Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa
File:                     AS211192.roa (raw, json)
Hash identifier:          9iemgEdWbOHRVBlyMvA2xvhl2YkKy+rPY/TttEATq0M=
Subject key identifier:   F6:4E:FB:1D:29:96:24:68:A0:BA:49:A9:48:F5:52:03:93:43:00:06
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0673353468099DD7D14AB26BC0A1D9324E74F006
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa
Signing time:             Wed 28 Jan 2026 09:55:36 +0000
ROA not before:           Wed 28 Jan 2026 09:50:36 +0000
ROA not after:            Wed 27 Jan 2027 09:55:36 +0000
asID:                     211192
IP address blocks:        89.116.103.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 10:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:73:35:34:68:09:9d:d7:d1:4a:b2:6b:c0:a1:d9:32:4e:74:f0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 28 09:50:36 2026 GMT
            Not After : Jan 27 09:55:36 2027 GMT
        Subject: CN=F64EFB1D29962468A0BA49A948F5520393430006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:64:c9:57:14:01:70:7e:c1:11:b1:c1:4f:
                    92:de:01:30:95:44:3f:25:95:3d:7d:2a:02:94:b0:
                    e7:92:4e:1e:5c:3b:42:4b:ab:de:3a:39:db:38:a5:
                    ed:14:ac:9f:39:92:92:53:f4:93:ee:a3:34:d4:c7:
                    73:08:0c:a3:61:0a:2c:47:ba:36:06:41:e8:40:3c:
                    47:44:c3:75:23:06:04:72:1a:6d:1c:08:85:cd:0d:
                    0a:e1:f9:ab:de:eb:37:70:c9:ea:da:2e:e2:ce:f3:
                    78:e3:45:85:d9:c7:8e:da:a9:c7:52:bd:7a:57:d3:
                    b2:ce:c3:63:95:51:21:e0:fd:0e:92:59:3f:6b:1f:
                    25:56:7b:b5:85:18:2a:f8:82:1c:21:ba:c0:51:c4:
                    b0:49:ea:af:4a:44:3d:34:1a:27:55:e6:25:ec:7e:
                    5e:9d:59:ef:b8:e5:c9:72:45:15:39:07:bb:04:85:
                    ef:c4:13:53:3c:c9:b4:d0:6e:32:0b:3b:65:41:d9:
                    81:35:4a:66:fc:10:b0:13:16:c3:68:bf:95:25:a5:
                    08:a5:ae:c8:e1:c1:8c:0c:36:1a:a2:f8:ac:63:77:
                    75:3a:36:1d:3a:65:0b:3d:4d:2d:4d:60:73:75:82:
                    04:4d:f2:47:29:2d:a9:b1:7f:8a:fc:68:7f:6d:70:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4E:FB:1D:29:96:24:68:A0:BA:49:A9:48:F5:52:03:93:43:00:06
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211192.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.103.0/24
                  89.116.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:34:12:f1:2a:8b:00:bf:8b:55:6c:e4:02:f6:40:07:7e:5d:
         ad:33:23:7f:9f:5b:bd:86:46:35:e4:d2:ab:db:ce:7b:dd:89:
         50:69:48:b6:bd:d9:eb:20:67:f6:79:a9:30:d3:e8:55:f1:4b:
         ec:c8:e0:5d:3d:a6:3b:22:69:9d:4c:4d:02:1d:66:ae:73:de:
         b9:d6:f9:d8:fe:17:51:d9:48:5d:d4:46:09:29:f9:86:ae:22:
         57:91:19:31:96:d6:22:25:10:b8:9c:17:2e:1f:27:ed:6b:b5:
         95:0f:10:47:75:35:11:5b:cf:2b:66:39:2e:1b:f8:02:33:71:
         20:2e:46:d9:9a:6d:3d:98:b2:99:47:17:c4:7b:8f:13:2b:b3:
         08:ac:59:5f:ca:7b:75:db:61:61:d9:bb:8a:1a:49:0b:95:2f:
         ab:59:09:52:3b:aa:c1:f1:4f:9f:a2:69:93:df:9a:16:48:12:
         2e:bc:61:83:50:fd:34:8d:08:2d:18:34:a1:a1:85:b3:b4:00:
         25:3e:ee:1f:a1:e5:5c:2c:20:e6:c5:c0:c7:f1:70:db:7a:d5:
         54:54:0e:d5:da:ea:0b:61:4d:bd:cb:1b:5e:4d:24:73:7c:e2:
         fb:45:aa:46:65:3a:1b:c5:9b:ba:46:45:1a:cd:84:73:04:65:
         fe:71:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:23:20 2026 by rpki-client