Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa
File:                     352e38332e3232332e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier:          Y26JJ23qaym0MTXfA4eg9+GHu8nNEIdG1XZFq98ZfkM=
Subject key identifier:   E6:96:D1:F3:11:5C:24:D6:52:19:4E:4F:21:22:00:6B:4A:80:C5:64
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1D4C61115409B0D328645AA25BB31D6870818538
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa
Signing time:             Mon 26 Feb 2024 00:36:26 +0000
ROA not before:           Mon 26 Feb 2024 00:31:26 +0000
ROA not after:            Mon 24 Feb 2025 00:36:26 +0000
asID:                     58061
IP address blocks:        5.83.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:61:11:54:09:b0:d3:28:64:5a:a2:5b:b3:1d:68:70:81:85:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 26 00:31:26 2024 GMT
            Not After : Feb 24 00:36:26 2025 GMT
        Subject: CN=E696D1F3115C24D652194E4F2122006B4A80C564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:fa:88:8e:6a:ef:93:7c:c7:ed:a1:39:b1:
                    c5:6d:93:56:23:f7:21:b4:67:33:96:f1:d7:2b:76:
                    c8:44:f0:4b:c6:87:24:77:7c:b9:a9:3e:90:e2:00:
                    8e:a8:34:9e:e4:4e:8e:b7:6c:9c:3c:05:14:8a:40:
                    5d:2f:17:c0:85:6c:18:a6:f8:52:16:18:76:5f:e7:
                    aa:49:95:eb:e3:d6:ee:c0:67:2e:e3:2a:c5:fa:a4:
                    43:48:8e:1e:4e:96:c6:37:ae:05:02:a9:64:9c:28:
                    83:2b:ad:c9:c9:c2:3e:2c:78:4a:bf:f0:7a:66:75:
                    8d:3b:73:6d:09:d9:4f:44:ee:59:ba:df:02:11:fd:
                    76:a5:18:92:cb:a6:d5:f0:f1:4b:7c:fd:7a:29:ee:
                    d9:bc:0b:03:78:72:32:a7:5c:81:76:4a:ca:cd:44:
                    aa:ab:9c:90:66:97:02:98:4c:3a:ea:74:b2:a5:95:
                    fb:73:da:6f:36:76:d2:a0:93:05:bd:0a:9f:85:de:
                    29:a1:37:f9:a1:67:20:9a:15:5c:5b:a6:da:f2:1b:
                    c5:9c:f5:29:5d:99:62:03:6c:d3:6f:d8:a8:fa:c8:
                    d7:2f:03:da:30:46:5c:fe:c9:a2:86:15:6b:57:d4:
                    42:68:c3:d5:55:c6:96:ea:82:6f:44:e1:52:2d:36:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:D1:F3:11:5C:24:D6:52:19:4E:4F:21:22:00:6B:4A:80:C5:64
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:b5:30:25:f5:79:82:46:e5:23:f2:c0:87:6c:8c:94:59:
         2f:7c:44:e9:f2:2a:22:96:2b:64:e5:9d:d1:61:25:04:c3:91:
         e3:45:7d:c5:ae:64:90:8a:09:f5:a0:89:6d:af:94:1f:2b:f8:
         94:2a:5e:2e:09:df:f3:53:78:39:37:a8:57:33:a4:7a:23:33:
         37:35:eb:b6:4b:c0:ef:10:7b:ab:03:f8:af:ea:ee:df:76:42:
         66:f2:90:a1:5e:50:16:31:2e:49:d1:ec:d5:b6:05:11:7c:e1:
         53:65:02:99:27:1e:97:e2:03:a6:13:33:dc:8c:57:1d:af:f9:
         d2:22:dd:4f:d2:50:59:c0:49:19:de:73:2c:cc:e4:3b:c7:e3:
         fc:30:8c:aa:4d:98:a4:ae:02:86:d9:09:95:78:5d:a8:68:8e:
         7d:10:c2:34:ed:97:c3:6f:ca:4e:c7:9a:a5:e4:7b:f2:ea:bb:
         48:d4:c3:aa:73:ca:d2:6c:64:d6:df:1c:12:25:77:f0:6a:8c:
         75:95:ff:ae:ec:d2:9e:81:13:16:3d:03:0c:83:65:0d:6a:b3:
         16:73:89:41:17:27:1c:36:c7:64:13:3f:d2:34:3c:6f:fb:cf:
         fa:14:56:7c:c4:95:24:71:d5:2e:01:17:18:71:15:eb:75:ba:
         9b:6c:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:50:06 2024 by rpki-client on console-ams.rpki-client.org