Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa
File:                     AS58061.roa (raw, json)
Hash identifier:          6239Zly/QtsvM8D9qfeW/1+lnI2OOas0iUIJWybzLmw=
Subject key identifier:   02:9B:AC:76:B4:63:64:35:11:29:6B:9D:3D:C2:0A:42:4D:60:F1:A4
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3FFA07F187477E8D900BEAC82943958171143C3A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa
Signing time:             Thu 07 Aug 2025 14:54:13 +0000
ROA not before:           Thu 07 Aug 2025 14:49:13 +0000
ROA not after:            Thu 06 Aug 2026 14:54:13 +0000
asID:                     58061
IP address blocks:        89.116.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 09:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fa:07:f1:87:47:7e:8d:90:0b:ea:c8:29:43:95:81:71:14:3c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  7 14:49:13 2025 GMT
            Not After : Aug  6 14:54:13 2026 GMT
        Subject: CN=029BAC76B463643511296B9D3DC20A424D60F1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:75:84:57:9d:08:bc:48:ef:e6:71:ae:78:
                    ca:ad:ca:f7:f9:20:e5:4a:9d:d9:e1:e8:cc:02:fa:
                    ac:7f:c4:4d:6e:15:0a:99:e8:ab:cd:f1:37:b2:de:
                    25:e4:0f:d2:07:0a:a7:48:9d:02:88:97:c7:3b:40:
                    75:f2:5b:c6:b4:9f:f2:a8:c7:5b:ee:ad:1f:d7:92:
                    d4:f4:93:fc:58:c7:6e:33:16:6f:be:f4:21:80:16:
                    c1:e3:04:f3:e7:6f:ad:f8:5f:27:3f:23:ad:3a:07:
                    05:b7:9a:84:89:b6:73:1a:6e:45:93:28:31:52:2e:
                    73:09:8d:65:a9:4a:1b:04:64:f5:db:ad:cb:b7:39:
                    72:26:55:1b:20:40:87:75:57:c5:9c:89:16:85:ce:
                    80:87:0f:e1:80:9c:00:df:a3:fa:b3:75:ef:05:dc:
                    43:f3:f3:33:ee:74:a1:1e:f9:b5:63:f3:5a:5b:42:
                    8c:45:dd:89:fd:1f:f3:4a:59:c9:9a:64:08:e5:b4:
                    2d:42:6a:f9:70:89:4f:e7:61:db:0d:d8:96:4b:93:
                    d1:97:af:7c:c6:42:a9:02:5c:95:ac:1f:a4:1d:b4:
                    78:fc:82:6d:e3:95:0a:4f:95:1f:dd:dd:de:55:28:
                    df:8e:50:f2:be:1c:72:83:52:c0:2e:2b:50:38:66:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9B:AC:76:B4:63:64:35:11:29:6B:9D:3D:C2:0A:42:4D:60:F1:A4
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:15:c9:89:3b:57:79:0b:98:30:b3:d9:ce:08:df:cc:a1:f8:
         43:31:d5:88:59:1a:c6:0d:c9:6b:d6:69:16:32:ba:95:dc:48:
         83:38:ca:24:57:8b:31:a6:89:7e:d4:66:7e:3b:13:b6:2d:d2:
         be:af:36:7e:a0:ac:e7:db:f6:72:fc:19:bb:36:a8:79:9e:82:
         79:60:e7:7c:c8:f2:1f:3e:5d:0b:df:b6:0b:09:4c:14:b9:01:
         b2:ac:41:05:9c:7e:1a:54:66:3e:05:e2:30:80:1d:93:6f:f2:
         51:79:18:12:1d:b5:57:23:ac:64:4c:99:8a:fa:f8:54:5f:62:
         50:1f:be:1e:7a:66:60:43:ea:72:4e:f5:86:4b:7e:da:9e:35:
         08:93:fb:f3:9e:d8:ea:ed:46:27:6f:41:ab:2f:72:ea:13:68:
         6e:a4:87:aa:d4:d4:54:71:15:e2:37:c0:32:0d:00:77:35:69:
         64:05:71:87:65:54:b1:40:dd:0a:b9:61:e1:47:2b:d6:9e:16:
         74:11:b6:2b:5f:1b:96:28:de:ca:9c:b2:73:e9:bd:a6:62:ed:
         e6:3a:e2:d4:e6:a7:38:76:49:51:27:ce:0a:40:ce:96:c3:c9:
         39:da:11:25:b2:cf:66:20:51:7e:4f:92:90:23:d6:82:27:f0:
         b1:c8:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:45 2025 by rpki-client