Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323134373739.roa
File:                     352e38332e3231342e302f32342d3234203d3e20323134373739.roa (raw, json)
Hash identifier:          5acKWlc3tNOz39XdLqSmCjJXIOFtA+vLZ9fyXymsl+E=
Subject key identifier:   57:62:79:60:CF:FF:6C:E9:24:57:E6:2E:07:31:6A:63:11:27:AB:68
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       478217FB3BAFA6E825B90FBC3342A9E90E75E3CC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323134373739.roa
Signing time:             Tue 11 Jun 2024 14:42:51 +0000
ROA not before:           Tue 11 Jun 2024 14:37:51 +0000
ROA not after:            Tue 10 Jun 2025 14:42:51 +0000
asID:                     214779
IP address blocks:        5.83.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:17:fb:3b:af:a6:e8:25:b9:0f:bc:33:42:a9:e9:0e:75:e3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun 11 14:37:51 2024 GMT
            Not After : Jun 10 14:42:51 2025 GMT
        Subject: CN=57627960CFFF6CE92457E62E07316A631127AB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:51:92:91:eb:4e:21:f5:e7:70:16:83:48:
                    11:e9:37:0d:c4:3e:c0:ed:88:d2:fa:19:40:9c:f8:
                    6e:c3:7a:53:d1:b3:50:06:49:a8:32:09:0f:6a:38:
                    0b:55:76:42:21:8c:fc:bc:96:73:8c:08:43:4f:94:
                    eb:fe:42:80:66:fb:f7:71:9b:8c:f4:d4:a4:e9:9d:
                    dc:4d:04:04:06:67:f2:47:dc:37:9f:93:bb:ce:9f:
                    1b:31:60:49:d7:2c:40:a1:0c:89:99:76:42:2e:64:
                    d1:c9:93:00:8a:d7:a4:22:55:ab:f5:2c:82:65:44:
                    a5:95:3b:85:57:5e:8e:28:e1:d8:dc:b2:59:fa:46:
                    9a:a6:df:ec:06:c8:11:29:1e:ae:a7:91:b1:a7:5b:
                    46:e0:c5:98:b3:62:71:54:69:52:a5:51:08:fd:16:
                    61:8b:0e:d3:de:b9:ea:8c:61:cb:19:ea:c2:4a:24:
                    75:7a:8a:c8:e8:fa:17:0c:96:bd:38:7d:56:a1:65:
                    44:73:e7:bf:e6:29:54:d8:65:f9:16:96:e0:0e:f5:
                    de:53:f6:61:c2:2d:5b:4e:2f:7e:26:e4:df:c8:49:
                    ad:3b:3d:e4:d7:f3:a1:b5:c4:73:fb:57:41:04:da:
                    ad:dd:23:d6:6c:4c:1e:19:79:18:7a:bb:ee:b0:8d:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:79:60:CF:FF:6C:E9:24:57:E6:2E:07:31:6A:63:11:27:AB:68
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231342e302f32342d3234203d3e20323134373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:91:90:4e:3c:ba:39:76:9f:61:13:36:6e:46:8d:5c:d6:99:
         a9:99:d7:26:bc:0c:a5:fc:1f:18:e7:20:a5:d7:f8:0f:0a:2b:
         46:60:92:1c:3a:25:3f:64:d1:41:99:4b:1f:41:b1:58:eb:f5:
         12:98:d4:1d:90:1c:7b:fe:4d:62:ab:dd:cb:99:51:7a:2d:73:
         54:71:ff:cb:79:74:c4:a9:cd:26:c9:cd:87:b9:bb:05:d4:07:
         54:63:f5:ab:53:55:b4:7c:73:33:61:f8:2c:39:d6:f8:59:5e:
         00:51:58:ad:f8:f2:12:63:7a:2f:e7:0a:e6:2c:21:ee:a5:01:
         2f:cd:a6:19:3a:ff:28:ff:58:59:4d:e8:58:1c:2b:dc:f5:1c:
         f9:f2:af:ed:a3:3d:42:cd:90:4d:5a:bd:61:35:51:25:c2:5e:
         89:1e:55:6a:ed:95:d7:64:cd:ca:8a:f3:90:53:71:b1:d7:e3:
         10:1e:25:8d:bc:8b:3c:ae:ea:2a:77:1c:78:d8:74:fb:78:74:
         fc:b6:f5:89:27:51:ad:79:17:9f:7d:c8:10:2b:81:b9:ca:74:
         ff:a1:30:21:ba:b8:ab:df:b8:1a:15:2c:ce:65:57:3b:9b:5b:
         0f:5a:af:c0:83:d3:05:3d:7a:42:d5:4a:65:75:dd:5c:6d:27:
         ec:cf:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org