Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          Z6SFw+0sF2v81ZcqtwXjC1PLqmRHBDFO4/H7zl4YiRQ=
Subject key identifier:   FD:A9:03:C4:EB:38:98:E3:B1:35:1C:29:B1:0C:37:59:7A:F5:89:6C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       113622B90E06D7A46D122EB04746F2B97EC9DC9E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa
Signing time:             Fri 13 Jun 2025 04:54:09 +0000
ROA not before:           Fri 13 Jun 2025 04:49:09 +0000
ROA not after:            Fri 12 Jun 2026 04:54:09 +0000
asID:                     23470
IP address blocks:        89.116.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:36:22:b9:0e:06:d7:a4:6d:12:2e:b0:47:46:f2:b9:7e:c9:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jun 13 04:49:09 2025 GMT
            Not After : Jun 12 04:54:09 2026 GMT
        Subject: CN=FDA903C4EB3898E3B1351C29B10C37597AF5896C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ba:16:ec:e8:b8:5c:68:58:a4:bd:9e:33:0d:
                    43:ac:cd:79:76:15:f8:ea:1f:37:30:81:25:48:02:
                    7f:e5:66:47:fb:44:36:5c:be:90:4d:94:c8:e7:2c:
                    a6:12:64:c7:7c:11:9b:3c:27:99:80:6c:db:ac:10:
                    db:6e:39:f8:17:cf:a2:05:58:c0:20:48:08:e1:8e:
                    31:95:18:31:fc:b3:b3:bd:18:00:65:4f:09:c8:55:
                    81:b4:7d:60:24:10:e5:3c:3c:73:85:4a:1e:f4:0f:
                    b1:fd:d0:93:2a:fc:16:80:05:51:81:a9:55:18:34:
                    6a:3f:0b:a7:07:52:3d:3c:0e:e3:38:d5:4c:54:d6:
                    64:ea:76:15:76:54:55:84:2d:f8:0c:31:63:ea:81:
                    94:cb:a3:10:b6:e2:2b:86:29:23:e0:cf:09:0f:bd:
                    06:be:bf:16:23:c5:f0:a9:e4:63:f1:0e:28:a9:79:
                    40:e1:5d:9a:7d:96:f8:26:38:a6:34:17:fc:fc:f2:
                    2f:2c:3b:36:ea:64:83:d9:b4:83:99:36:e5:4c:03:
                    0a:3a:d0:22:24:91:0f:9f:bf:7c:07:f9:d4:5a:dc:
                    f2:5c:b5:b4:d1:99:f7:6d:46:9a:9a:93:3c:d4:93:
                    92:1d:e4:e7:8f:2c:39:a1:0d:e1:18:74:97:d5:81:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A9:03:C4:EB:38:98:E3:B1:35:1C:29:B1:0C:37:59:7A:F5:89:6C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:07:51:3a:ea:e6:c3:d2:87:f7:17:8a:c7:bf:75:dc:fc:17:
         cb:92:87:6e:de:6b:02:7d:54:da:98:47:0b:fe:24:50:8e:5e:
         70:64:0a:c6:2a:c8:8a:8e:91:2c:e2:d4:62:dd:05:32:de:4b:
         cd:2e:c9:c5:9f:0d:bb:04:e0:69:39:70:27:79:47:f6:f3:11:
         69:c3:e1:24:64:16:5e:de:7e:66:ca:ad:ed:9a:58:e9:13:4b:
         4e:e7:99:7b:15:71:e1:ef:44:62:bc:dd:1e:59:c9:7c:4d:85:
         71:c2:37:2f:87:57:bb:41:d7:da:79:f9:bc:fc:d7:70:c3:1d:
         1b:e0:b7:e2:f3:78:86:fb:18:99:df:90:ce:a2:73:ac:7e:20:
         b0:85:2c:20:c5:ff:16:e0:62:b0:48:28:23:b0:15:36:5d:38:
         d9:5f:f1:46:0f:1d:4e:1e:80:aa:d9:8e:0f:79:a3:6c:0b:ef:
         69:71:c0:46:22:93:f6:ad:4e:85:3a:31:b5:60:88:0d:ec:4d:
         dc:48:2d:cd:06:98:7e:33:b5:a7:33:6c:f4:bf:b4:be:33:f5:
         08:aa:3e:98:e7:61:ff:1e:97:c3:f5:8a:9a:6b:fe:68:3a:12:
         ae:1f:31:35:6c:50:4e:82:ea:fe:27:5f:44:ea:90:01:cf:04:
         e0:80:e7:4b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUETYiuQ4G16RtEi6wR0byuX7J3J4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTA2MTMwNDQ5MDlaFw0yNjA2MTIwNDU0MDlaMDMxMTAvBgNV
BAMTKEZEQTkwM0M0RUIzODk4RTNCMTM1MUMyOUIxMEMzNzU5N0FGNTg5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyuhbs6LhcaFikvZ4zDUOszXl2
FfjqHzcwgSVIAn/lZkf7RDZcvpBNlMjnLKYSZMd8EZs8J5mAbNusENtuOfgXz6IF
WMAgSAjhjjGVGDH8s7O9GABlTwnIVYG0fWAkEOU8PHOFSh70D7H90JMq/BaABVGB
qVUYNGo/C6cHUj08DuM41UxU1mTqdhV2VFWELfgMMWPqgZTLoxC24iuGKSPgzwkP
vQa+vxYjxfCp5GPxDiipeUDhXZp9lvgmOKY0F/z88i8sOzbqZIPZtIOZNuVMAwo6
0CIkkQ+fv3wH+dRa3PJctbTRmfdtRpqakzzUk5Id5OePLDmhDeEYdJfVgcYpAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU/akDxOs4mOOxNRwpsQw3WXr1iWwwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSkMA0GCSqGSIb3DQEB
CwUAA4IBAQAZB1E66ubD0of3F4rHv3Xc/BfLkodu3msCfVTamEcL/iRQjl5wZArG
KsiKjpEs4tRi3QUy3kvNLsnFnw27BOBpOXAneUf28xFpw+EkZBZe3n5myq3tmljp
E0tO55l7FXHh70RivN0eWcl8TYVxwjcvh1e7Qdfaefm8/Ndwwx0b4Lfi83iG+xiZ
35DOonOsfiCwhSwgxf8W4GKwSCgjsBU2XTjZX/FGDx1OHoCq2Y4PeaNsC+9pccBG
IpP2rU6FOjG1YIgN7E3cSC3NBph+M7WnM2z0v7S+M/UIqj6Y52H/HpfD9Yqaa/5o
OhKuHzE1bFBOgur+J19E6pABzwTggOdL
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:56 2025 by rpki-client