Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
File:                     AS49870.roa (raw, json)
Hash identifier:          7JpjI3qqcnF+T4ilckNvJc3i3jxyI+KFakQ1v00GThs=
Subject key identifier:   59:85:9C:2E:2E:D4:C7:D5:7C:8E:B9:C0:4E:26:D4:5D:AE:76:E0:59
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       33CB1B1B202032E1B639E2424EFCB1749D20D02A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa
Signing time:             Wed 18 Feb 2026 06:06:06 +0000
ROA not before:           Wed 18 Feb 2026 06:01:06 +0000
ROA not after:            Wed 17 Feb 2027 06:06:06 +0000
asID:                     49870
IP address blocks:        89.116.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 10:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cb:1b:1b:20:20:32:e1:b6:39:e2:42:4e:fc:b1:74:9d:20:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Feb 18 06:01:06 2026 GMT
            Not After : Feb 17 06:06:06 2027 GMT
        Subject: CN=59859C2E2ED4C7D57C8EB9C04E26D45DAE76E059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:84:d5:9a:30:17:4e:4b:1e:df:80:15:68:
                    ad:b8:29:71:ea:8a:80:26:d4:ad:5e:cc:39:80:6f:
                    f5:7a:7a:ce:bc:58:9d:5a:aa:7f:29:ae:fd:e0:fc:
                    b1:15:2f:c0:ab:46:4e:b8:d1:1d:c7:ef:a7:48:4a:
                    f8:d5:b3:cd:2c:e4:7b:bb:ff:0d:8c:62:58:67:b5:
                    46:c6:d3:c2:60:4d:a1:82:07:ef:92:5c:02:1f:21:
                    58:d3:91:92:29:1c:48:90:2a:be:dd:df:05:a7:ca:
                    f0:3f:f6:fb:e2:2b:d0:32:b0:71:5b:d5:bf:85:14:
                    a6:e5:24:ca:10:97:e2:db:0a:19:3d:33:51:1c:18:
                    3c:28:81:af:9b:14:0c:b5:15:a0:61:33:ec:b0:c0:
                    8c:d8:95:b8:be:85:8f:20:8c:17:7c:f9:3c:5c:21:
                    a2:e8:f7:e3:ee:91:31:d6:cd:7a:48:e7:e6:01:03:
                    43:e2:a3:8f:23:24:83:2d:86:ca:cf:d1:d6:0a:bb:
                    10:eb:e2:01:f1:e5:7c:b7:9f:28:47:d8:ab:b0:3c:
                    69:ac:3b:b1:d3:ac:a9:f4:9e:05:1a:9a:c7:4c:a4:
                    52:02:7f:03:ab:8f:82:68:4a:6a:3f:2a:4c:d1:ac:
                    4b:6d:a7:8d:95:80:73:07:df:2c:f3:39:fb:62:d1:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:85:9C:2E:2E:D4:C7:D5:7C:8E:B9:C0:4E:26:D4:5D:AE:76:E0:59
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49870.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:a2:04:f1:82:91:8b:fb:8f:66:7b:67:0b:4b:8c:9a:55:
         65:13:79:a7:45:9d:2a:34:34:22:e3:f6:8c:e5:33:0f:53:dc:
         05:d1:20:a9:c7:49:d9:55:44:39:e7:fa:c0:5d:5c:cc:03:fc:
         9b:c5:70:68:bc:30:dd:a9:23:b3:31:50:99:5c:01:da:b2:f0:
         95:c1:a3:e5:8b:3d:86:b2:46:ca:e0:43:4a:34:da:fc:72:90:
         ef:56:e3:03:10:d8:5b:72:ae:c8:a9:e7:50:1e:9f:d3:ac:3d:
         76:6f:f6:1b:df:fa:7b:8c:7c:db:85:a2:dc:73:55:2d:cb:ce:
         b7:40:8e:a5:3c:81:ea:df:a7:2d:cb:ed:9a:93:ca:3f:28:91:
         69:55:d0:74:fa:bb:2c:26:5b:7c:18:f3:f7:bf:84:e7:82:3f:
         4e:8e:43:bb:05:7c:d5:27:9c:9f:4c:2f:c6:0a:8d:ba:e2:41:
         9c:08:23:38:94:e9:83:fb:66:16:87:f3:92:75:a3:7e:58:f8:
         98:d8:eb:48:c7:38:d7:cc:bb:65:91:24:93:45:84:25:fe:27:
         91:25:68:68:42:a1:08:d0:dd:f7:dd:f6:48:fe:6a:07:7d:03:
         3c:69:05:a4:8c:f2:08:4c:19:6e:50:4e:65:5f:5f:07:ea:17:
         53:33:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:23:45 2026 by rpki-client