Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa
File:                     33372e3233302e36302e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          eXsKfL1mI2DridkNQDMo9JchWblLyfbxf+FSIBs7qE4=
Subject key identifier:   79:07:7F:75:FC:4C:1A:2F:1C:C9:52:20:C9:47:06:65:46:A7:F9:89
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4CC4BE3A535FB13A4F4AC1151A18F192A8F369E7
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa
Signing time:             Thu 03 Oct 2024 09:23:06 +0000
ROA not before:           Thu 03 Oct 2024 09:18:06 +0000
ROA not after:            Thu 02 Oct 2025 09:23:06 +0000
asID:                     16276
IP address blocks:        37.230.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 19:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c4:be:3a:53:5f:b1:3a:4f:4a:c1:15:1a:18:f1:92:a8:f3:69:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  3 09:18:06 2024 GMT
            Not After : Oct  2 09:23:06 2025 GMT
        Subject: CN=79077F75FC4C1A2F1CC95220C947066546A7F989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:cd:19:18:11:3d:fd:f6:92:c1:a6:57:6a:
                    bf:a5:bf:a7:74:a0:47:d1:ea:16:4b:09:be:f9:c0:
                    9f:aa:d8:e3:d9:ee:7e:aa:9b:28:32:f5:5f:29:f5:
                    7c:8a:6b:e7:43:58:14:cb:51:a6:a6:16:3b:9e:a1:
                    10:f1:ea:3c:a6:c8:f2:30:f1:a0:7d:d1:9d:9d:51:
                    12:2f:28:f1:7c:3c:48:ae:67:16:1c:c1:31:15:0c:
                    2e:b3:9b:8b:5b:ae:ec:3e:c7:67:75:99:38:c7:c8:
                    1c:c0:64:00:d5:4d:0a:1c:39:80:f8:30:68:b6:80:
                    6f:21:10:b9:b7:05:8e:2b:a2:df:a0:42:6f:eb:3e:
                    ad:22:34:25:19:f4:07:dd:20:ad:fa:11:0d:f2:65:
                    29:03:50:f7:91:27:cf:b5:bd:8e:03:a3:e7:e9:31:
                    92:2a:5c:7f:90:07:90:1b:ee:9c:21:a8:25:a6:d7:
                    c3:ad:41:f0:a9:c9:fc:53:03:97:55:ff:23:27:58:
                    3b:e1:e1:b6:5a:a1:7a:c5:cb:4d:57:b0:57:59:f0:
                    53:8b:0c:60:7e:29:a0:99:08:1a:a6:cc:fd:9e:d5:
                    9b:7b:c5:fe:a7:72:dc:ea:3d:49:ee:3b:82:76:5c:
                    8f:cb:79:85:aa:c6:9e:3f:da:d8:62:0b:16:d5:e9:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:7F:75:FC:4C:1A:2F:1C:C9:52:20:C9:47:06:65:46:A7:F9:89
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:a7:40:fe:16:8e:6d:0a:6a:21:c0:8f:d3:8a:2d:16:2c:
         c0:64:0e:53:0c:03:c0:38:5a:43:37:7e:bc:a1:03:1a:40:45:
         26:37:2f:7c:69:5b:3f:b2:ea:db:22:7f:87:e1:fc:ea:51:4b:
         36:63:1c:11:d5:14:4d:66:21:11:ae:5f:8d:d9:db:4c:42:a5:
         94:3b:f1:00:d8:3c:ea:e1:a1:1c:5b:50:9a:bd:31:a1:99:ba:
         a1:31:09:ba:84:ac:62:a0:38:86:a4:63:f5:26:7e:23:03:28:
         63:0b:0b:f2:d3:c9:18:6b:d4:fe:03:c2:65:d3:68:cf:47:ab:
         31:b0:ab:35:28:97:d2:ca:2e:e1:6a:bf:06:60:50:76:ba:04:
         14:35:ca:9e:ab:77:46:29:14:b8:b6:ec:77:23:c9:d3:39:70:
         ec:f6:5e:95:0d:2b:2a:d6:a3:72:54:75:1a:a8:b0:52:f8:d3:
         8b:d7:d5:70:72:7f:2a:f9:4d:32:4d:22:58:cd:1b:5f:02:a2:
         de:24:3f:42:c0:ed:12:b1:0b:4f:5e:65:d4:8a:66:61:9a:df:
         23:f7:07:c7:45:b2:7b:a1:f5:15:a1:59:0a:a6:b1:aa:04:6f:
         4a:2a:b3:6c:4a:2e:2b:e2:07:42:38:11:20:94:5c:a1:d2:78:
         4f:fa:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org