Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa
File:                     AS25369.roa (raw, json)
Hash identifier:          28S+Pvm4Cg+57MqVwlmoU+pgil8xETc8IOcukm23hOY=
Subject key identifier:   58:9A:A5:39:8E:B3:2C:FA:1F:CF:FD:6A:FA:82:B5:93:8B:DB:25:CB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       16A278BA357ED1A7927657669CC7FFF75BB36A29
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa
Signing time:             Thu 24 Apr 2025 00:54:04 +0000
ROA not before:           Thu 24 Apr 2025 00:49:04 +0000
ROA not after:            Thu 23 Apr 2026 00:54:04 +0000
asID:                     25369
IP address blocks:        89.116.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a2:78:ba:35:7e:d1:a7:92:76:57:66:9c:c7:ff:f7:5b:b3:6a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 24 00:49:04 2025 GMT
            Not After : Apr 23 00:54:04 2026 GMT
        Subject: CN=589AA5398EB32CFA1FCFFD6AFA82B5938BDB25CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:c2:a8:eb:34:62:8f:ca:27:43:fa:09:e0:
                    f9:da:04:7b:38:70:46:b3:50:56:34:46:aa:93:ea:
                    0c:68:c8:da:ef:4d:4b:bf:74:ac:d7:66:7f:d0:1f:
                    f9:e0:62:94:01:cf:33:32:15:4e:4e:a8:6e:a5:bd:
                    69:4e:a9:a5:18:31:3d:e1:4b:92:05:65:6b:c9:39:
                    eb:3a:2c:2e:9e:dc:e8:2d:a4:e3:ab:4e:9a:07:d7:
                    3b:73:a6:23:fe:8f:e6:b1:18:a0:e1:49:04:5f:3f:
                    34:2a:79:21:66:c0:c4:a6:4b:8d:cf:39:76:a3:a1:
                    a3:54:51:7c:9a:ed:f4:39:2c:79:a8:0d:0e:12:6d:
                    3d:94:32:36:c0:e8:7b:31:24:ce:41:48:d8:0f:4f:
                    28:31:9b:44:c9:86:6c:4b:bd:1f:ca:95:34:f9:ed:
                    1f:e8:bb:4a:d6:22:b9:c6:63:61:76:9e:ba:cb:bc:
                    dc:4a:77:54:84:e8:eb:6c:84:fa:8f:f6:97:f2:3c:
                    f4:ee:45:44:d8:f2:42:8f:93:e9:28:5f:6b:6a:2b:
                    8a:6b:12:6f:ad:e9:9b:91:44:fc:73:66:0b:e7:c2:
                    83:27:c2:2e:09:b2:16:b0:30:91:55:08:51:c5:21:
                    40:9b:8b:4f:a6:35:e0:5d:2c:e4:82:d9:a9:16:20:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:A5:39:8E:B3:2C:FA:1F:CF:FD:6A:FA:82:B5:93:8B:DB:25:CB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:72:18:6e:79:8c:cb:db:9c:42:f5:cf:d2:5d:71:a6:61:f7:
         71:d9:b2:ca:fa:05:f4:d7:61:11:45:30:b2:bf:82:9b:52:cb:
         9e:83:c7:b9:9e:9a:40:97:9c:25:18:d6:c1:45:99:5c:30:38:
         42:8e:a0:71:15:1a:7f:6e:55:c9:05:88:6e:07:3e:1f:16:19:
         b8:83:fc:b7:74:54:01:10:4c:ff:e4:a4:99:62:8f:b4:eb:d4:
         b5:64:37:be:42:76:1a:03:a1:04:30:b2:d8:8e:46:07:b9:af:
         9e:09:f5:90:1e:73:b0:34:14:31:41:e9:2c:17:be:c5:8c:4c:
         e6:9b:4f:ac:c9:47:57:8c:30:a0:fa:5a:09:db:21:c7:e4:34:
         85:a6:3b:77:6f:46:85:58:b1:56:61:52:d8:f1:b2:8e:5c:e0:
         e2:bd:9a:19:45:dd:97:be:87:bb:b9:bc:8f:b8:f2:14:a7:fc:
         46:29:df:56:ed:4c:5b:2d:fb:f7:c9:96:cb:d8:30:52:15:20:
         ad:ca:de:a9:c1:1b:5e:c8:0f:29:97:4d:d4:ca:2b:6b:90:f2:
         0c:23:fe:48:1a:e9:0c:27:b4:a3:ca:3c:11:8f:30:14:7c:23:
         e3:96:bf:b3:c9:ae:94:e3:c6:90:33:a3:02:70:db:6b:af:37:
         44:27:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:54 2025 by rpki-client