Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2037303138.roa
File:                     352e38332e3231322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          ZFJZQaD5Oxw98HZo/a1zXMcFSPEgVE/G6dl9AHKlZ2w=
Subject key identifier:   D1:B2:AA:77:DF:7D:3D:23:DA:E4:BE:E2:BB:B6:FC:BA:98:88:70:21
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       76B6240DA304C3239A1FCCB554F76FED25857F5E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 18 Nov 2024 15:23:52 +0000
ROA not before:           Mon 18 Nov 2024 15:18:52 +0000
ROA not after:            Mon 17 Nov 2025 15:23:52 +0000
asID:                     7018
IP address blocks:        5.83.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 05:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:24:0d:a3:04:c3:23:9a:1f:cc:b5:54:f7:6f:ed:25:85:7f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 18 15:18:52 2024 GMT
            Not After : Nov 17 15:23:52 2025 GMT
        Subject: CN=D1B2AA77DF7D3D23DAE4BEE2BBB6FCBA98887021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:0e:ea:ed:76:43:71:69:17:24:f0:8f:85:
                    96:0c:06:8d:73:04:cc:d8:1d:df:21:8a:52:f4:5d:
                    67:04:0f:f3:7e:33:00:e2:64:fc:32:c7:14:5a:ca:
                    9b:96:6c:36:66:57:a9:30:10:07:6b:31:f9:e0:a8:
                    80:ce:b5:1e:33:e5:0a:da:08:28:ca:57:69:05:c6:
                    b9:21:04:d6:c2:15:a5:c6:9b:83:cc:a9:22:6e:6c:
                    5b:38:a5:ab:e4:57:d5:a0:14:a9:be:c9:3b:2c:47:
                    81:d0:db:99:42:c3:f0:1d:1a:eb:cc:f9:c8:9f:c8:
                    c8:55:96:48:77:f0:7a:da:02:32:02:7e:4c:c6:2d:
                    79:75:14:8f:16:97:76:88:84:17:f6:f4:88:aa:38:
                    e2:a0:d8:1b:68:41:78:88:cc:8c:e3:aa:7e:6d:16:
                    1b:19:5f:42:cd:21:c9:04:07:4b:95:b9:5a:6c:9c:
                    49:30:e5:2f:b8:2f:17:5f:32:d5:6e:f5:d2:1a:a6:
                    6d:73:1b:90:1f:a1:15:e6:8a:71:13:dd:92:5d:36:
                    4e:c2:56:f5:5f:9d:b9:8c:1f:f8:07:3e:c9:2c:f3:
                    75:55:20:f2:b5:e9:a3:d0:22:ff:bd:a7:e2:8d:81:
                    1e:f6:3f:cd:d0:63:cc:4e:22:19:bf:4a:d3:55:b0:
                    ef:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B2:AA:77:DF:7D:3D:23:DA:E4:BE:E2:BB:B6:FC:BA:98:88:70:21
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:ab:92:76:8c:2d:00:0b:3e:53:93:13:3e:b8:c1:99:5e:
         db:13:42:d1:2a:63:9c:68:1a:42:c8:90:09:18:46:a4:f6:89:
         3b:9a:22:99:51:36:de:36:2a:c9:49:62:63:5a:8b:de:73:c8:
         cb:7f:3f:c9:c8:4b:e8:37:56:f3:df:39:e8:d8:ae:d4:b4:8e:
         cb:43:39:d8:62:ec:b4:11:f9:49:66:a8:51:f2:ee:3a:4d:85:
         96:0d:92:9d:5e:5d:fd:85:fe:5f:57:e8:d0:87:1d:32:e8:86:
         06:b2:7d:d5:4b:fe:f5:08:72:ab:06:fe:f8:cc:46:23:f1:85:
         71:7c:1d:b1:93:cc:f9:56:50:98:bc:8c:d3:c1:7b:a4:1c:9a:
         ca:c5:6b:ae:d3:94:1e:2d:63:c1:b6:4e:6f:3d:1a:0a:c3:bd:
         33:72:e3:5c:5d:0a:0d:80:60:08:6a:b8:bd:5c:1d:bc:36:ad:
         90:aa:47:07:cc:2a:c5:49:59:41:23:73:1a:25:74:12:60:a9:
         45:64:67:76:7b:60:3d:e6:fd:51:a6:3d:a4:d8:4d:17:12:22:
         34:f6:da:4c:ed:0d:3a:fa:3e:d2:23:bf:05:4a:54:6c:86:95:
         52:ae:d5:c5:bd:40:36:7f:94:d9:a1:17:65:28:a0:4d:22:fb:
         e6:86:3f:5a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdrYkDaMEwyOaH8y1VPdv7SWFf14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNDExMTgxNTE4NTJaFw0yNTExMTcxNTIzNTJaMDMxMTAvBgNV
BAMTKEQxQjJBQTc3REY3RDNEMjNEQUU0QkVFMkJCQjZGQ0JBOTg4ODcwMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNA7q7XZDcWkXJPCPhZYMBo1z
BMzYHd8hilL0XWcED/N+MwDiZPwyxxRaypuWbDZmV6kwEAdrMfngqIDOtR4z5Qra
CCjKV2kFxrkhBNbCFaXGm4PMqSJubFs4pavkV9WgFKm+yTssR4HQ25lCw/AdGuvM
+cifyMhVlkh38HraAjICfkzGLXl1FI8Wl3aIhBf29IiqOOKg2BtoQXiIzIzjqn5t
FhsZX0LNIckEB0uVuVpsnEkw5S+4LxdfMtVu9dIapm1zG5AfoRXminET3ZJdNk7C
VvVfnbmMH/gHPsks83VVIPK16aPQIv+9p+KNgR72P83QY8xOIhm/StNVsO9/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0bKqd999PSPa5L7iu7b8upiIcCEwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPUMA0GCSqGSIb3DQEBCwUA
A4IBAQAs2auSdowtAAs+U5MTPrjBmV7bE0LRKmOcaBpCyJAJGEak9ok7miKZUTbe
NirJSWJjWovec8jLfz/JyEvoN1bz3zno2K7UtI7LQznYYuy0EflJZqhR8u46TYWW
DZKdXl39hf5fV+jQhx0y6IYGsn3VS/71CHKrBv74zEYj8YVxfB2xk8z5VlCYvIzT
wXukHJrKxWuu05QeLWPBtk5vPRoKw70zcuNcXQoNgGAIari9XB28Nq2QqkcHzCrF
SVlBI3MaJXQSYKlFZGd2e2A95v1Rpj2k2E0XEiI09tpM7Q06+j7SI78FSlRshpVS
rtXFvUA2f5TZoRdlKKBNIvvmhj9a
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:28 2025 by rpki-client