Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          +k8+/Y2D2dGm2FQgn7BMbwHwj/AW8ugmwbfNo89xM5g=
Subject key identifier:   CD:0E:63:50:DD:C8:AD:83:27:8F:0F:78:A3:04:DC:E9:AB:BB:F7:98
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2942C37F415943E4D181308DBF53BE431CCBD7A7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
Signing time:             Tue 03 Nov 2026 13:49:39 +0000
ROA not before:           Tue 03 Nov 2026 13:44:39 +0000
ROA not after:            Tue 02 Nov 2027 13:49:39 +0000
asID:                     398465
IP address blocks:        86.38.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:42:c3:7f:41:59:43:e4:d1:81:30:8d:bf:53:be:43:1c:cb:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov  3 13:44:39 2026 GMT
            Not After : Nov  2 13:49:39 2027 GMT
        Subject: CN=CD0E6350DDC8AD83278F0F78A304DCE9ABBBF798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:34:8e:3c:47:7e:89:f3:e5:4d:d8:0f:e8:
                    58:00:1d:6e:e2:8d:5d:b4:94:b4:f1:8f:b0:ed:fa:
                    b3:83:43:38:b7:04:d2:c3:dd:29:8f:65:76:a6:34:
                    8a:92:3c:49:a2:68:06:7f:1b:51:ea:08:48:c1:ee:
                    a1:6c:c9:a4:80:cb:cf:19:5a:84:29:2c:64:fe:df:
                    4b:52:53:6c:b5:bd:4e:11:ee:a7:aa:74:fe:57:68:
                    29:54:c0:b8:89:f3:df:cc:96:89:09:25:a3:33:22:
                    77:8f:cb:3d:71:94:ec:fe:6d:5b:bd:08:b2:d8:54:
                    c2:50:c1:81:21:55:6d:7f:ca:ab:7e:5b:e1:de:0f:
                    7e:1f:5c:7f:13:2c:17:0c:f9:f4:87:98:79:a6:6c:
                    6a:cf:78:76:a4:30:c8:2b:61:e6:56:60:95:2c:50:
                    75:9a:fa:da:48:1b:ee:ba:43:35:74:bf:f0:1d:cf:
                    d7:17:f7:6a:c0:b6:16:82:fd:16:4a:e1:5a:6f:1b:
                    22:66:5c:8e:0e:3f:ee:d2:5b:b0:c2:79:e7:43:0c:
                    82:5e:c4:4b:4b:ca:75:43:e2:44:08:98:a0:28:aa:
                    a6:ba:fe:0b:2e:97:4b:51:9f:32:1f:f9:fd:3d:ec:
                    0e:cf:b3:fa:9b:89:88:8d:6f:49:a1:e8:73:3d:67:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:63:50:DD:C8:AD:83:27:8F:0F:78:A3:04:DC:E9:AB:BB:F7:98
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:93:8e:8d:59:be:a8:e2:07:81:02:cc:42:7e:85:1f:df:76:
         7d:26:22:73:2f:1b:9a:36:93:a4:ae:bb:8e:e6:63:93:0b:e8:
         00:dc:9f:1e:b0:d6:70:7d:91:df:4b:00:b8:f1:13:30:32:f0:
         26:53:fa:10:b7:36:4d:84:3b:f8:cd:20:7c:1b:9e:a7:a7:6c:
         f6:11:89:0e:56:8f:93:3e:aa:7c:f7:f0:e2:77:a7:76:76:4b:
         6f:65:75:23:ce:8b:b9:3d:46:30:60:f7:34:f7:24:06:46:de:
         72:5d:8c:84:d5:8b:bf:7d:9c:81:4e:30:3d:21:19:ed:4a:21:
         58:82:33:b2:cf:21:ef:ee:66:a0:8c:f6:bc:17:ec:cc:4a:41:
         47:26:7b:39:57:08:32:02:1f:00:38:75:78:22:c9:8c:b0:c9:
         d2:40:c6:31:aa:4e:62:9d:e8:2f:06:ca:4a:2d:b8:15:74:94:
         a3:a7:72:14:1f:fe:29:57:b3:bd:04:bf:2a:15:1a:18:34:7d:
         cb:e8:61:9a:5a:c8:b6:16:5c:db:4e:c1:ff:2d:a2:8d:05:2d:
         dc:3e:01:5d:d6:38:4b:41:63:3e:d6:68:94:54:1b:9d:be:3c:
         25:e6:ca:42:9f:6c:54:02:ec:bf:bc:e9:4a:d2:10:5b:70:99:
         72:ad:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:42 2026 by rpki-client