Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          y/w0rS3pmR6K5+V87G4ZpCn58KT1UAzrz/SgLZyMNpU=
Subject key identifier:   9F:1A:B7:48:8B:DE:11:09:E5:97:B6:57:B6:7B:C6:BB:97:E1:C8:30
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       0F88FCC903A4B21BFE5630A24097C77F91BC4FB1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 21 Nov 2023 15:08:33 +0000
ROA not before:           Tue 21 Nov 2023 15:03:33 +0000
ROA not after:            Tue 19 Nov 2024 15:08:33 +0000
asID:                     64267
IP address blocks:        37.230.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:88:fc:c9:03:a4:b2:1b:fe:56:30:a2:40:97:c7:7f:91:bc:4f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 21 15:03:33 2023 GMT
            Not After : Nov 19 15:08:33 2024 GMT
        Subject: CN=9F1AB7488BDE1109E597B657B67BC6BB97E1C830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:63:e4:a8:5d:78:03:d0:43:11:93:99:68:
                    fb:f7:e4:d3:22:12:f3:96:c0:74:00:e8:0f:12:c8:
                    00:4c:c9:b7:9c:d7:cd:34:1f:3a:94:b4:7e:10:54:
                    fb:a4:c8:b1:ae:43:ff:ce:bf:d9:fd:1c:c1:65:68:
                    77:3a:82:cb:17:75:5d:50:4f:ce:46:59:9f:b4:38:
                    36:59:e4:e6:be:93:22:b7:a7:cb:7f:f1:69:51:71:
                    bb:5a:24:d9:ae:31:23:97:f5:bc:94:e3:24:e1:ab:
                    55:07:01:bf:4f:d2:6b:3f:35:da:a5:74:de:11:4f:
                    3b:cb:08:3b:7f:0b:a4:98:fd:42:5d:7d:fa:21:64:
                    a5:fe:eb:42:02:cc:3a:5d:87:17:9a:93:2b:7f:c5:
                    3c:ba:d6:be:f9:a2:e4:b3:9c:bc:19:a4:71:48:3f:
                    ea:8c:b0:2c:bd:07:ca:dd:82:61:a4:f7:d2:41:94:
                    44:5a:31:52:39:bb:ef:e4:f5:40:98:67:2d:53:a2:
                    a2:2c:1e:c6:5a:9d:5e:fb:02:12:e8:89:5a:e7:58:
                    e7:69:66:20:d7:b7:ec:b0:21:e1:52:e7:fa:5c:7f:
                    f2:ea:cd:cd:70:9b:5f:99:dc:99:73:62:5b:1e:3f:
                    72:95:52:71:e3:cd:ac:dd:56:f4:7b:bc:12:1c:61:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1A:B7:48:8B:DE:11:09:E5:97:B6:57:B6:7B:C6:BB:97:E1:C8:30
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:ec:d4:ae:6e:7b:66:b4:fa:ca:85:93:77:08:38:86:2d:
         27:f7:7b:9a:1b:87:97:ad:db:f2:b6:4d:cf:15:f2:9f:32:c9:
         0e:80:9f:63:d8:53:78:3e:87:95:f5:70:28:3d:16:7e:b7:7f:
         18:d8:c0:08:ba:a1:48:79:2e:83:1b:92:38:ea:e5:8b:e0:9b:
         9e:5c:cc:9f:61:f9:55:f2:af:5a:d9:12:41:f2:47:07:b2:81:
         f1:53:1f:6c:d0:8b:f4:ba:28:a5:4f:5b:4f:e3:90:fc:5b:d7:
         ef:91:4c:fd:b0:30:fb:77:17:d2:40:a7:a5:13:87:15:f5:aa:
         a8:ad:bf:47:99:f5:9b:f0:4b:7f:12:bf:b2:8c:27:90:e2:bf:
         94:89:5c:c8:64:af:57:4a:f5:fc:7a:ed:b6:93:a0:3f:72:ab:
         79:3c:59:6a:37:0b:f9:9e:2a:48:45:f8:11:a7:dd:ef:cd:50:
         df:12:4b:2b:9a:0e:d4:75:be:6e:40:7f:4a:98:cc:d6:1e:5f:
         e5:a7:c4:df:51:27:cd:43:6b:14:1a:f0:45:b4:8b:41:89:00:
         a9:bb:b6:cb:2e:b8:ba:0b:48:a4:68:0c:9b:5a:88:41:3a:ee:
         a5:39:b3:7c:07:45:87:75:74:b6:0d:4c:c4:9a:9b:38:aa:aa:
         b6:81:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:12:15 2024 by rpki-client on console-fra.rpki-client.org