Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35322e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          w1lLLOiHD0pMoOr0XjHU35Qf/00GplEIXsp56FdrJ6I=
Subject key identifier:   8E:E5:73:91:BA:DC:25:5C:68:D7:F8:B7:65:39:32:2D:F6:F7:17:0A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       6B97E3B493B4F5008D1800D099EE9E76A07045F0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 21 Nov 2023 15:08:33 +0000
ROA not before:           Tue 21 Nov 2023 15:03:33 +0000
ROA not after:            Tue 19 Nov 2024 15:08:33 +0000
asID:                     64267
IP address blocks:        37.230.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 22:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:97:e3:b4:93:b4:f5:00:8d:18:00:d0:99:ee:9e:76:a0:70:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 21 15:03:33 2023 GMT
            Not After : Nov 19 15:08:33 2024 GMT
        Subject: CN=8EE57391BADC255C68D7F8B76539322DF6F7170A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:13:97:93:67:30:45:39:12:3c:6b:9a:c7:
                    29:53:0c:06:66:ea:46:0f:87:fb:b3:de:db:8f:1d:
                    3d:f5:2d:ee:b2:31:dd:e6:02:2e:0a:96:da:48:66:
                    24:51:02:34:40:4c:d5:a3:3d:1c:2f:5d:8b:11:e7:
                    a5:94:06:49:4d:73:c0:5b:e7:3f:6c:bc:d3:1b:14:
                    8d:9d:9c:5f:bb:08:b4:f4:fd:e7:2f:bb:f5:77:08:
                    b7:6c:13:d5:5a:e6:4b:79:e1:41:e4:13:a1:36:56:
                    14:69:d7:ed:c8:f3:7a:f0:a9:ba:d8:76:74:06:1a:
                    25:ed:00:8d:81:56:3e:3c:53:d5:6d:cf:43:4d:aa:
                    1f:35:ab:b5:ee:72:18:40:43:91:32:6e:ee:ec:6e:
                    9b:b7:49:f9:7d:fa:6e:6b:87:2b:ba:27:2f:de:ab:
                    1a:63:9b:30:d5:76:16:b9:9a:1f:8c:9d:68:a7:1e:
                    cf:0c:73:b1:bb:eb:ef:79:9d:89:5c:be:ad:a9:54:
                    d7:90:0a:40:7c:89:87:08:da:21:63:9f:e3:76:29:
                    5c:61:74:eb:9c:18:93:6d:6a:c5:5e:c0:ef:c7:1d:
                    6d:5e:dc:3a:99:24:15:ba:5b:95:53:d1:bd:7b:c5:
                    7b:84:a7:1f:10:a9:82:7d:eb:70:9f:d3:31:10:6c:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E5:73:91:BA:DC:25:5C:68:D7:F8:B7:65:39:32:2D:F6:F7:17:0A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:63:89:bd:b3:5d:26:41:3f:38:2e:76:ac:50:5e:1e:67:
         ac:98:5b:b5:b8:c9:b7:3d:d8:83:54:b1:d1:fa:ee:cc:94:45:
         d7:71:76:7e:c7:1a:96:f5:e9:f2:d8:0a:99:0a:6b:a4:16:b0:
         7f:f4:51:be:6a:b8:dd:17:39:20:6d:7f:a1:12:ee:1e:80:74:
         c3:08:fe:80:dd:ef:55:38:3d:c1:e0:11:e7:5d:75:05:75:80:
         2f:49:a6:9d:7d:c7:c5:83:05:e6:37:22:f7:c0:ea:92:df:37:
         ff:28:0d:c0:da:f0:83:38:96:a8:d4:6b:53:df:da:ff:b4:3b:
         36:71:b1:9c:e4:98:f6:b0:cd:24:cf:7c:90:33:6d:d2:3a:1b:
         67:ef:15:28:d1:cb:c7:e6:0c:89:30:b5:e8:e3:fd:1b:61:f0:
         19:ff:40:a6:fe:04:21:ec:54:35:54:e8:2d:3e:e8:73:95:a1:
         74:f0:3a:c5:52:38:f5:de:09:5a:ae:ce:e9:fc:93:31:2f:ad:
         b4:6f:77:3b:3e:c4:7f:29:5b:13:75:3d:69:5a:ca:c4:aa:7c:
         6e:bb:a8:69:6a:a4:00:17:c6:17:e8:3d:42:5c:56:46:aa:60:
         9e:95:35:c2:00:2d:0d:2b:17:45:0d:ff:8d:06:f2:7f:2d:08:
         53:7b:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:04:28 2024 by rpki-client on console-fra.rpki-client.org