Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401861.roa
File:                     AS401861.roa (raw, json)
Hash identifier:          C2mwOMeBT+pXMZ8RpaZDj5I/n0rYl7J8YIUmXWnPiFM=
Subject key identifier:   27:D4:50:65:17:FB:27:1D:F3:C6:C7:03:AB:84:AF:55:37:4A:A8:AB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       511BBDB525F542ABAE5BB7ED327B0A91C9EF75C6
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401861.roa
Signing time:             Sun 12 Apr 2026 05:51:03 +0000
ROA not before:           Sun 12 Apr 2026 05:46:03 +0000
ROA not after:            Sun 11 Apr 2027 05:51:03 +0000
asID:                     401861
IP address blocks:        89.116.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1b:bd:b5:25:f5:42:ab:ae:5b:b7:ed:32:7b:0a:91:c9:ef:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 12 05:46:03 2026 GMT
            Not After : Apr 11 05:51:03 2027 GMT
        Subject: CN=27D4506517FB271DF3C6C703AB84AF55374AA8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:2b:3e:df:f5:9b:0c:c6:55:ab:f3:c8:82:
                    36:5b:81:64:a0:ea:1d:56:32:e7:61:8a:04:75:94:
                    c4:50:1c:e1:da:82:f4:1f:c8:23:88:10:76:14:70:
                    2a:bf:91:09:a0:e5:3c:a8:f2:51:1a:40:35:4e:27:
                    d7:11:e1:74:0d:1d:27:53:53:a8:b8:8b:20:7b:ad:
                    8e:3e:8a:b1:94:d5:1f:90:26:15:03:f8:60:12:88:
                    71:1a:0b:44:80:8f:c1:bb:e5:bd:c0:e0:e6:4e:e0:
                    c0:4c:bf:e0:b1:83:46:6b:8b:98:1f:e6:cd:c3:3a:
                    b3:97:d3:70:a9:86:68:92:7d:d3:72:fa:19:6e:35:
                    d4:9d:e5:56:75:c3:0f:5d:8d:22:29:cd:5b:6c:f3:
                    fe:13:a1:9f:be:59:d6:c7:b1:93:ea:ef:8e:ea:fa:
                    34:a3:04:6a:c6:9c:6f:8a:0a:23:f0:7b:8d:4d:7b:
                    a2:d8:d8:02:62:30:56:00:c5:b5:18:04:20:9b:2b:
                    2e:96:ce:14:47:0a:25:6d:88:c9:22:b9:76:c3:99:
                    d8:cb:a0:ea:81:de:c4:77:75:0e:4d:a4:af:46:d7:
                    66:c3:95:9f:31:87:2d:c6:9b:59:b4:ef:7f:3c:a7:
                    81:c0:fb:a7:71:3f:36:40:5e:e6:a6:71:7c:b5:4c:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:50:65:17:FB:27:1D:F3:C6:C7:03:AB:84:AF:55:37:4A:A8:AB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401861.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:01:0d:22:2e:f9:27:ac:62:74:a1:d3:75:58:45:a4:06:49:
         ac:54:d1:8a:0f:9b:68:3e:1e:6e:10:1b:90:6d:a9:b7:80:1b:
         3a:8f:ce:12:bf:4e:7d:1c:53:9b:78:31:d2:b8:58:7c:a4:00:
         fb:10:c3:81:00:e7:ba:78:54:c0:99:cf:98:77:07:b7:09:a2:
         d5:f2:4c:23:3a:73:ee:67:e3:d0:33:06:a9:fa:a6:bd:17:b9:
         7a:35:29:36:2a:51:35:ff:83:9a:9f:8f:95:e7:af:d0:a8:f6:
         99:5c:45:c8:30:b0:c1:cf:40:13:19:d4:28:46:18:bf:92:d8:
         9b:e4:dc:78:6c:99:1d:bc:c8:1a:6f:1b:70:02:15:b6:0e:c4:
         d9:0a:a0:30:4d:08:37:4a:fa:77:2f:78:78:df:0a:8a:2f:a3:
         7b:ed:33:74:e3:21:68:4b:54:38:8e:b1:90:66:2e:8c:8d:81:
         d6:8c:26:71:7f:8a:ef:05:98:a9:cd:5d:a3:b5:6f:62:0d:24:
         8a:46:3a:d8:ef:4e:3d:6b:ef:76:47:77:60:42:4b:db:cf:41:
         ed:65:4a:c2:af:86:fd:af:a8:0d:b4:3e:40:ad:ae:72:b1:c3:
         01:f3:12:51:6c:d7:04:6d:82:67:24:0d:d1:c2:d0:0c:f3:46:
         bb:88:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:24:07 2026 by rpki-client