Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35352e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          ixocADuVylFxrbQyd67L1SlgMHAhSfSxMkqXrOoAjTs=
Subject key identifier:   8A:54:FA:1B:BD:97:3B:DA:0F:C2:89:5A:C8:04:04:B5:1B:A9:19:64
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3C5FDCE5F1AC1EDCAB84755EDA6E63069CC956C2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 22 Oct 2024 15:43:25 +0000
ROA not before:           Tue 22 Oct 2024 15:38:25 +0000
ROA not after:            Tue 21 Oct 2025 15:43:25 +0000
asID:                     64267
IP address blocks:        37.230.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 01:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5f:dc:e5:f1:ac:1e:dc:ab:84:75:5e:da:6e:63:06:9c:c9:56:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 22 15:38:25 2024 GMT
            Not After : Oct 21 15:43:25 2025 GMT
        Subject: CN=8A54FA1BBD973BDA0FC2895AC80404B51BA91964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:d1:e8:66:93:fc:72:a8:cb:a9:c8:ad:37:
                    5b:1f:77:8a:4a:76:01:22:90:4a:11:eb:d7:cf:52:
                    64:f8:cf:2b:f5:9d:4d:83:75:ec:86:be:f9:e6:c6:
                    57:b4:84:56:8b:e9:9d:82:ab:2d:17:a4:75:c4:2c:
                    93:f5:19:71:c5:13:2a:f2:1c:7e:99:ef:fd:01:d9:
                    64:41:a2:10:b2:53:81:5f:fd:82:0d:c7:e9:17:a2:
                    02:86:d1:5c:36:dc:e1:84:41:21:4d:db:d3:93:1a:
                    c3:7b:fe:51:14:78:96:d7:45:6b:48:75:64:38:2a:
                    4d:01:e1:b2:e7:04:07:a2:6c:56:45:3a:c0:99:9c:
                    2c:8c:3e:ca:d4:58:00:1c:66:72:0c:70:ec:8a:79:
                    2f:fd:f1:0f:76:d7:12:65:46:4b:1d:8b:94:02:e6:
                    c3:44:78:6c:e6:85:de:9c:71:b4:c8:84:56:8b:10:
                    3d:b4:7f:0c:52:74:d7:d7:6d:08:61:34:55:b3:52:
                    e3:5c:4d:11:09:ff:0a:6f:29:92:4f:47:21:00:d9:
                    15:88:6b:f7:21:e7:9d:2e:42:bc:14:80:db:f4:13:
                    22:8e:29:fe:a3:3c:2f:15:64:d1:e9:38:fc:bc:fd:
                    73:de:ef:c0:80:35:47:be:dc:a7:af:0c:e7:5e:2e:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:FA:1B:BD:97:3B:DA:0F:C2:89:5A:C8:04:04:B5:1B:A9:19:64
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:2f:aa:48:74:e0:8f:16:0f:88:12:ca:62:f2:2a:c4:8f:
         ac:fb:cb:4d:c6:03:55:62:27:21:aa:9e:c3:14:40:9b:26:9b:
         53:2c:c8:11:37:f2:fc:2b:71:b0:0d:56:f9:30:35:e5:63:80:
         5a:09:99:56:02:61:85:f6:95:10:90:52:62:9a:8c:84:1d:57:
         25:4f:ee:c0:1b:58:d3:7e:df:19:3f:d1:74:de:8c:15:5a:08:
         23:ff:cc:58:c7:be:75:1f:af:41:29:3a:ba:f4:81:0f:7b:11:
         31:fe:13:70:12:63:11:73:2c:59:32:1b:89:ec:68:9e:41:a9:
         d0:a8:fe:e7:73:ab:fc:bc:fa:d1:b8:9d:34:18:b8:b7:a4:5f:
         19:1a:5f:06:c3:33:62:83:c2:c1:05:95:70:e0:2e:8e:90:89:
         d2:35:43:e3:69:56:e3:5b:1e:df:e5:24:9d:5b:3e:68:29:6c:
         1c:cf:bf:32:b8:c0:d7:b9:51:ef:e7:e9:fe:61:01:47:c0:f7:
         4f:ce:6c:cc:b1:1b:54:a6:c4:26:05:fa:35:fd:0f:89:52:0a:
         1b:39:d4:26:24:f1:10:da:08:7c:12:4f:90:54:34:af:a8:a6:
         cc:7d:f2:dc:0c:06:83:1a:29:c6:15:24:d7:8c:f4:4a:c7:e5:
         66:88:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org