Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa
File:                     37372e37352e3139392e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          SOdS7NZFwhdYeDAATZisppvCSOvg6r8oXClcoW6dEfU=
Subject key identifier:   4C:B4:1B:2B:B1:78:37:92:01:52:9B:CA:E9:FF:65:2B:B7:C2:DE:26
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5A2D58AF2D52FF423932B40750F1A123539BB86B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa
Signing time:             Tue 07 Nov 2023 11:36:10 +0000
ROA not before:           Tue 07 Nov 2023 11:31:10 +0000
ROA not after:            Tue 05 Nov 2024 11:36:10 +0000
asID:                     209242
IP address blocks:        77.75.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2d:58:af:2d:52:ff:42:39:32:b4:07:50:f1:a1:23:53:9b:b8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  7 11:31:10 2023 GMT
            Not After : Nov  5 11:36:10 2024 GMT
        Subject: CN=4CB41B2BB178379201529BCAE9FF652BB7C2DE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:d0:51:52:62:7a:ec:f3:12:01:38:dc:8c:
                    2b:09:35:e9:14:3f:51:32:ec:eb:0f:53:a9:57:d5:
                    71:95:75:58:fc:93:8d:e3:ea:71:b5:6b:d0:0f:8a:
                    f7:26:1f:7c:52:13:08:60:41:94:f4:fa:d0:c7:49:
                    33:0c:23:f7:7a:9e:0d:94:ab:1d:e8:5b:57:2e:95:
                    3b:0a:70:24:71:1c:67:71:e8:70:c6:03:30:f1:ae:
                    21:1d:d0:75:80:ea:b2:73:80:24:c7:f4:5d:1d:70:
                    d3:1d:45:2e:a0:d9:53:53:13:34:97:48:e3:96:6c:
                    1f:8a:c6:24:01:09:6d:c2:3a:a6:0a:8f:a2:8a:e9:
                    40:92:83:f3:38:bb:fe:a0:ca:59:5d:19:cb:c4:a7:
                    2d:f8:22:d0:99:6a:b9:24:1d:f7:96:70:b0:94:d7:
                    ad:02:17:76:ae:9c:a9:72:b7:8a:a9:36:87:1a:ef:
                    9f:fc:3c:55:16:c7:67:29:d5:b3:ef:88:c4:ca:5b:
                    f1:17:20:a1:3a:79:49:53:30:27:c7:b4:b9:cb:90:
                    88:00:4f:40:6f:88:35:db:ea:b5:36:96:e8:8c:f9:
                    40:78:ce:77:1a:9b:86:89:69:94:2d:b7:c0:33:e9:
                    ae:e5:20:23:b1:ee:a4:c4:f0:3c:3f:08:e2:98:be:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B4:1B:2B:B1:78:37:92:01:52:9B:CA:E9:FF:65:2B:B7:C2:DE:26
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139392e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:33:5a:82:c5:f0:26:c2:a3:73:1e:aa:85:e7:75:97:e7:d2:
         66:69:09:63:3b:07:b8:d2:9f:5e:1c:99:66:6d:a3:2d:0f:89:
         f5:e0:bb:44:07:cc:4f:fc:ae:2a:9a:39:7c:9b:16:72:89:24:
         a3:ca:86:ec:47:32:6a:3b:a9:86:25:fe:6d:cf:f3:c3:4b:55:
         c2:32:99:41:60:03:9c:9a:3d:4a:2f:e4:6a:32:23:b8:8e:a1:
         62:34:46:23:aa:fd:ed:07:44:a6:dd:27:6c:fb:4c:be:85:88:
         21:44:ee:d3:1a:a4:cd:02:84:4d:26:b7:76:50:95:06:5d:77:
         d1:b3:0a:7a:19:21:0a:b3:bd:64:8b:65:a5:05:ed:8a:87:bb:
         f1:3c:55:67:23:fa:93:02:9b:98:8f:85:2e:17:7d:65:f5:c6:
         25:46:22:8b:de:77:44:6d:e9:2a:a5:e3:e6:f0:8b:f6:4b:ac:
         36:23:bd:7c:13:83:76:ed:03:4b:b6:93:94:08:a7:18:a2:55:
         4b:e6:f4:4e:e5:63:3d:4b:94:92:69:69:c0:c7:48:24:7d:63:
         10:24:c7:97:38:60:62:dc:35:da:59:16:9c:d4:61:73:c6:b5:
         46:ca:22:e3:2c:7d:d9:ab:4d:cd:6e:60:58:bc:57:88:eb:c3:
         d2:ae:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:55:32 2024 by rpki-client on console-fra.rpki-client.org