Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa
File:                     33372e312e3232392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          tycDoiBrW6cTXq1Jdcx7b5B2dOE19OXakMkIuSuwTuE=
Subject key identifier:   29:9F:A4:0D:F6:A9:10:7E:39:70:F3:CC:FD:80:EA:AD:93:A9:33:1A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       54EB6CDC5CAB51DD2ED6BBF08D3E1A8F19BB18B2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 08 Oct 2024 11:43:22 +0000
ROA not before:           Tue 08 Oct 2024 11:38:22 +0000
ROA not after:            Tue 07 Oct 2025 11:43:22 +0000
asID:                     61317
IP address blocks:        37.1.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 01:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:eb:6c:dc:5c:ab:51:dd:2e:d6:bb:f0:8d:3e:1a:8f:19:bb:18:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  8 11:38:22 2024 GMT
            Not After : Oct  7 11:43:22 2025 GMT
        Subject: CN=299FA40DF6A9107E3970F3CCFD80EAAD93A9331A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:25:24:fa:d0:a4:be:ea:4f:e2:54:f9:7e:
                    d7:17:ae:36:aa:67:fd:f8:42:18:5e:49:64:f9:8c:
                    a6:6c:ac:77:76:2a:93:06:fa:5d:b0:ff:cc:28:44:
                    e7:13:0d:55:76:5f:93:db:54:30:3f:44:53:bd:3e:
                    2c:da:0e:1b:04:c8:d6:37:37:40:e6:3c:06:0e:b4:
                    41:f7:a6:a1:35:0f:5e:a8:e7:62:da:e2:1a:62:ef:
                    91:b1:49:05:d9:59:3e:a6:b1:e9:ef:e7:f7:fd:42:
                    2b:30:27:a1:2b:29:f9:fd:40:90:8e:dd:df:8a:41:
                    88:0a:47:b0:ea:19:06:60:bf:cf:6a:16:e6:43:fd:
                    a5:b0:5f:c0:e3:9f:cb:b2:a6:44:8b:9f:fa:bd:1a:
                    b7:d3:61:c1:27:dc:b8:95:dd:9f:d3:b0:ed:e9:2e:
                    b1:f2:b8:e8:d6:20:a9:1b:a5:7d:8e:3f:73:b1:54:
                    de:aa:43:0f:14:8d:72:94:dc:07:57:b3:c9:81:c6:
                    3d:e7:b7:ab:17:1b:c9:82:fe:0a:b2:0d:5f:79:2b:
                    f7:0a:35:43:24:a1:b4:44:9c:01:9e:d1:75:74:95:
                    78:c3:36:e4:15:11:5b:b0:a4:b0:e0:40:83:de:ae:
                    34:33:bc:8b:97:3b:cf:41:71:e3:28:61:d3:98:e2:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:A4:0D:F6:A9:10:7E:39:70:F3:CC:FD:80:EA:AD:93:A9:33:1A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:bd:c9:08:b6:46:bf:d6:b7:6f:d9:f3:66:b9:86:a2:d1:
         1a:e0:6d:eb:5c:03:a4:cc:6e:91:c7:ec:08:24:f0:4a:27:c4:
         55:67:c3:96:e2:df:83:c8:fc:40:87:4b:b6:91:25:e8:d1:ef:
         97:ad:33:48:d7:36:31:43:15:9f:4a:ef:e7:61:d6:d7:d0:c0:
         4c:68:a7:44:3c:ab:5b:e4:9a:ac:5c:1b:87:3d:c2:3b:66:59:
         af:3a:8e:11:cd:e4:a5:cf:be:ec:de:c1:b0:f1:90:f0:ce:d6:
         1d:30:f3:50:ff:a4:83:55:87:24:a1:41:0e:18:8f:4f:50:d9:
         5d:b9:92:d5:69:e3:8d:7e:34:85:5f:9d:10:87:fe:49:16:78:
         96:15:76:1b:64:22:e6:0e:25:96:97:55:07:fe:b2:ac:f2:c1:
         f4:40:d2:68:04:3c:4f:a7:d8:0c:e4:3f:b8:85:08:61:f0:04:
         c1:fa:c5:5d:31:d1:7f:eb:35:2e:08:b5:c3:75:b1:2b:4d:0f:
         c6:65:72:65:3a:bc:89:ca:33:cb:1b:8e:de:ff:8a:f9:1a:ad:
         34:7b:73:80:f9:bc:ab:47:84:6b:6d:68:15:69:db:24:a7:4f:
         c1:1f:aa:ef:10:a9:8b:34:13:be:56:27:12:d7:2d:af:ab:00:
         c4:91:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org