Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa
File:                     AS51765.roa (raw, json)
Hash identifier:          +jvxjZLS8lAIHPdtGvEAw3V3rKk9+KT4d9WqUyGAVEU=
Subject key identifier:   E3:79:9F:84:EA:F4:6B:FE:37:04:B4:61:1A:75:12:21:59:E4:01:B8
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       209922ADCF82CCB732E9B60F5C02C9A785616EFD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa
Signing time:             Thu 07 Aug 2025 14:54:13 +0000
ROA not before:           Thu 07 Aug 2025 14:49:13 +0000
ROA not after:            Thu 06 Aug 2026 14:54:13 +0000
asID:                     51765
IP address blocks:        89.117.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 09:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:22:ad:cf:82:cc:b7:32:e9:b6:0f:5c:02:c9:a7:85:61:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  7 14:49:13 2025 GMT
            Not After : Aug  6 14:54:13 2026 GMT
        Subject: CN=E3799F84EAF46BFE3704B4611A75122159E401B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:ad:d0:ac:23:b8:ce:9a:ad:b6:ce:5b:80:
                    70:3f:21:b9:15:cc:cc:83:65:61:8d:29:e7:32:db:
                    e5:df:09:a9:0b:29:19:6e:7a:26:54:d1:ca:e0:1e:
                    9d:9b:18:ef:59:fd:b1:13:4f:a6:a0:c7:b4:db:e3:
                    47:47:ce:6c:65:78:70:13:01:77:ef:d5:60:93:f0:
                    1e:63:8a:ac:c1:47:cf:8f:89:e9:95:5b:06:36:08:
                    81:41:dd:31:e6:bc:73:09:e4:4e:91:25:7c:50:d3:
                    2b:18:1e:98:6f:ac:ab:38:7e:62:9f:6a:85:4c:86:
                    14:1c:c4:7c:4f:8b:31:df:d9:4e:15:54:49:ed:87:
                    c6:36:76:dd:ad:bd:a2:81:73:93:15:63:d9:bf:d3:
                    ee:bc:d7:ea:61:c1:07:a5:1d:60:a2:e4:65:94:7e:
                    69:d9:ff:a8:1b:b6:54:68:04:f3:a2:a3:ea:27:f4:
                    f2:27:49:6c:12:21:34:71:90:99:e6:26:15:db:a8:
                    a2:ac:06:60:1b:18:38:07:53:c4:b4:32:73:62:91:
                    96:32:87:02:1b:84:ca:84:e9:ef:b2:15:86:bc:ed:
                    98:68:4a:e4:42:c1:f9:73:30:18:48:aa:21:b2:46:
                    bf:65:28:eb:00:92:db:2b:7d:b9:6a:83:dd:0b:25:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:9F:84:EA:F4:6B:FE:37:04:B4:61:1A:75:12:21:59:E4:01:B8
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:ea:1e:3a:24:4e:0c:d8:54:0b:28:fe:ad:f8:5c:b9:9a:
         b7:d5:b6:6c:3c:8e:f1:40:d4:4d:54:aa:5e:13:37:25:fb:d0:
         dd:6a:24:2a:80:72:3a:f4:08:06:1f:b3:d3:09:a4:8e:0b:14:
         2b:c8:24:85:b6:74:d3:1a:4c:25:c1:f7:5b:89:a4:46:6b:de:
         40:c8:41:3f:09:5e:d7:e3:a5:64:ed:c6:f1:4f:e0:04:0c:0f:
         d3:c6:94:29:67:19:d4:82:84:ea:62:c7:aa:97:e8:00:15:c0:
         7c:c6:20:d3:ea:47:00:a0:26:df:83:10:05:8b:28:2e:9c:b9:
         eb:0a:03:6e:18:c7:ec:ba:cd:7f:1c:38:17:a5:10:a4:fb:4a:
         3f:9b:c5:86:b3:e8:0a:85:09:59:60:ec:9f:72:00:da:13:b3:
         41:cc:7f:b7:0a:6f:7a:4f:30:d2:36:4d:4d:b4:27:8d:e1:12:
         06:5a:01:38:fa:c1:4e:73:79:7e:3d:55:95:b1:cf:6e:78:5d:
         57:77:fb:f1:18:98:be:0b:f5:0a:64:9c:b1:4d:47:52:2e:09:
         2b:0b:22:b1:22:cd:68:55:6b:2f:39:a3:fe:f2:e0:31:3c:fd:
         4c:5b:c9:60:8a:75:17:30:76:9b:8e:c2:9b:36:b3:b7:03:96:
         36:47:d5:3c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUIJkirc+CzLcy6bYPXALJp4Vhbv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTA4MDcxNDQ5MTNaFw0yNjA4MDYxNDU0MTNaMDMxMTAvBgNV
BAMTKEUzNzk5Rjg0RUFGNDZCRkUzNzA0QjQ2MTFBNzUxMjIxNTlFNDAxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSq3QrCO4zpqtts5bgHA/IbkV
zMyDZWGNKecy2+XfCakLKRlueiZU0crgHp2bGO9Z/bETT6agx7Tb40dHzmxleHAT
AXfv1WCT8B5jiqzBR8+PiemVWwY2CIFB3THmvHMJ5E6RJXxQ0ysYHphvrKs4fmKf
aoVMhhQcxHxPizHf2U4VVEnth8Y2dt2tvaKBc5MVY9m/0+681+phwQelHWCi5GWU
fmnZ/6gbtlRoBPOio+on9PInSWwSITRxkJnmJhXbqKKsBmAbGDgHU8S0MnNikZYy
hwIbhMqE6e+yFYa87ZhoSuRCwflzMBhIqiGyRr9lKOsAktsrfblqg90LJdBLAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU43mfhOr0a/43BLRhGnUSIVnkAbgwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzUxNzY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWXVYMA0GCSqGSIb3DQEB
CwUAA4IBAQAOiuoeOiRODNhUCyj+rfhcuZq31bZsPI7xQNRNVKpeEzcl+9DdaiQq
gHI69AgGH7PTCaSOCxQryCSFtnTTGkwlwfdbiaRGa95AyEE/CV7X46Vk7cbxT+AE
DA/TxpQpZxnUgoTqYseql+gAFcB8xiDT6kcAoCbfgxAFiygunLnrCgNuGMfsus1/
HDgXpRCk+0o/m8WGs+gKhQlZYOyfcgDaE7NBzH+3Cm96TzDSNk1NtCeN4RIGWgE4
+sFOc3l+PVWVsc9ueF1Xd/vxGJi+C/UKZJyxTUdSLgkrCyKxIs1oVWsvOaP+8uAx
PP1MW8lginUXMHabjsKbNrO3A5Y2R9U8
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:14 2025 by rpki-client