Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa
File:                     37372e37352e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FVC8M0uvYMR/U4s0ASThjxgFFSJK7ZYUfXQnjxoNItg=
Subject key identifier:   C4:54:76:07:34:4E:34:9B:B2:10:F9:7E:FC:AF:FC:20:90:15:57:83
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       16356B96011E491F26FAF9731AF6951C221A6798
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 08 Oct 2024 11:43:22 +0000
ROA not before:           Tue 08 Oct 2024 11:38:22 +0000
ROA not after:            Tue 07 Oct 2025 11:43:22 +0000
asID:                     61317
IP address blocks:        77.75.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 01:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:6b:96:01:1e:49:1f:26:fa:f9:73:1a:f6:95:1c:22:1a:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct  8 11:38:22 2024 GMT
            Not After : Oct  7 11:43:22 2025 GMT
        Subject: CN=C4547607344E349BB210F97EFCAFFC2090155783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:6f:77:b4:b2:b2:f8:7d:66:d2:ba:6a:11:
                    52:b1:ce:a4:11:b5:ef:82:28:26:e6:fb:ac:36:3e:
                    15:cf:01:a0:c5:96:3d:d6:0a:35:86:f4:a1:f2:28:
                    68:31:d4:2a:ac:d4:b8:ac:b2:ba:a3:e5:34:fc:f9:
                    e7:9e:ec:86:d6:3a:03:2e:24:b1:a8:9b:65:0f:4c:
                    86:d8:f8:59:cc:46:e5:a0:cd:ab:48:ad:20:e9:46:
                    7f:0b:f6:f9:fa:c0:bb:69:18:82:ad:e0:c1:43:fb:
                    72:97:dc:ac:06:90:8e:87:9f:f0:e3:9e:58:be:02:
                    cb:25:1c:88:bb:c1:ab:f6:4f:26:c0:df:eb:66:92:
                    ec:9c:62:f3:2b:17:a0:97:0d:e9:b7:39:de:65:72:
                    39:5d:60:37:20:b0:ce:40:e9:4d:50:47:05:32:ac:
                    84:ab:fd:34:64:13:56:e3:52:cb:e7:04:64:8b:cb:
                    9a:5a:2d:29:91:d6:e2:00:d2:96:7d:2e:c1:65:73:
                    50:e8:8f:35:06:1a:22:db:e2:a0:13:fe:40:de:f4:
                    6b:2d:3c:58:61:3d:11:e4:b7:2f:a7:7e:cd:f4:34:
                    ef:1d:4c:dd:0a:3f:89:99:2d:39:ab:7a:31:c1:f5:
                    12:d4:87:d5:86:b1:fd:05:ee:75:54:f1:fe:17:fd:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:76:07:34:4E:34:9B:B2:10:F9:7E:FC:AF:FC:20:90:15:57:83
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:82:9d:05:6f:c0:17:f1:27:d1:c8:5b:06:9a:fd:d6:91:
         10:f1:91:8a:ac:c2:1f:89:b0:3d:81:f2:c8:ff:51:bb:b5:8e:
         9b:18:ed:5e:52:7b:4a:30:f2:31:83:fe:d1:86:1c:96:db:10:
         f4:4a:6c:65:8b:8f:6f:cc:99:3a:e7:76:8a:da:27:ee:dd:0d:
         20:64:16:a8:39:1d:31:4f:63:5a:eb:9e:3d:5f:1e:5b:a6:e9:
         16:f8:ac:4c:09:41:cf:9d:52:07:63:2a:04:fa:0b:7c:27:3a:
         3c:f7:27:f8:36:2e:8d:c5:ad:3e:fd:38:6c:69:c2:a4:67:45:
         cb:9c:53:85:3a:81:49:0e:68:4d:db:60:c6:69:f4:f3:fc:1d:
         40:7c:9f:67:92:5d:54:c8:6d:e8:95:4d:6c:ae:7c:0e:fe:cf:
         1b:03:7d:48:77:cb:a1:3c:8f:02:ce:3b:df:b6:37:8e:de:f7:
         f1:39:93:81:fe:ef:30:4c:b8:2b:15:96:c1:04:0d:23:f0:c6:
         17:59:5f:52:f4:b8:09:8e:de:46:da:de:5e:02:64:7f:a1:93:
         3d:ca:0a:5c:88:2f:f9:17:8b:a9:de:99:2f:42:74:55:5a:47:
         f3:ad:3a:83:24:a5:ee:57:7e:04:96:07:26:17:7c:68:ad:89:
         bf:06:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org