Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
File:                     352e38332e3139322e302f32302d3230203d3e20323037363435.roa (raw, json)
Hash identifier:          VbLAW9rpMB9gq+pl+Mb6UXJ72VfekgTcLixDBG6SrdU=
Subject key identifier:   4C:85:82:7D:60:DA:A6:F0:06:74:70:5D:72:D5:C6:A6:5C:C7:0C:61
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       04573A8787C96CE39751D407047E37F50A47FF51
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
Signing time:             Thu 10 Oct 2024 16:43:25 +0000
ROA not before:           Thu 10 Oct 2024 16:38:25 +0000
ROA not after:            Thu 09 Oct 2025 16:43:25 +0000
asID:                     207645
IP address blocks:        5.83.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:57:3a:87:87:c9:6c:e3:97:51:d4:07:04:7e:37:f5:0a:47:ff:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 10 16:38:25 2024 GMT
            Not After : Oct  9 16:43:25 2025 GMT
        Subject: CN=4C85827D60DAA6F00674705D72D5C6A65CC70C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:f5:6c:9c:54:01:47:f0:4a:25:0f:af:5b:
                    b6:3a:7b:6d:a2:e5:c7:16:2b:8a:a0:6a:ef:9e:e1:
                    b0:1b:4e:88:5a:e4:e3:e0:26:b2:e3:bd:63:34:63:
                    08:3b:c5:22:70:91:2d:8b:94:f1:5c:2d:57:93:b4:
                    a7:e8:1f:54:84:0b:f7:ad:85:81:d3:c8:41:4f:e4:
                    69:61:f6:0b:61:1a:29:b0:e8:c5:fc:71:83:8a:c6:
                    95:4d:b1:77:77:4c:d1:88:17:27:fd:50:f8:74:ad:
                    1c:f1:14:49:7a:da:59:74:69:7b:1a:59:aa:5a:ef:
                    55:80:3f:86:13:60:6c:21:eb:eb:ed:c6:82:44:91:
                    7c:fd:3f:39:02:a3:8b:75:d4:2d:d4:e1:60:cd:ae:
                    ec:40:2c:00:8b:30:d3:dc:5c:39:98:b3:5b:78:c0:
                    16:07:d9:1e:8f:b2:28:d7:6c:c8:39:d2:55:42:5e:
                    e3:62:80:15:28:48:19:fa:93:71:48:48:7e:09:26:
                    89:1b:67:bc:63:e3:37:c3:fb:fd:8d:ff:54:ef:03:
                    a6:d0:e8:be:c3:fa:43:e7:88:79:78:91:9f:54:f8:
                    83:71:31:f3:de:1b:6d:92:7e:37:99:59:37:00:af:
                    19:7b:5f:9f:97:dd:41:33:c0:b3:54:78:3e:40:f8:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:82:7D:60:DA:A6:F0:06:74:70:5D:72:D5:C6:A6:5C:C7:0C:61
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:9f:4f:ef:87:d7:23:7c:42:24:b1:2e:4b:c6:cc:6d:22:
         5b:10:35:1b:49:7a:33:55:b1:99:0a:57:6b:e8:93:86:53:2d:
         db:5e:68:87:9c:fb:86:86:d5:b0:ae:74:43:6d:9e:3c:22:97:
         79:a5:90:c6:80:f2:24:be:8b:ca:3c:fd:38:1d:ee:d3:70:93:
         60:6d:b2:83:d6:62:e2:d5:ae:d2:ee:60:36:11:22:ea:0f:78:
         88:8d:c8:ac:5e:04:b3:e4:3b:48:39:28:d0:e6:7e:74:b9:4c:
         88:43:22:8a:e6:65:e4:35:b8:9e:9e:62:c0:47:ca:90:84:d5:
         a9:e8:6b:5c:1d:bc:8b:4e:f4:f3:bc:3b:59:4d:e7:a8:ec:97:
         7b:aa:62:89:d0:90:34:57:e6:e7:a6:03:c9:0b:2f:08:53:5b:
         90:81:53:cc:e3:4b:fa:6a:20:41:7a:fa:d1:0f:1c:42:df:76:
         63:c7:fc:0f:cc:b9:e1:a4:27:fd:c0:27:b1:3c:9d:f7:7b:2b:
         94:6e:20:e7:68:3f:c7:a3:c1:7e:9b:bf:5d:48:33:c9:8d:2d:
         dc:44:fb:ed:54:f1:82:40:0b:91:af:f3:b1:fb:94:76:15:3b:
         68:22:f3:5a:47:1b:3f:ef:35:4c:e6:6a:57:f0:3f:fd:31:19:
         2e:30:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org