Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa
File:                     33372e3233302e35362e302f32332d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          9cT5v5HCUBzuz8Az96zy4E+C+Nv9AGA5iMpr5PD3xf4=
Subject key identifier:   13:4A:CB:56:B2:39:73:DA:65:E5:0E:CB:B6:AA:B8:7D:AE:2F:95:C0
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5B71102B82040AF2CC530C8ED12644021847ADED
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa
Signing time:             Thu 23 May 2024 12:02:14 +0000
ROA not before:           Thu 23 May 2024 11:57:14 +0000
ROA not after:            Thu 22 May 2025 12:02:14 +0000
asID:                     270052
IP address blocks:        37.230.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 12:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:71:10:2b:82:04:0a:f2:cc:53:0c:8e:d1:26:44:02:18:47:ad:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 23 11:57:14 2024 GMT
            Not After : May 22 12:02:14 2025 GMT
        Subject: CN=134ACB56B23973DA65E50ECBB6AAB87DAE2F95C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:62:11:69:f0:00:96:32:5e:b5:79:eb:24:
                    1d:07:14:4c:c9:e8:f1:3f:26:20:38:12:9c:ad:c0:
                    0a:7b:c7:44:77:62:58:cc:41:59:63:2c:b6:95:e5:
                    ee:b8:62:7c:25:a8:0d:da:ab:2f:9a:b0:50:9c:10:
                    b8:86:c8:8b:8c:0e:e7:71:ef:e5:51:9c:84:1b:1e:
                    25:31:80:95:59:bc:07:81:a6:94:40:0c:b1:cc:9f:
                    34:32:e2:ef:33:0d:0c:22:91:d9:a0:3e:eb:95:74:
                    b7:ab:dc:f8:81:17:da:36:6b:9c:4e:e7:bf:a4:d8:
                    c0:50:02:ce:3f:d3:54:5e:15:73:89:37:c5:9b:c4:
                    cc:35:7f:c9:d7:8e:76:21:3d:33:7e:8f:de:89:c0:
                    33:87:08:d1:26:1d:0a:b7:e4:0f:1c:78:a8:4b:6a:
                    85:59:c6:76:7b:3d:8a:be:bb:cd:d9:d6:a0:b2:1e:
                    16:5b:34:a8:2e:f8:c4:9e:4e:a3:73:5c:26:fe:aa:
                    f9:55:44:7e:99:43:87:54:fa:84:6d:0e:96:12:e1:
                    38:d5:25:3d:79:c4:49:c3:00:5d:7e:16:d6:d1:79:
                    d1:ee:c2:54:46:3a:4d:24:64:4e:33:ae:26:67:53:
                    97:80:06:f0:2b:7e:6d:76:aa:f7:77:ed:6b:87:a0:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:CB:56:B2:39:73:DA:65:E5:0E:CB:B6:AA:B8:7D:AE:2F:95:C0
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:37:b8:bf:3f:c3:b5:92:3a:1e:45:b6:96:38:56:bc:42:
         ff:45:55:cb:52:45:6f:c2:a2:22:32:eb:38:41:59:51:76:0f:
         82:9d:b5:bb:6b:2d:ad:8b:b9:92:41:12:c7:f3:81:db:44:13:
         dc:72:79:9c:78:b8:3a:65:26:b4:a1:99:21:ae:c6:b9:a8:b0:
         6d:0e:cd:9c:0f:67:fa:2e:a0:79:ea:51:fc:8d:5e:35:b5:0a:
         74:da:ed:e7:ed:78:2f:87:0a:b6:41:b9:22:41:45:04:e7:75:
         da:50:97:0d:1d:fb:be:78:d6:b3:0f:c8:f2:94:82:9a:24:95:
         e7:e9:46:6a:6a:c0:eb:55:fd:c1:7d:01:e1:7e:82:2d:ad:f8:
         85:d8:0c:13:11:27:b1:8f:ac:1a:57:e9:f8:f2:a8:e3:63:01:
         6c:44:b7:8a:df:b3:da:27:9b:63:3c:7c:37:ef:17:b8:3d:68:
         2e:6a:f5:8b:05:e5:bb:d4:f5:ea:14:14:2d:a9:16:ae:49:23:
         ab:5a:a5:a7:0e:43:b3:c6:8c:17:72:75:af:3c:44:7e:be:40:
         78:63:36:6e:75:c0:f7:64:59:19:aa:20:61:0d:41:96:af:8d:
         76:5e:3d:f1:dd:2c:6e:15:15:a2:c5:81:a9:30:85:9f:fe:34:
         ba:33:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:10 2024 by rpki-client on console-ams.rpki-client.org