Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          +tkOh9QubRH/MyIUNzCDDGg9vuHdVh6mSm+t0m7o7Uk=
Subject key identifier:   3A:4F:4F:9D:48:2F:FF:03:69:53:77:85:FD:35:E9:FE:6C:A3:08:A0
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3FC0ABD7C641538222E66E2A682B8BD18D034417
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa
Signing time:             Sat 03 Feb 2024 06:50:04 +0000
ROA not before:           Sat 03 Feb 2024 06:45:04 +0000
ROA not after:            Sat 01 Feb 2025 06:50:04 +0000
asID:                     7018
IP address blocks:        89.117.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c0:ab:d7:c6:41:53:82:22:e6:6e:2a:68:2b:8b:d1:8d:03:44:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb  3 06:45:04 2024 GMT
            Not After : Feb  1 06:50:04 2025 GMT
        Subject: CN=3A4F4F9D482FFF0369537785FD35E9FE6CA308A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:db:99:1f:83:2b:17:30:48:f0:be:c0:02:
                    37:0e:16:a1:cf:72:eb:91:8c:9d:de:60:a6:de:67:
                    da:a9:38:8a:0d:54:a2:ec:d2:1c:a7:39:82:c8:9b:
                    f5:1b:32:4f:55:6e:8b:e7:c3:b7:4d:36:a8:c0:35:
                    2b:df:0b:fe:93:c6:5a:9d:a0:d9:02:6c:25:43:7b:
                    9f:07:07:4b:2e:6f:1c:23:5d:65:98:a1:6b:e2:37:
                    94:03:fe:f7:74:8e:64:70:26:1c:fc:b5:ac:5e:37:
                    ad:9b:e0:97:dd:38:b2:e8:68:05:b0:03:2a:5f:33:
                    ec:1e:67:79:5a:cd:af:0b:ae:9b:8c:45:70:ca:8f:
                    d0:94:71:8f:80:82:fc:90:8f:50:b1:16:20:33:7c:
                    e4:34:99:6d:d6:b9:a0:af:da:57:18:25:d8:db:2c:
                    a7:de:37:b0:b9:6b:a4:64:c9:a4:7e:fa:1d:d0:57:
                    d3:e6:a9:ca:7f:68:60:50:31:c0:57:93:03:92:3c:
                    60:32:65:c7:35:8a:1e:0e:84:55:9b:89:a6:bf:8f:
                    35:c3:ff:f4:d4:63:18:34:0b:3b:7e:16:1b:fd:10:
                    0d:61:99:dc:85:d6:c9:92:81:b9:68:10:bf:cd:f4:
                    bf:8f:53:ff:a4:23:fe:27:45:ff:28:60:5a:66:f9:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:4F:9D:48:2F:FF:03:69:53:77:85:FD:35:E9:FE:6C:A3:08:A0
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:7d:7f:75:8d:21:d1:79:04:42:32:ea:c5:68:92:06:01:ff:
         ed:ae:52:8e:18:ea:a9:67:08:bb:44:0c:47:56:c5:f1:02:90:
         8c:6c:ea:ae:bc:4f:77:e5:66:9d:d7:78:8c:80:e7:3b:71:e7:
         4b:05:57:66:0a:c6:7e:d9:50:26:e0:cc:fc:10:0a:e1:0b:01:
         b7:a8:84:0b:49:6d:a9:c7:8e:53:f7:69:f6:72:f8:a1:c5:ab:
         72:4c:1f:3e:15:0a:2b:e8:9f:60:08:0b:fd:53:0f:75:a0:0e:
         2c:fe:26:54:bb:65:c1:1a:94:6e:17:b8:03:4f:b9:2a:d8:02:
         5b:0e:eb:39:eb:7b:69:68:83:8c:97:68:cc:44:93:55:c4:ae:
         11:f0:a9:e6:e1:0e:f2:5d:34:f4:e9:57:10:da:39:79:c3:73:
         c9:05:4b:94:ec:ff:e8:ce:aa:04:d0:58:6d:82:de:04:d3:5f:
         67:31:8a:5b:c4:86:c4:32:c1:08:0d:a1:dc:c4:1d:68:57:ef:
         66:d8:b1:6a:4f:6e:71:16:d0:1a:35:30:fd:72:1f:a9:16:2d:
         70:a7:5b:13:3d:38:16:df:23:42:47:1f:d1:b6:8c:4c:fd:1c:
         e1:32:b8:6e:3d:c2:1f:6c:48:4a:9b:74:a7:ca:59:94:52:fa:
         d0:95:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:06:16 2024 by rpki-client on console-ams.rpki-client.org