Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          jcGuqmTYh3+7ariLsf0H+W6k+VM92RICcIEDoozmDRM=
Subject key identifier:   92:7C:81:4B:EF:81:F1:B0:CE:6A:D2:9F:86:58:CC:7C:A6:52:60:AD
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       15C1ADC75CF3F8B0BFBA479195119F3F89DD312B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 22 Oct 2024 15:43:25 +0000
ROA not before:           Tue 22 Oct 2024 15:38:25 +0000
ROA not after:            Tue 21 Oct 2025 15:43:25 +0000
asID:                     64267
IP address blocks:        37.230.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 17:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c1:ad:c7:5c:f3:f8:b0:bf:ba:47:91:95:11:9f:3f:89:dd:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 22 15:38:25 2024 GMT
            Not After : Oct 21 15:43:25 2025 GMT
        Subject: CN=927C814BEF81F1B0CE6AD29F8658CC7CA65260AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:d7:33:b6:69:f4:32:83:1b:49:52:4e:af:
                    fb:38:48:9e:e7:79:c3:eb:df:46:3e:23:4f:59:a1:
                    01:6a:ee:52:d8:0e:65:7a:90:4e:94:0c:8b:de:39:
                    7a:6e:64:5f:3a:90:53:9c:54:16:2f:df:d7:2c:75:
                    38:57:71:aa:b0:6c:7c:df:12:ba:6a:0a:95:6a:50:
                    f0:21:11:10:04:22:fb:c2:bf:80:1b:e8:e6:ff:1b:
                    d0:06:d8:ec:d0:d8:f9:af:a4:de:91:4d:66:23:2b:
                    88:87:35:c6:3c:1f:2b:fe:49:39:11:39:9f:c1:aa:
                    dc:d1:2f:4f:e0:59:bb:a7:57:5e:c1:a4:23:73:4f:
                    8d:4e:ee:59:53:c7:6b:28:0f:d7:c0:0e:97:70:d9:
                    5e:60:19:89:80:3e:07:fa:46:47:b7:18:d7:7e:ff:
                    27:83:4b:d8:7e:2a:66:d7:02:44:01:4a:14:0d:31:
                    43:3b:dd:84:77:2d:1c:af:ca:f6:bb:bf:62:76:42:
                    96:c4:11:6a:a9:0e:5e:0c:c3:be:06:c0:0d:df:8a:
                    00:8d:ab:c0:0c:2d:9f:61:3e:06:d6:9e:ee:ce:93:
                    cd:50:a6:b7:43:13:00:0e:81:62:e7:a3:b4:80:70:
                    1e:89:2d:bd:ae:11:fe:ae:7f:7e:80:e3:db:eb:34:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:81:4B:EF:81:F1:B0:CE:6A:D2:9F:86:58:CC:7C:A6:52:60:AD
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:62:c8:9a:aa:58:01:8c:98:7e:6d:95:08:f3:67:a1:75:ed:
         e6:5f:66:0f:9c:1d:2c:ce:bb:7e:95:40:9f:28:12:69:99:ac:
         07:83:fb:54:e1:88:13:09:33:27:2e:34:b4:89:cc:97:4f:ce:
         b7:63:71:2a:88:e9:c3:13:11:e1:6f:c7:a5:28:52:72:06:fd:
         70:fb:67:4a:6c:55:04:c9:78:b2:58:ca:e0:03:ac:c1:ed:75:
         9d:3c:69:bd:5e:33:2a:f9:7c:aa:3f:f9:0d:1f:0a:a1:98:ee:
         68:57:24:35:05:0a:4f:b0:f6:f2:69:4e:3d:0d:83:bb:00:d7:
         36:da:43:6f:4f:64:9a:cd:57:58:18:fd:2f:cd:b9:02:9f:97:
         5a:01:b3:2d:1d:51:cb:54:4a:d0:d7:29:32:3a:81:71:c2:1c:
         51:0a:0a:8c:91:ca:99:e1:a8:5e:ff:8f:fa:ce:7c:1c:62:8f:
         11:ca:0e:19:bb:42:e9:2d:eb:1b:64:c2:49:48:b4:87:91:5b:
         23:cd:a5:45:3d:7c:ab:28:98:af:c1:49:32:af:7a:b1:6d:f1:
         25:78:29:d7:17:76:ea:9b:f0:11:f4:97:4a:b6:f5:19:81:c0:
         6c:fc:6f:51:c3:78:f9:4c:a0:40:5f:b4:96:2e:2f:63:b0:7d:
         24:8c:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:12 2024 by rpki-client on console-fra.rpki-client.org