Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa
File:                     AS393942.roa (raw, json)
Hash identifier:          jLa2Bdr/qSVlmQfdRJf1vmL7Q806zEYQfWgfR3olyRI=
Subject key identifier:   4E:71:0B:43:45:2E:F9:75:A6:11:36:76:6B:B1:27:FD:C5:0B:09:AA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5872C471487059B18F2D7C6930F148E120A857F0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa
Signing time:             Fri 11 Apr 2025 10:06:11 +0000
ROA not before:           Fri 11 Apr 2025 10:01:11 +0000
ROA not after:            Fri 10 Apr 2026 10:06:11 +0000
asID:                     393942
IP address blocks:        86.38.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:72:c4:71:48:70:59:b1:8f:2d:7c:69:30:f1:48:e1:20:a8:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 11 10:01:11 2025 GMT
            Not After : Apr 10 10:06:11 2026 GMT
        Subject: CN=4E710B43452EF975A61136766BB127FDC50B09AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:4b:fa:8f:ed:72:b7:f5:89:17:0a:87:eb:
                    cb:c9:c7:5b:7f:7c:cc:84:7a:b3:06:03:a6:27:18:
                    1d:1a:f8:cf:33:62:2b:f7:fd:89:2c:ed:1b:23:04:
                    00:00:28:d0:fe:27:62:27:5c:28:fa:f5:f7:68:7a:
                    73:0b:4e:33:56:aa:c9:d5:9f:7f:24:d0:cb:31:45:
                    00:5b:21:3f:2e:4a:b3:b9:44:f2:2e:b4:86:e9:11:
                    01:80:32:70:03:54:85:fc:98:c7:63:0f:ed:af:ba:
                    54:da:92:49:40:9f:0e:23:46:fe:4e:70:de:51:84:
                    ed:d4:01:4a:8a:12:3c:f0:8c:54:43:99:e6:4b:9e:
                    d0:8f:86:9e:be:66:5b:ef:23:d8:bb:eb:c9:7f:fa:
                    4c:27:25:d0:e1:19:87:29:86:e5:73:b7:cd:35:70:
                    a9:b3:a7:67:95:de:3e:ba:2b:4d:24:89:6a:71:cb:
                    b5:11:36:70:b0:2c:10:13:f2:c3:10:56:22:ec:4a:
                    39:be:f5:5e:dd:7c:7b:e0:79:dc:e3:88:12:c8:ea:
                    8c:d3:9a:a1:e9:c5:c1:6b:2f:39:7a:ba:2c:67:da:
                    f5:13:09:1f:22:9f:2b:8a:5c:bf:ff:a6:08:ce:a8:
                    2c:41:a5:d1:ac:cc:2d:7e:10:fe:81:02:35:64:fa:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:0B:43:45:2E:F9:75:A6:11:36:76:6B:B1:27:FD:C5:0B:09:AA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:31:d1:3c:b5:96:89:4c:cb:fe:9e:ee:45:f2:9c:54:a7:
         d6:15:bd:3e:1e:c7:68:8a:40:0b:57:ce:ee:6b:9f:62:85:10:
         04:3a:08:1d:b6:e0:72:78:53:1a:aa:ae:13:cb:29:7e:e6:4e:
         d6:8f:96:31:01:ee:26:69:27:6a:87:81:26:d7:34:83:48:79:
         4a:49:c3:cf:3e:ed:35:ae:c4:36:ba:47:b3:af:b7:2a:53:1c:
         3e:95:d1:a1:ca:af:c8:b0:ed:b8:1e:f1:9c:66:14:c1:b2:f3:
         43:21:ea:43:2a:8c:1d:a6:66:02:6d:42:01:cc:74:99:ec:20:
         aa:d5:da:1c:5d:12:55:2b:45:9a:b8:8f:68:5f:a8:6c:04:34:
         32:fb:cb:a4:4d:3e:22:42:fb:5c:1f:8b:65:59:8b:07:6e:83:
         a6:0b:b1:a0:a2:fc:79:5f:12:25:15:56:cd:af:67:5e:47:4b:
         eb:9e:c0:af:6b:0c:a4:9f:89:64:8b:28:b7:93:65:31:03:29:
         2a:15:39:fd:f6:fa:bb:f1:7f:34:ce:56:d3:37:53:d7:da:54:
         90:7d:03:dc:4b:55:3c:b1:dd:51:ea:3f:f1:80:75:f9:10:75:
         19:bb:cd:6f:cb:e1:4e:bf:90:c8:8d:b8:21:f9:17:e2:00:53:
         69:9e:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:23 2025 by rpki-client