Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35322e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          6DJKyHpZD4Sv+t5NeksmxbSjsP747ey2vzAt+RSXw+A=
Subject key identifier:   33:E9:6F:CF:F5:83:9F:98:43:BB:68:D8:F0:B5:FE:02:57:BB:95:48
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1B43B144CC8403B758CB1ECAB8F1A8617EFD5416
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 22 Oct 2024 15:43:25 +0000
ROA not before:           Tue 22 Oct 2024 15:38:25 +0000
ROA not after:            Tue 21 Oct 2025 15:43:25 +0000
asID:                     64267
IP address blocks:        37.230.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 01:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:43:b1:44:cc:84:03:b7:58:cb:1e:ca:b8:f1:a8:61:7e:fd:54:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 22 15:38:25 2024 GMT
            Not After : Oct 21 15:43:25 2025 GMT
        Subject: CN=33E96FCFF5839F9843BB68D8F0B5FE0257BB9548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:6a:23:6f:ec:9a:3a:f1:07:6b:bd:21:e0:
                    7f:04:ca:17:71:6d:e2:05:e5:8a:d4:06:a4:47:48:
                    9b:f5:1f:90:57:44:33:89:57:ea:c4:e9:ab:0b:2a:
                    09:63:62:30:29:55:12:96:48:1c:48:02:19:89:b4:
                    da:b5:8c:2e:2c:61:93:ce:f6:09:b4:33:ea:71:f8:
                    f9:40:b9:39:cf:d5:61:ba:01:33:cf:95:94:17:05:
                    c4:b6:90:69:4e:e9:7a:18:c5:2c:e9:73:9e:fa:2a:
                    5b:93:1e:fa:74:cd:24:30:43:3a:ab:c5:7d:c9:5d:
                    6f:df:bd:65:13:d8:02:a2:b0:be:32:cc:43:c4:82:
                    93:d2:b4:38:27:23:fe:66:51:54:a8:6d:82:e3:82:
                    5a:4c:22:9e:26:39:11:c6:31:3e:92:bb:47:ea:0b:
                    06:88:9b:6e:4e:a9:b2:d5:4a:7f:14:fb:2c:1a:66:
                    bd:3e:e8:d1:9b:2a:fd:b6:57:8b:ad:a6:10:42:d6:
                    b5:f8:bc:0b:24:49:83:92:9f:b3:fe:e4:4a:f2:92:
                    fc:72:d4:f5:57:4d:47:ff:f6:fa:c2:b7:93:b0:73:
                    82:9e:41:06:4b:87:2d:29:3b:e8:68:39:3e:dc:b5:
                    f2:5c:bb:e4:f2:6e:77:22:1d:54:b4:8f:df:a5:e7:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:6F:CF:F5:83:9F:98:43:BB:68:D8:F0:B5:FE:02:57:BB:95:48
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:01:9e:92:25:86:99:d1:52:b7:b0:7a:07:9c:10:00:0f:
         f6:30:aa:2d:fa:3c:7f:2a:c0:7f:31:f5:92:e5:4e:34:9b:36:
         52:ce:c2:08:b7:f2:0e:10:4b:26:4d:7f:41:1e:51:69:06:24:
         dd:63:47:f6:d2:75:25:63:e6:46:06:c8:24:26:fb:f6:bf:2e:
         ed:79:50:ba:09:41:13:fc:55:44:d4:c9:23:d7:dd:f6:8b:d3:
         3d:cc:fd:b6:9f:99:b3:0c:b8:3d:c7:47:17:b7:ff:71:e3:79:
         17:44:ad:1d:bb:7d:7a:14:5f:3b:d1:e5:f5:96:6d:27:e4:29:
         e6:90:22:44:6b:77:50:19:74:01:01:f4:9f:44:04:98:80:aa:
         35:5e:82:e5:a4:d3:90:11:83:6f:80:bd:8a:3c:f3:e1:a6:85:
         7b:01:3c:38:da:02:17:0f:5a:f6:af:f4:06:77:e9:78:5a:16:
         2b:27:22:bd:71:8e:79:5d:03:13:c0:2d:f1:35:2c:f6:97:07:
         e3:4b:8f:fe:e9:e9:99:fb:e3:61:1c:1e:59:1a:b5:a2:75:39:
         bb:d0:32:62:36:5e:0a:49:5c:26:84:1f:d3:9d:ef:cc:41:ca:
         8e:6c:38:9c:61:9b:1e:e8:4e:9e:0e:b9:5e:ab:ff:2e:56:d5:
         17:5d:64:1c
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUG0OxRMyEA7dYyx7KuPGoYX79VBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDEwMjIxNTM4MjVaFw0yNTEwMjExNTQzMjVaMDMxMTAvBgNV
BAMTKDMzRTk2RkNGRjU4MzlGOTg0M0JCNjhEOEYwQjVGRTAyNTdCQjk1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDubmojb+yaOvEHa70h4H8Eyhdx
beIF5YrUBqRHSJv1H5BXRDOJV+rE6asLKgljYjApVRKWSBxIAhmJtNq1jC4sYZPO
9gm0M+px+PlAuTnP1WG6ATPPlZQXBcS2kGlO6XoYxSzpc576KluTHvp0zSQwQzqr
xX3JXW/fvWUT2AKisL4yzEPEgpPStDgnI/5mUVSobYLjglpMIp4mORHGMT6Su0fq
CwaIm25OqbLVSn8U+ywaZr0+6NGbKv22V4utphBC1rX4vAskSYOSn7P+5Erykvxy
1PVXTUf/9vrCt5Owc4KeQQZLhy0pO+hoOT7ctfJcu+TybnciHVS0j9+l56wlAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUM+lvz/WDn5hDu2jY8LX+Ale7lUgwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jQwDQYJKoZIhvcN
AQELBQADggEBAIcuAZ6SJYaZ0VK3sHoHnBAAD/Ywqi36PH8qwH8x9ZLlTjSbNlLO
wgi38g4QSyZNf0EeUWkGJN1jR/bSdSVj5kYGyCQm+/a/Lu15ULoJQRP8VUTUySPX
3faL0z3M/bafmbMMuD3HRxe3/3HjeRdErR27fXoUXzvR5fWWbSfkKeaQIkRrd1AZ
dAEB9J9EBJiAqjVeguWk05ARg2+AvYo88+GmhXsBPDjaAhcPWvav9AZ36XhaFisn
Ir1xjnldAxPALfE1LPaXB+NLj/7p6Zn742EcHlkataJ1ObvQMmI2XgpJXCaEH9Od
78xByo5sOJxhmx7oTp4OuV6r/y5W1RddZBw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org