Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          rbHzUdMmVLCF/CLeR5FKLEtVTtNou+8mHCbOYTZ6Ky0=
Subject key identifier:   E9:C1:63:7D:8E:FB:BC:58:1B:16:79:AE:02:EB:E7:0F:16:57:D6:19
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       43EA3B2A018966B24C485E417661AA0E3F08F78C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
Signing time:             Thu 28 May 2026 14:53:08 +0000
ROA not before:           Thu 28 May 2026 14:48:08 +0000
ROA not after:            Thu 27 May 2027 14:53:08 +0000
asID:                     61317
IP address blocks:        86.38.177.0/24 maxlen: 24
                          86.38.183.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:3b:2a:01:89:66:b2:4c:48:5e:41:76:61:aa:0e:3f:08:f7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 28 14:48:08 2026 GMT
            Not After : May 27 14:53:08 2027 GMT
        Subject: CN=E9C1637D8EFBBC581B1679AE02EBE70F1657D619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:d2:59:48:fb:bc:31:fd:1d:ec:b9:bb:f3:
                    b2:fd:24:a1:9e:04:58:68:ce:73:1d:b8:92:40:f9:
                    24:ee:49:55:69:8a:b7:77:4a:f4:0d:d1:0c:a3:51:
                    a9:e0:06:a0:59:64:a2:81:06:7f:60:e9:77:c8:ad:
                    cb:6d:b5:e4:0f:7a:88:21:16:d5:9c:75:a8:97:a4:
                    ff:5c:60:72:2b:e0:6b:2e:ad:e3:4e:79:2d:60:b9:
                    72:27:c3:5e:b6:08:de:04:3b:84:77:72:3f:f3:2f:
                    b8:9b:ee:ba:35:c9:da:a1:1f:5a:27:19:25:e4:f9:
                    76:d6:83:12:09:f9:4c:88:c8:de:33:7b:bc:0e:12:
                    c9:34:bf:23:b5:3b:cb:95:3d:30:b4:b2:c1:f8:be:
                    53:f5:de:45:3f:c0:ed:4a:31:44:af:b6:d0:9a:24:
                    12:e6:10:aa:32:1b:67:a1:c6:73:ce:cb:ef:5a:b2:
                    ba:c1:5b:d3:18:8c:22:3e:04:25:39:60:87:f4:01:
                    56:1b:58:5f:bc:37:9f:88:d4:59:46:91:26:b5:ad:
                    40:b1:6b:5d:2b:da:7c:ca:c1:c8:84:98:25:2c:ed:
                    b6:39:ad:a8:8c:61:ad:32:89:35:73:7f:a5:47:6c:
                    33:21:2a:6b:c9:ee:b9:a2:5d:4a:46:b2:5c:5e:fd:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C1:63:7D:8E:FB:BC:58:1B:16:79:AE:02:EB:E7:0F:16:57:D6:19
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.177.0/24
                  86.38.183.0/24
                  89.117.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:ca:d1:97:91:a8:98:37:e8:56:7e:9e:ca:25:d3:9c:d0:
         a3:34:b9:b0:a5:7f:1d:25:bc:9f:64:7e:d1:c0:14:00:72:f0:
         33:4f:0e:5e:3b:fa:9d:26:02:37:bb:03:ef:b6:88:d8:73:c6:
         be:5e:47:a7:eb:8f:27:a2:e6:c3:08:ad:9c:dd:16:74:6e:88:
         62:e2:1d:ae:b7:62:bc:8b:3b:a2:61:8a:2c:14:52:74:d4:4d:
         d0:bc:6c:c5:c5:03:7f:a2:8c:27:94:5f:b9:62:0d:c2:bf:0b:
         3e:c3:4f:8f:4c:dc:b1:f0:c8:02:12:96:37:e8:7c:ba:c8:38:
         c6:8d:e9:c8:bc:ae:db:74:6b:17:04:c2:be:b8:a4:46:1b:b8:
         4d:c3:7d:3f:36:d8:c0:e9:76:e4:41:8c:2d:05:5c:79:55:de:
         a0:05:9b:d4:e3:89:cf:00:c6:95:1e:71:48:13:67:66:8c:87:
         85:ea:ee:5f:46:8d:f4:4d:e7:35:f7:b8:7f:dd:e5:e0:f5:6a:
         10:7c:b9:31:c0:e4:1c:ff:0d:ed:22:3f:e2:8b:df:37:3f:35:
         de:10:5d:59:07:6b:17:c5:58:50:47:6e:c6:c9:5b:47:c3:de:
         b0:33:b0:e0:f8:b3:65:5d:1b:03:bb:d0:b7:5a:b7:ef:6f:8f:
         c2:30:15:31
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUQ+o7KgGJZrJMSF5BdmGqDj8I94wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA1MjgxNDQ4MDhaFw0yNzA1MjcxNDUzMDhaMDMxMTAvBgNV
BAMTKEU5QzE2MzdEOEVGQkJDNTgxQjE2NzlBRTAyRUJFNzBGMTY1N0Q2MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAtJZSPu8Mf0d7Lm787L9JKGe
BFhoznMduJJA+STuSVVpird3SvQN0QyjUangBqBZZKKBBn9g6XfIrcttteQPeogh
FtWcdaiXpP9cYHIr4GsureNOeS1guXInw162CN4EO4R3cj/zL7ib7ro1ydqhH1on
GSXk+XbWgxIJ+UyIyN4ze7wOEsk0vyO1O8uVPTC0ssH4vlP13kU/wO1KMUSvttCa
JBLmEKoyG2ehxnPOy+9asrrBW9MYjCI+BCU5YIf0AVYbWF+8N5+I1FlGkSa1rUCx
a10r2nzKwciEmCUs7bY5raiMYa0yiTVzf6VHbDMhKmvJ7rmiXUpGslxe/W5XAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU6cFjfY77vFgbFnmuAuvnDxZX1hkwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAViaxAwQAVia3AwQAWXXX
MA0GCSqGSIb3DQEBCwUAA4IBAQBKKcrRl5GomDfoVn6eyiXTnNCjNLmwpX8dJbyf
ZH7RwBQAcvAzTw5eO/qdJgI3uwPvtojYc8a+Xken648noubDCK2c3RZ0bohi4h2u
t2K8izuiYYosFFJ01E3QvGzFxQN/oownlF+5Yg3Cvws+w0+PTNyx8MgCEpY36Hy6
yDjGjenIvK7bdGsXBMK+uKRGG7hNw30/NtjA6XbkQYwtBVx5Vd6gBZvU44nPAMaV
HnFIE2dmjIeF6u5fRo30Tec197h/3eXg9WoQfLkxwOQc/w3tIj/ii983PzXeEF1Z
B2sXxVhQR27GyVtHw96wM7Dg+LNlXRsDu9C3Wrfvb4/CMBUx
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:39:24 2026 by rpki-client