Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20323033333633.roa
File:                     352e38332e3231382e302f32342d3234203d3e20323033333633.roa (raw, json)
Hash identifier:          D5ED3WKPUfyvM8gnkw8ajW+DgrHu+/ZZ6Y90od/hD3A=
Subject key identifier:   4E:15:8B:E3:47:4F:41:45:84:C6:7B:37:D6:49:19:50:9C:89:8B:46
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3B7952464D9E855B76565D77E2C1301818BE2128
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20323033333633.roa
Signing time:             Tue 27 Feb 2024 18:11:18 +0000
ROA not before:           Tue 27 Feb 2024 18:06:18 +0000
ROA not after:            Tue 25 Feb 2025 18:11:18 +0000
asID:                     203363
IP address blocks:        5.83.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 15:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:79:52:46:4d:9e:85:5b:76:56:5d:77:e2:c1:30:18:18:be:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 27 18:06:18 2024 GMT
            Not After : Feb 25 18:11:18 2025 GMT
        Subject: CN=4E158BE3474F414584C67B37D64919509C898B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:11:02:7d:55:84:f2:78:47:f2:ce:f9:fa:
                    89:61:22:e1:50:bb:10:60:c6:46:6d:6e:dc:fe:95:
                    4c:84:7a:8e:00:e0:89:81:0b:67:7b:f2:7a:79:8d:
                    1e:09:27:a6:a8:9c:1b:eb:ad:11:2f:b0:37:4f:87:
                    23:1e:6a:3a:77:cc:03:9a:65:f6:cd:c7:a9:d7:7a:
                    2f:81:10:4a:75:8a:65:59:66:a2:c7:96:9a:3a:58:
                    86:2f:18:66:5d:c0:a2:60:bb:9b:69:09:c4:cc:3f:
                    65:89:02:7c:97:96:66:d5:c5:fa:34:61:87:01:56:
                    f0:e3:1b:38:63:02:1b:23:df:83:f6:3f:9b:11:78:
                    fc:08:b4:54:8a:a7:9f:d7:29:c7:2f:2b:66:c7:3d:
                    87:ec:16:29:76:21:3e:cb:9e:9c:af:e5:90:9c:7b:
                    35:be:02:bd:2e:6f:af:bb:ea:4c:b1:80:96:17:7b:
                    90:85:a8:09:88:93:08:0b:4a:79:64:d9:8a:f6:4e:
                    42:cb:b0:3b:cf:02:17:0e:e6:e1:07:44:75:ab:09:
                    20:43:0a:ca:ee:56:15:ec:78:83:1c:ff:72:2c:b1:
                    99:f5:44:62:40:97:84:27:27:a9:fe:03:90:93:52:
                    3d:65:e6:2d:84:6c:c4:cb:ff:82:e9:01:e0:c8:5d:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:8B:E3:47:4F:41:45:84:C6:7B:37:D6:49:19:50:9C:89:8B:46
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20323033333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:55:58:19:05:74:c4:b9:e6:6b:0d:7a:8c:16:aa:4f:0e:
         75:30:93:03:98:a6:c4:7c:64:68:d1:58:51:2a:70:ec:ca:98:
         86:88:3b:1b:a7:f5:7c:e9:11:67:74:31:1e:3d:23:a4:4e:dd:
         da:63:45:0a:7c:07:45:f3:00:27:39:2f:9f:e3:a4:5a:e2:2c:
         c2:93:28:15:ae:8b:a4:17:6b:f8:51:64:10:12:6d:73:35:46:
         9c:7e:c8:a6:fb:c7:8d:c1:a8:42:ac:6e:9d:85:83:a1:e4:77:
         a0:4a:e0:b0:86:79:bd:13:60:9a:3f:5c:58:9d:08:45:6a:79:
         65:9c:03:e9:b6:22:70:57:9b:45:36:6d:44:cb:24:94:59:ee:
         47:06:76:be:8e:36:14:73:2e:b6:30:77:96:62:23:cb:b5:7e:
         4a:0d:49:d5:45:45:7f:e0:78:ca:c2:f6:36:1e:9f:19:7c:6f:
         2c:2e:bc:6d:15:92:b5:2c:6e:96:0a:c2:c2:bb:64:bf:dc:68:
         f5:1d:b9:d7:bc:b6:7f:83:a1:91:9c:8a:ee:37:6c:f5:bc:01:
         e1:4a:28:ff:66:fb:62:4d:0d:c0:be:6b:f2:c8:3b:a8:1b:aa:
         3a:5a:d6:44:72:51:20:e2:02:ef:29:bc:a9:19:53:85:33:90:
         56:a5:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:02:56 2024 by rpki-client on console-fra.rpki-client.org