Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa
File:                     33372e3233302e34382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          m4idgY/CmYjr1Cyo/w7eqqU8XM2Y09OCNk4B7+Z0neU=
Subject key identifier:   CC:03:D9:65:58:F6:15:7D:2D:B5:19:68:2B:51:52:2D:FB:9A:01:D3
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       70E9472A39C3BBCCB4E1FE8623330F92FF4599DD
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa
Signing time:             Thu 26 Dec 2024 21:02:22 +0000
ROA not before:           Thu 26 Dec 2024 20:57:22 +0000
ROA not after:            Thu 25 Dec 2025 21:02:22 +0000
asID:                     16276
IP address blocks:        37.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:47:2a:39:c3:bb:cc:b4:e1:fe:86:23:33:0f:92:ff:45:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec 26 20:57:22 2024 GMT
            Not After : Dec 25 21:02:22 2025 GMT
        Subject: CN=CC03D96558F6157D2DB519682B51522DFB9A01D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:c5:0e:56:14:96:e4:e2:d5:35:9b:77:24:
                    ca:f3:98:84:b9:cd:18:de:e8:6e:3a:54:05:ab:8e:
                    d2:38:ff:27:47:63:3b:af:2e:c1:97:9f:5d:e3:11:
                    f1:19:36:86:07:2e:e7:ca:3f:8e:b1:d6:24:68:ea:
                    d5:1c:a7:4c:43:4f:e9:9d:6d:03:d0:ba:35:0b:27:
                    a0:e0:04:4e:4c:31:d1:9a:d2:60:4c:02:1a:84:17:
                    82:79:52:5a:02:c3:f2:47:98:39:42:65:b2:06:c8:
                    97:cb:a7:bd:c4:6c:a8:fe:16:37:ed:d2:7f:18:e5:
                    32:1d:aa:3d:3a:ba:11:5b:ed:06:c4:32:76:b5:e2:
                    7c:53:41:c8:da:24:c2:a6:6a:85:65:bf:63:42:6c:
                    e4:6d:92:ec:1e:36:11:c4:07:3f:aa:d1:26:49:4a:
                    a9:0d:31:87:db:7c:4b:07:e8:48:d4:17:9e:60:c5:
                    e5:13:91:98:a7:20:37:10:a0:1c:c8:8b:8f:bc:c8:
                    40:fa:51:21:a4:b9:01:97:ca:54:5a:3e:a6:43:5f:
                    15:f5:b5:fa:99:87:1b:47:25:a1:0f:cb:7b:59:57:
                    a0:a5:58:0c:df:78:f8:ea:c2:ed:63:0f:89:f5:e4:
                    f5:27:07:b0:fb:d1:96:1a:44:03:f7:1f:04:dd:0e:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:D9:65:58:F6:15:7D:2D:B5:19:68:2B:51:52:2D:FB:9A:01:D3
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:31:01:a1:04:58:b0:d1:36:77:c3:4e:94:e6:59:3f:8d:
         e9:8b:70:17:09:3f:4f:dd:a8:cd:26:12:b4:dc:61:be:df:5e:
         dd:50:65:05:26:5e:12:65:8e:9c:f3:57:7f:c6:20:30:00:06:
         7e:70:01:29:c5:7b:07:4a:9e:a1:17:3c:f5:b5:85:6d:b0:33:
         e6:e9:f3:19:ad:7a:22:f2:92:2f:c6:8b:9f:a7:01:18:18:a9:
         37:30:0d:56:f8:49:d5:ee:ed:28:66:39:c2:c4:c3:b8:19:5b:
         fb:68:e9:9a:71:78:ac:43:6e:37:8e:19:5b:b8:4a:c5:50:98:
         9f:73:79:43:33:4b:7d:c3:fd:04:5b:6c:30:5f:a1:da:ba:9f:
         db:cf:dd:2f:85:88:94:29:0d:d7:76:00:4f:83:cc:fb:9f:a0:
         d8:e9:7d:9d:3e:e6:e3:5c:2f:e1:03:6a:50:10:b3:a3:91:f1:
         26:b3:d8:26:ca:cc:27:86:80:32:97:d1:e2:17:8f:9b:fb:e4:
         91:fd:03:2b:75:13:c7:84:d2:27:f8:32:76:53:a5:0a:70:02:
         2a:e1:22:23:23:97:5e:fb:37:13:e7:4d:df:33:23:b9:a9:9d:
         09:65:78:4c:3d:03:5b:9a:c8:5d:bf:05:21:3b:94:36:35:5e:
         7d:fc:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:54:35 2025 by rpki-client