Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          dqwLIAWI8XzpoOl6VXjU9cs9K+Hw1WWxjh8lbYL2vhM=
Subject key identifier:   A3:84:3C:1C:44:B1:3B:CE:2C:64:31:BB:1B:37:F7:B5:76:C1:E4:15
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       23949F0DE6DF689DA480C7C0082FFCB639F78ED9
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa
Signing time:             Sat 25 Jul 2026 03:43:35 +0000
ROA not before:           Sat 25 Jul 2026 03:38:35 +0000
ROA not after:            Sat 24 Jul 2027 03:43:35 +0000
asID:                     152179
IP address blocks:        89.116.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:94:9f:0d:e6:df:68:9d:a4:80:c7:c0:08:2f:fc:b6:39:f7:8e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 25 03:38:35 2026 GMT
            Not After : Jul 24 03:43:35 2027 GMT
        Subject: CN=A3843C1C44B13BCE2C6431BB1B37F7B576C1E415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:14:56:3b:a9:df:a8:c7:78:c0:e4:fb:26:
                    29:c6:0a:83:57:26:25:2a:c9:af:87:dc:7d:e2:80:
                    da:be:8b:48:13:90:0d:52:65:01:97:4c:46:54:99:
                    95:d0:8f:c7:ff:4d:7c:a2:4e:fc:5a:7d:a6:d1:a3:
                    90:57:e1:ec:a7:4b:c1:50:32:02:5c:ca:ec:a7:c6:
                    95:a0:35:0e:d5:ee:7f:96:58:d5:cb:9c:35:e2:7f:
                    d3:52:96:20:ca:a5:90:a0:ee:c4:1f:61:bf:69:e2:
                    31:24:ed:ab:f5:a8:c5:a1:93:bf:fa:fd:c1:4f:db:
                    93:e8:bd:02:e3:a4:75:1c:68:c8:68:3d:ae:f9:82:
                    75:f2:d7:d2:3a:05:3b:70:73:2f:62:21:60:b4:6c:
                    87:09:a9:cc:27:b6:5a:1c:ca:e0:e4:60:0a:74:51:
                    55:c8:81:85:36:ec:5f:1d:4d:41:51:6a:ec:e2:0e:
                    3d:89:aa:1b:74:c8:07:e2:d1:a2:99:cc:6f:e9:96:
                    3b:71:40:6e:79:42:58:6e:c4:c6:1c:f3:bd:8f:e5:
                    f8:5f:07:39:03:5d:5c:95:35:21:9b:cc:84:8b:9b:
                    f7:c6:0a:dc:89:71:aa:74:e3:01:56:1b:1f:65:fa:
                    05:0d:73:24:1d:54:a4:19:f6:97:c1:a4:fb:a7:a1:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:84:3C:1C:44:B1:3B:CE:2C:64:31:BB:1B:37:F7:B5:76:C1:E4:15
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:93:43:93:48:ad:9d:69:01:84:c1:bd:e6:70:40:43:fc:
         f7:8c:d0:86:6e:3b:e5:60:7b:cf:a1:ca:aa:34:4a:c9:81:9d:
         03:85:92:b6:4e:17:d1:db:e0:47:60:7e:87:ff:84:a6:64:eb:
         ac:1b:a5:be:66:d4:f9:3d:a7:fd:85:61:ef:32:c6:f2:04:5c:
         56:1b:b0:66:49:ad:cf:19:16:f0:a8:e6:ac:ed:6b:02:92:6b:
         d9:1a:7c:ab:60:bb:86:de:9f:37:e8:bb:be:d4:9e:83:9e:ef:
         fe:3f:00:c9:7b:36:45:2f:4f:ca:57:7b:e7:17:00:c3:c0:8d:
         3a:33:4f:75:94:be:ad:fe:ef:eb:8b:f7:15:a0:c7:53:5a:32:
         03:1c:50:39:eb:f0:45:f8:22:28:f8:89:56:f2:47:2d:9d:c2:
         30:c7:df:00:e5:5b:0c:42:bb:aa:78:7f:48:ee:3c:60:3d:b7:
         90:62:fa:c3:e4:24:a1:31:31:7f:76:82:4a:40:4c:3b:b8:5c:
         66:c9:eb:af:f4:2c:dd:9e:67:84:ff:a2:98:d6:c0:95:29:02:
         f4:86:4a:eb:2b:f4:bd:ef:b1:b5:4f:80:a9:7b:26:9b:f3:e3:
         28:df:18:9e:5e:8a:06:f1:f4:db:8b:15:e0:a7:72:0d:53:05:
         f6:14:4d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:59 2026 by rpki-client