Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20313939363134.roa
File:                     352e38332e3231362e302f32342d3234203d3e20313939363134.roa (raw, json)
Hash identifier:          8Q/x+EWEBBwA5TkssPQUQlFGqq0tR07CeeXNyTmVHPw=
Subject key identifier:   98:59:B8:06:63:58:7F:69:6C:36:E1:EA:30:FB:59:10:6A:1F:43:4A
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       360701521D1C0ACBFAD57CCC78FB380643CACBAA
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20313939363134.roa
Signing time:             Sat 08 Feb 2025 20:53:53 +0000
ROA not before:           Sat 08 Feb 2025 20:48:53 +0000
ROA not after:            Sat 07 Feb 2026 20:53:53 +0000
asID:                     199614
IP address blocks:        5.83.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 19:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:07:01:52:1d:1c:0a:cb:fa:d5:7c:cc:78:fb:38:06:43:ca:cb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb  8 20:48:53 2025 GMT
            Not After : Feb  7 20:53:53 2026 GMT
        Subject: CN=9859B80663587F696C36E1EA30FB59106A1F434A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:ae:7e:ae:41:e2:b1:d9:69:73:47:59:79:
                    27:5c:ea:a4:bf:8f:ac:50:c4:f4:40:5f:44:89:fc:
                    29:8c:0b:8d:d4:49:7a:ca:4d:1f:89:6a:f9:aa:ad:
                    c8:f7:7d:22:e4:ac:76:8d:31:6c:b2:e7:8d:6e:8d:
                    4c:1c:ec:73:b9:b2:d9:c9:29:d5:ab:85:2c:53:69:
                    8e:54:5b:02:fe:44:1e:f4:fa:81:3b:8f:99:b4:3c:
                    e4:01:02:64:5e:89:e0:f2:22:42:5c:09:7d:12:2c:
                    fd:cd:f5:c1:73:e1:4a:f2:2f:d0:29:fd:c3:a3:d3:
                    8f:91:e3:28:2f:f5:55:45:cc:95:7b:75:11:b3:c9:
                    6c:db:45:d8:8d:32:57:e7:a8:5a:6b:5d:c8:ae:f5:
                    9e:5f:15:3a:fe:28:2b:dd:8d:27:ba:df:49:20:15:
                    ce:df:45:aa:74:6b:8f:0e:46:2f:b4:9e:0b:00:06:
                    1a:ef:c4:40:1b:5a:f3:59:6d:18:89:24:56:62:3d:
                    6d:ab:03:20:90:bf:8a:4c:9f:d3:82:d0:5f:89:d5:
                    15:b1:b5:27:da:41:db:a1:43:97:6d:5a:0b:65:38:
                    8f:79:49:8e:bb:53:8e:20:df:52:84:b1:b8:12:1d:
                    f0:5a:93:a3:41:ed:7b:a0:be:4e:c6:4f:2b:ed:30:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:59:B8:06:63:58:7F:69:6C:36:E1:EA:30:FB:59:10:6A:1F:43:4A
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20313939363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:46:36:5e:a5:71:c0:68:f1:34:57:7f:85:6f:c2:db:32:
         5a:52:46:30:e3:71:07:f8:3e:b9:cb:e9:4c:ab:6c:7b:1f:46:
         0e:85:89:4b:44:2f:19:b6:b8:f4:10:a6:b4:d9:33:cc:64:01:
         66:d7:fc:49:5a:b1:bd:c9:f4:cf:04:f6:07:df:21:86:e1:ce:
         44:33:8d:06:94:00:87:f6:6c:b4:c2:9b:66:bf:d4:2b:29:bd:
         fc:e7:54:a7:ea:42:b3:59:6f:0a:c1:06:a2:08:54:88:95:c4:
         44:1a:be:14:07:27:33:19:65:72:e6:6a:f1:1e:db:7d:80:11:
         9e:98:f2:08:3e:6b:af:df:d5:d5:5e:e2:09:1d:d6:9e:a8:5a:
         59:8f:90:a5:72:b2:22:4b:cc:3a:8a:33:40:af:ad:2e:a2:37:
         7c:71:74:2d:55:e0:12:63:00:2c:2e:17:ae:67:49:96:16:dc:
         11:f0:a2:76:38:35:1c:e8:42:60:43:24:bc:b2:68:d5:3b:aa:
         e1:81:48:d1:fe:5d:0d:59:65:b0:38:90:1c:c4:e4:87:c6:13:
         df:ae:28:79:61:f6:e6:71:62:95:05:a8:a4:a1:1c:80:4a:2e:
         60:d9:c9:47:74:ac:11:29:28:05:ce:0e:fe:a3:e8:db:e2:99:
         c7:f1:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:18 2025 by rpki-client