Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35342e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          Eu5EFvQGA3VpqujAg1zSPtKT4qEgRQo7ridY07j/XNY=
Subject key identifier:   37:3C:35:89:F6:EE:22:B4:B3:EB:A8:10:29:4F:E2:D1:B3:C6:49:3F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1AB0560DFDD84CBF2F99EA1DCA78F80167BF7A90
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 21 Nov 2023 15:08:34 +0000
ROA not before:           Tue 21 Nov 2023 15:03:34 +0000
ROA not after:            Tue 19 Nov 2024 15:08:34 +0000
asID:                     64267
IP address blocks:        37.230.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b0:56:0d:fd:d8:4c:bf:2f:99:ea:1d:ca:78:f8:01:67:bf:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 21 15:03:34 2023 GMT
            Not After : Nov 19 15:08:34 2024 GMT
        Subject: CN=373C3589F6EE22B4B3EBA810294FE2D1B3C6493F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:6a:f4:42:aa:3e:37:fa:65:72:94:99:6b:
                    91:75:ea:67:cb:b0:b9:d6:4b:1e:2d:90:bf:67:a4:
                    51:95:ba:95:39:a1:e8:ce:77:77:13:3f:72:b2:c9:
                    80:6c:75:b9:be:8d:d9:af:df:16:c6:3c:5e:c3:17:
                    25:ee:18:ef:66:29:50:51:7b:b5:e4:e4:06:6f:87:
                    a5:94:4d:4b:cc:74:1e:4f:61:b8:9f:69:93:28:43:
                    df:04:85:dd:0b:84:fa:df:de:13:e2:58:d9:5c:22:
                    bd:11:c0:de:37:eb:7c:37:52:9a:76:18:c3:18:81:
                    eb:6f:a6:e0:5f:2c:a1:5b:15:94:44:b1:82:40:9c:
                    ef:d4:44:5e:ce:e2:78:08:ff:72:8f:5a:79:29:88:
                    bd:fa:c6:48:9e:ad:69:ec:3b:f9:e4:a4:f2:05:d8:
                    f8:6e:f0:07:1f:b4:f9:16:d5:62:e2:18:f5:f4:cf:
                    3e:17:59:63:fb:ec:09:6b:83:54:6a:4d:86:48:a5:
                    56:19:bb:26:47:3a:7c:bc:31:b0:3d:f3:0e:76:96:
                    7b:82:5d:8c:ee:30:59:69:31:31:48:20:2c:80:2a:
                    9e:17:0f:ca:d2:6e:18:63:9b:8c:4a:15:c2:9e:55:
                    a4:e6:80:c8:60:47:94:39:0b:46:84:49:df:ad:5b:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:35:89:F6:EE:22:B4:B3:EB:A8:10:29:4F:E2:D1:B3:C6:49:3F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:dc:f7:e9:72:8d:e2:a6:2c:b5:8a:c4:e9:86:3b:3b:1a:
         12:0e:8a:4d:08:c4:6d:c8:ab:c9:cc:ab:c7:5e:c4:8f:79:6b:
         35:92:d3:c3:08:97:14:04:cf:f8:f8:c2:de:35:7d:28:94:f7:
         fe:af:3f:3b:59:70:a3:fb:f8:c8:c7:da:75:82:1b:9a:48:42:
         4d:07:5a:43:2d:3f:53:a7:50:7c:8d:f9:b2:de:22:db:a8:e4:
         f0:99:60:31:22:52:a1:bd:84:72:c2:bb:03:7c:fa:ce:f8:ea:
         e3:cf:09:1a:60:1b:27:2a:39:72:27:14:4f:9b:01:f0:e4:75:
         c0:bf:b6:5b:ba:c9:02:f0:32:cc:bd:9a:9b:96:1c:97:cb:b8:
         7d:21:bf:ad:fe:90:19:39:3e:c1:ba:e7:ef:b4:8e:c2:58:36:
         5f:97:f5:4a:2e:4f:ea:7a:d7:ba:55:45:0e:6c:a0:f9:97:62:
         e9:4e:e9:c9:26:d1:46:88:5b:5b:30:a0:75:af:f5:a6:4e:4a:
         cb:cf:4a:66:e4:d7:d6:f3:84:21:9b:62:5b:12:21:8d:f3:10:
         d4:87:de:93:ef:e8:39:1b:2c:55:2b:54:d1:11:a5:3f:a1:48:
         a2:66:6e:91:bf:2d:48:b5:80:05:91:1a:52:e6:e6:1a:b2:dd:
         d1:60:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:20:17 2024 by rpki-client on console-ams.rpki-client.org