Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          qC6yMKQbE8Udhk6qx96hyU/i2+UgOdfFlJrvF3V4MzQ=
Subject key identifier:   6B:84:CB:69:3B:48:ED:CB:C4:F8:A7:EB:E9:C8:8B:5E:61:30:AB:EA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3E15B237793B2FBB49C0202E200DB8C2B06314B5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
Signing time:             Mon 08 Jun 2026 01:47:30 +0000
ROA not before:           Mon 08 Jun 2026 01:42:30 +0000
ROA not after:            Mon 07 Jun 2027 01:47:30 +0000
asID:                     142036
IP address blocks:        89.117.1.0/24 maxlen: 24
                          89.117.2.0/24 maxlen: 24
                          89.117.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:15:b2:37:79:3b:2f:bb:49:c0:20:2e:20:0d:b8:c2:b0:63:14:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun  8 01:42:30 2026 GMT
            Not After : Jun  7 01:47:30 2027 GMT
        Subject: CN=6B84CB693B48EDCBC4F8A7EBE9C88B5E6130ABEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:3c:b7:2a:40:d3:a1:7e:fb:fb:95:cd:3d:
                    74:3f:21:f0:ac:a7:69:b0:9c:41:c6:5c:b5:52:02:
                    28:60:a3:30:99:8e:ec:53:dd:f4:2e:8e:9b:07:b6:
                    7b:33:b2:52:eb:4f:6b:d5:8f:02:61:89:03:dd:f3:
                    e2:d2:21:1f:56:65:3c:c2:70:40:43:c8:04:93:22:
                    ea:77:5c:ed:af:ad:6e:1a:13:3e:f3:aa:f9:94:73:
                    1f:39:ef:8f:41:11:89:ce:c3:3f:ea:90:23:26:d7:
                    44:04:75:5a:b7:e5:37:f9:d1:5f:c8:5e:94:01:ec:
                    40:45:0d:ec:b4:47:15:26:30:4c:36:d4:dc:7a:53:
                    ae:38:16:ac:03:7d:a3:f8:b1:ea:c5:25:ae:c4:f5:
                    05:4a:96:c9:99:ea:27:f9:18:fc:7b:7d:28:77:91:
                    7a:d9:4f:0f:34:90:55:c9:2d:92:83:e1:bf:97:52:
                    4f:4c:a2:b5:13:52:ad:b2:28:03:46:d7:33:3f:8e:
                    c9:a1:f8:29:e7:5b:8c:34:7c:a1:de:43:05:f9:cb:
                    81:80:d3:70:b6:bc:2a:b9:20:54:ae:46:9c:16:c2:
                    96:58:b3:fd:85:51:4c:84:b4:54:9e:2d:90:4a:b3:
                    c2:f6:5e:e8:ca:b1:4b:f8:ee:40:b6:a2:f8:db:d1:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:CB:69:3B:48:ED:CB:C4:F8:A7:EB:E9:C8:8B:5E:61:30:AB:EA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.1.0-89.117.3.255

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:94:fe:ba:df:dd:0c:f2:5f:92:cc:99:84:20:14:7e:3c:
         94:75:b6:80:9c:a3:8d:1f:1d:a8:82:ad:e4:ec:d6:b7:0a:f0:
         95:0c:57:14:a4:33:2a:aa:72:1b:28:26:e6:58:fe:b0:54:fd:
         5e:b4:e0:24:20:41:63:d8:61:4c:bf:8e:8f:e0:3c:91:03:b6:
         21:f4:2f:34:bf:62:80:89:bd:f5:4f:5c:cf:83:56:b2:b1:f2:
         aa:c9:ee:ef:c0:c9:74:46:32:52:e5:e6:90:11:42:cb:6c:57:
         0f:58:2a:c6:75:ec:b4:fb:e4:6e:d9:e1:ca:c7:b3:48:1c:68:
         29:44:ee:c4:15:32:6f:d4:2e:85:0e:98:f6:4b:5b:f9:11:c9:
         c3:7f:d2:e6:00:28:26:89:59:96:dd:9f:a4:c4:22:99:f5:d6:
         d7:f2:e9:f0:62:60:6f:81:7b:95:d4:3a:d2:ba:e5:95:5e:e7:
         95:ee:c9:65:a4:ee:f1:39:86:28:03:bd:a0:d7:17:65:35:ee:
         65:a1:09:43:81:1c:05:1e:c9:95:4e:aa:60:d9:fb:5a:71:31:
         ae:a7:b3:11:f0:04:84:60:42:ce:76:1f:d5:6b:1a:1a:23:86:
         90:86:12:d1:28:16:dc:ea:58:1c:66:f6:a5:7a:1c:79:c0:25:
         47:1c:72:d1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUPhWyN3k7L7tJwCAuIA24wrBjFLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA2MDgwMTQyMzBaFw0yNzA2MDcwMTQ3MzBaMDMxMTAvBgNV
BAMTKDZCODRDQjY5M0I0OEVEQ0JDNEY4QTdFQkU5Qzg4QjVFNjEzMEFCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQfjy3KkDToX77+5XNPXQ/IfCs
p2mwnEHGXLVSAihgozCZjuxT3fQujpsHtnszslLrT2vVjwJhiQPd8+LSIR9WZTzC
cEBDyASTIup3XO2vrW4aEz7zqvmUcx85749BEYnOwz/qkCMm10QEdVq35Tf50V/I
XpQB7EBFDey0RxUmMEw21Nx6U644FqwDfaP4serFJa7E9QVKlsmZ6if5GPx7fSh3
kXrZTw80kFXJLZKD4b+XUk9MorUTUq2yKANG1zM/jsmh+CnnW4w0fKHeQwX5y4GA
03C2vCq5IFSuRpwWwpZYs/2FUUyEtFSeLZBKs8L2XujKsUv47kC2ovjb0ff5AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUa4TLaTtI7cvE+Kfr6ciLXmEwq+owHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE0MjAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAWXUBAwQCWXUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAkHpT+ut/dDPJfksyZhCAUfjyUdbaAnKONHx2ogq3k
7Na3CvCVDFcUpDMqqnIbKCbmWP6wVP1etOAkIEFj2GFMv46P4DyRA7Yh9C80v2KA
ib31T1zPg1aysfKqye7vwMl0RjJS5eaQEULLbFcPWCrGdey0++Ru2eHKx7NIHGgp
RO7EFTJv1C6FDpj2S1v5EcnDf9LmACgmiVmW3Z+kxCKZ9dbX8unwYmBvgXuV1DrS
uuWVXueV7sllpO7xOYYoA72g1xdlNe5loQlDgRwFHsmVTqpg2ftacTGup7MR8ASE
YELOdh/VaxoaI4aQhhLRKBbc6lgcZvalehx5wCVHHHLR
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:27 2026 by rpki-client