Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402170.roa
File:                     AS402170.roa (raw, json)
Hash identifier:          2FrxabjB7NCoTYc2wErO8b2T9DEysCuy8ZBvycnDxNo=
Subject key identifier:   6A:B0:38:3A:ED:0A:8A:44:75:AD:A2:F5:F4:D0:97:73:86:CC:4C:2A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       756280E8C76E13EB31FB4D26FE9D03A81A7C397F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402170.roa
Signing time:             Sat 19 Sep 2026 05:26:39 +0000
ROA not before:           Sat 19 Sep 2026 05:21:39 +0000
ROA not after:            Sat 18 Sep 2027 05:26:39 +0000
asID:                     402170
IP address blocks:        89.116.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:62:80:e8:c7:6e:13:eb:31:fb:4d:26:fe:9d:03:a8:1a:7c:39:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 19 05:21:39 2026 GMT
            Not After : Sep 18 05:26:39 2027 GMT
        Subject: CN=6AB0383AED0A8A4475ADA2F5F4D0977386CC4C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:a6:59:86:fa:2b:20:2f:98:23:22:ed:71:
                    b3:ca:96:91:34:71:46:1a:58:53:56:e6:98:d7:9b:
                    0b:0d:2c:5d:14:83:9b:86:82:95:18:b3:ab:14:28:
                    c4:9b:e1:05:5b:b7:c8:01:ab:64:c3:12:41:e0:b2:
                    77:7f:f5:68:82:52:a8:da:c2:96:38:ff:24:af:94:
                    0d:07:8b:e4:60:71:3f:64:c4:fb:f6:88:65:ed:ea:
                    e2:cb:78:0a:90:b8:0c:63:b6:ad:3e:1f:94:01:84:
                    41:bc:d7:39:8f:08:87:43:6f:57:56:84:47:83:76:
                    2f:a3:dd:3e:c3:6f:d3:8d:c1:0a:3f:ee:25:e4:38:
                    9c:9a:6d:a3:97:1e:fa:83:17:de:da:da:ae:85:52:
                    98:60:bf:10:1e:1e:52:02:58:2c:4e:c7:34:56:58:
                    b3:af:b0:d9:60:9f:51:4f:b5:cd:10:4c:79:a7:c4:
                    6d:c7:2b:51:da:d0:51:5b:ce:18:55:59:ff:75:33:
                    19:77:19:31:ba:f7:7a:28:28:36:f2:19:e7:24:26:
                    22:dd:b5:2e:c1:2b:c3:4b:5d:15:d8:32:ae:a5:6a:
                    15:64:24:72:5d:64:e3:3a:87:28:18:3e:19:31:9a:
                    9b:88:a0:df:dd:c6:77:cf:32:85:da:30:ba:3c:17:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:38:3A:ED:0A:8A:44:75:AD:A2:F5:F4:D0:97:73:86:CC:4C:2A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7d:2d:ba:58:73:7a:9e:96:b0:37:c2:e5:dc:9d:9a:d3:2a:
         40:3e:31:c6:23:72:b6:14:83:80:6d:ca:00:34:8a:d7:da:63:
         00:ed:65:25:b5:8a:78:6c:ce:91:a9:4b:f6:30:9c:64:9f:af:
         d6:1a:ce:7c:fe:00:b0:76:4b:09:d3:8e:b5:94:0b:a6:40:80:
         27:53:86:34:96:c1:76:fd:15:5b:07:00:80:a1:48:9e:d2:41:
         dd:08:2f:30:f4:76:3b:91:78:ae:fd:be:b1:4b:26:50:7c:63:
         76:16:40:0d:8d:e7:b2:e8:f8:66:71:8a:00:b6:aa:c8:64:32:
         d3:b2:06:22:74:a8:9e:d0:8a:be:d1:e1:ea:89:19:34:57:a2:
         c8:53:34:c5:61:8a:72:50:db:a1:72:90:fb:08:55:1a:27:b8:
         e9:b4:f3:19:1c:25:58:bb:b6:ce:02:ad:1b:dc:77:bd:71:6d:
         00:7e:74:b8:b3:22:73:57:18:bd:46:db:67:c9:a7:54:87:c9:
         7e:01:d1:99:ba:52:61:78:3f:9e:c0:ed:a4:ee:f6:fa:c3:bf:
         60:3e:15:14:99:70:fd:55:ee:1d:a3:17:29:fa:f8:a3:2e:5e:
         1b:aa:8f:57:c8:c0:4b:14:d2:f6:d0:2b:f9:81:00:3c:06:33:
         d6:bf:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:35 2026 by rpki-client