tPxQm5inwmF5n1v
L9CT/+NTcT+8t3I96d9TBEzvJvCJFWS+6hiTaBZYz0XExqntNLuFdOHPOA6DAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUTBrcd0liiKRMOgq2jZJ2BaISsfswHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXTLMA0GCSqGSIb3DQEB
CwUAA4IBAQAmsmks131UCXYQW8GpQtHAW91T26Vv0k2QNdEmF2X+WhsUxhHsjh+X
UoSrTrG5g4aIHC2PyuYPl2kIyYQf172SXSeXRp1CgQXpd/R4vN5Lf0/YlaH4/Odk
KjVSj4nbyv38I9UxU0uWCvts6BeOkaSDxcFBnCgD3DS5B62Da9eMiPGeWI398ySu
x+CKJ1m4XmQVKD+D28OzoopWDEAzOi6dtRLGN8B+oPRFVMMCo+0nvOYUrvVNmGZr
6ro+LzciXi6MFiZWBhKDJW1uE4OPtvPhTTr8ds1DYb0d3LwEHgbmZBVgtQAAdEW+
UHH9fvb4wt+ZK9+JLG9ZoIHgvO4pq9aL
-----END CERTIFICATE-----
Generated at Thu May 16 18:25:17 2024 by rpki-client on console-fra.rpki-client.org