Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa
File:                     352e38332e3231392e302f32342d3234203d3e20313939363134.roa (raw, json)
Hash identifier:          2Wtt/lW4SXo5PeW03SMtiO54PNwAjlL33RwBmYsNpDQ=
Subject key identifier:   EE:A9:20:71:FC:D9:8B:3B:C2:48:5D:8F:3E:18:1D:94:B3:F4:38:F6
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       20B879EF8F64AE08561EE0B99969BC80FAC4C71B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa
Signing time:             Sat 08 Feb 2025 20:53:53 +0000
ROA not before:           Sat 08 Feb 2025 20:48:53 +0000
ROA not after:            Sat 07 Feb 2026 20:53:53 +0000
asID:                     199614
IP address blocks:        5.83.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b8:79:ef:8f:64:ae:08:56:1e:e0:b9:99:69:bc:80:fa:c4:c7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb  8 20:48:53 2025 GMT
            Not After : Feb  7 20:53:53 2026 GMT
        Subject: CN=EEA92071FCD98B3BC2485D8F3E181D94B3F438F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:6e:36:be:80:16:ed:55:1b:59:04:ff:fb:
                    37:77:d9:0c:dc:d5:9d:86:0d:d4:6c:4c:5b:53:5e:
                    15:c3:b2:a6:f4:31:b2:20:dc:71:c6:8b:d4:37:24:
                    34:ea:05:04:ab:77:b5:c8:78:65:57:0a:2d:ff:74:
                    ec:93:4b:43:2d:fa:47:a0:bf:b3:41:82:c1:dc:ac:
                    f7:77:98:be:7c:55:df:fa:a8:b2:3e:67:f8:f2:e9:
                    f3:6b:75:ea:ab:49:aa:7c:5b:0b:d1:b8:34:fe:cb:
                    9a:c7:74:ce:03:07:37:7b:03:9d:42:2a:de:7f:52:
                    cd:35:35:fe:50:e8:ae:db:17:0d:c7:fa:69:a8:0a:
                    7b:bf:03:bf:4d:d5:24:6c:92:24:17:1d:38:eb:0e:
                    76:ca:71:90:06:64:00:45:66:b8:5c:40:e6:77:14:
                    78:3a:6d:29:f3:d1:42:f8:fa:67:6f:39:12:0b:c1:
                    ed:0d:1e:0a:2d:17:3e:71:4f:bc:56:7b:9d:89:cf:
                    29:ea:a5:35:6e:61:22:19:d1:21:54:ed:98:5e:49:
                    be:28:49:67:2a:2a:6e:42:ae:fa:b0:dc:5b:5e:79:
                    29:fd:fe:85:31:dd:e5:d5:49:39:ac:57:d7:f3:70:
                    d9:16:83:d4:d3:88:f4:5c:b7:ed:d7:fc:9a:f6:b8:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A9:20:71:FC:D9:8B:3B:C2:48:5D:8F:3E:18:1D:94:B3:F4:38:F6
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313939363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:a3:e8:71:59:fc:17:47:14:5e:68:91:c3:bb:78:60:11:
         1a:03:3e:e3:d5:0c:ae:cd:af:de:b2:78:cd:09:da:61:b8:fa:
         ad:be:ff:bf:10:1c:3c:16:f7:c9:6a:d4:2a:81:af:30:82:f8:
         8a:35:73:07:69:6e:d4:c1:76:b8:e3:8c:7f:65:ce:fc:fa:67:
         27:c9:ef:4c:cb:3e:b9:96:35:55:34:b5:11:2a:0d:27:6f:7b:
         af:c2:72:e8:15:97:8a:33:0e:8b:a1:ba:30:82:4f:6d:a8:14:
         11:3d:57:dd:17:48:28:f3:b2:72:23:2e:df:aa:3c:47:21:d9:
         65:d9:fa:1c:cb:6f:d7:ec:03:e3:25:a4:86:68:5b:b1:21:7a:
         d0:1a:d4:e9:3c:47:8e:24:66:6d:bc:55:68:b4:13:0c:1c:ee:
         2a:48:0c:3d:1e:75:ae:83:2f:77:3f:16:60:60:cc:a6:32:1e:
         87:9e:ee:7c:23:42:b9:4b:ed:16:e5:9e:ab:eb:2b:d5:d5:d3:
         07:9e:92:b0:a8:85:3b:41:e0:43:82:00:24:68:61:81:0a:de:
         49:c5:86:59:06:0d:3a:45:ef:e4:01:49:76:97:6b:95:ee:93:
         89:ff:58:8b:6f:5e:a6:de:04:47:3e:6b:9b:12:67:7b:e5:7e:
         c2:8a:06:6c
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUILh5749krghWHuC5mWm8gPrExxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNTAyMDgyMDQ4NTNaFw0yNjAyMDcyMDUzNTNaMDMxMTAvBgNV
BAMTKEVFQTkyMDcxRkNEOThCM0JDMjQ4NUQ4RjNFMTgxRDk0QjNGNDM4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODW42voAW7VUbWQT/+zd32Qzc
1Z2GDdRsTFtTXhXDsqb0MbIg3HHGi9Q3JDTqBQSrd7XIeGVXCi3/dOyTS0Mt+keg
v7NBgsHcrPd3mL58Vd/6qLI+Z/jy6fNrdeqrSap8WwvRuDT+y5rHdM4DBzd7A51C
Kt5/Us01Nf5Q6K7bFw3H+mmoCnu/A79N1SRskiQXHTjrDnbKcZAGZABFZrhcQOZ3
FHg6bSnz0UL4+mdvORILwe0NHgotFz5xT7xWe52JzynqpTVuYSIZ0SFU7ZheSb4o
SWcqKm5Crvqw3FteeSn9/oUx3eXVSTmsV9fzcNkWg9TTiPRct+3X/Jr2uGDPAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU7qkgcfzZizvCSF2PPhgdlLP0OPYwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM5MzkzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9swDQYJKoZIhvcN
AQELBQADggEBAGteo+hxWfwXRxReaJHDu3hgERoDPuPVDK7Nr96yeM0J2mG4+q2+
/78QHDwW98lq1CqBrzCC+Io1cwdpbtTBdrjjjH9lzvz6ZyfJ70zLPrmWNVU0tREq
DSdve6/CcugVl4ozDouhujCCT22oFBE9V90XSCjzsnIjLt+qPEch2WXZ+hzLb9fs
A+MlpIZoW7EhetAa1Ok8R44kZm28VWi0Ewwc7ipIDD0eda6DL3c/FmBgzKYyHoee
7nwjQrlL7RblnqvrK9XV0weekrCohTtB4EOCACRoYYEK3knFhlkGDTpF7+QBSXaX
a5Xuk4n/WItvXqbeBEc+a5sSZ3vlfsKKBmw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:35 2025 by rpki-client