Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35352e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          bYnScU4rIpDy1wg7NmzyVMOMqZzByc1vlnieupHg8gQ=
Subject key identifier:   1C:73:0E:D1:47:E0:69:69:0D:40:77:1B:45:8D:E1:76:81:56:AB:33
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       49FCB87434DAB8B8A0054EA76EB2BD1DFD8442BE
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 21 Nov 2023 15:08:35 +0000
ROA not before:           Tue 21 Nov 2023 15:03:35 +0000
ROA not after:            Tue 19 Nov 2024 15:08:35 +0000
asID:                     64267
IP address blocks:        37.230.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 22:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fc:b8:74:34:da:b8:b8:a0:05:4e:a7:6e:b2:bd:1d:fd:84:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 21 15:03:35 2023 GMT
            Not After : Nov 19 15:08:35 2024 GMT
        Subject: CN=1C730ED147E069690D40771B458DE1768156AB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:d8:26:9b:95:c1:59:ec:58:d7:86:49:fd:
                    d3:c6:65:3e:c5:be:1c:2b:91:fd:68:a5:9f:0f:5a:
                    e3:24:ec:ac:2e:07:63:c7:73:88:b3:81:90:65:5e:
                    eb:91:4e:53:1a:ce:5f:e3:e8:fb:09:3f:a4:85:83:
                    6e:c5:8f:0a:b7:3b:5c:45:de:31:3f:b8:50:b8:0d:
                    dd:36:55:19:17:9f:26:99:a2:b6:f1:c6:01:67:6b:
                    c1:9a:5d:11:0c:ce:b3:fd:aa:e8:d0:a5:1e:f6:a7:
                    e4:e0:37:a9:dd:05:9b:c0:29:ce:50:0c:21:5b:dd:
                    34:b7:41:b3:73:d5:7a:45:ac:83:f3:1e:ca:b5:85:
                    07:38:d5:df:96:65:a1:22:74:bf:90:2c:cf:51:f9:
                    86:85:13:88:64:31:fb:dd:93:74:4c:8a:bc:a5:2c:
                    3f:87:94:42:61:cc:ba:78:15:f3:97:2b:cf:4c:aa:
                    a6:85:29:96:92:d1:ff:64:5f:60:94:fa:70:c6:bc:
                    cb:4a:5e:93:ee:6f:bf:19:ed:bd:1f:ff:1d:10:5b:
                    88:13:8b:1d:a0:f6:ee:98:61:03:b6:c9:ab:8e:09:
                    d6:f0:f6:ac:b6:2f:b9:47:57:0d:9c:66:33:c0:1a:
                    97:68:c0:fc:45:51:b2:49:92:85:9a:91:3c:3a:d3:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:0E:D1:47:E0:69:69:0D:40:77:1B:45:8D:E1:76:81:56:AB:33
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9f:4a:ba:7d:30:0d:fd:89:f5:ed:e4:c1:c6:0b:98:df:dc:
         c6:27:f2:ee:e7:71:3b:cc:4c:d1:8e:85:4a:d1:5c:20:ff:cb:
         a9:7e:b1:86:39:23:a8:37:45:d6:d5:b9:20:37:75:1a:81:0b:
         8f:7f:b3:dd:57:a8:92:fc:ab:3c:f4:08:e0:2a:15:96:64:ae:
         d3:e2:ac:c8:51:e1:9d:78:df:33:bf:b3:a5:e8:5a:6a:ab:19:
         87:57:4f:91:47:75:95:40:1f:73:d0:0d:33:42:d8:81:66:3d:
         8b:28:35:48:f6:1b:0c:05:d5:c1:08:fe:a2:c8:25:91:6c:e9:
         da:cd:86:5f:eb:18:12:9a:54:55:d7:92:6c:50:01:9d:e7:8e:
         76:41:00:87:82:43:e6:d5:b3:a3:3e:79:f5:91:67:60:37:35:
         f3:2f:2b:7c:5d:9c:d0:a1:32:a3:2e:87:41:c3:a5:0c:5d:2c:
         0c:63:56:96:f2:65:20:37:7c:ec:08:fa:ad:d9:17:2e:98:88:
         80:28:42:2f:66:ab:b7:3a:f6:fb:df:8e:b0:0d:80:86:58:a2:
         e5:75:20:23:ac:4b:01:6a:4e:61:3f:0c:ed:b6:a7:4d:9b:0e:
         b6:79:04:23:a8:92:e4:76:c2:8b:6d:8a:c9:43:54:d2:89:83:
         71:8e:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:04:28 2024 by rpki-client on console-fra.rpki-client.org