Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa
File:                     38392e3138352e302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          OcYanfMHJfk6VbBCeP8AsUpoI0X71fTMzKEqqoWQVqo=
Subject key identifier:   AF:98:29:82:48:CE:F4:7E:19:06:A5:DB:CA:7A:0A:1F:7A:93:BC:0F
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       455C6645972C1C351A797DF1474589635FFF31E4
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 23 Feb 2026 15:06:33 +0000
ROA not before:           Mon 23 Feb 2026 15:01:33 +0000
ROA not after:            Mon 22 Feb 2027 15:06:33 +0000
asID:                     7018
IP address blocks:        89.185.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5c:66:45:97:2c:1c:35:1a:79:7d:f1:47:45:89:63:5f:ff:31:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:33 2026 GMT
            Not After : Feb 22 15:06:33 2027 GMT
        Subject: CN=AF98298248CEF47E1906A5DBCA7A0A1F7A93BC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:23:f2:36:49:ef:ca:ec:d9:c5:a5:60:d6:
                    e9:5a:c8:13:fa:7e:15:fa:ca:50:61:13:f0:14:e4:
                    ce:a7:40:72:45:db:ea:44:45:0b:aa:69:c7:ac:37:
                    7f:42:46:99:66:3b:66:6d:a0:19:d8:8d:5d:ad:2c:
                    4c:83:92:ab:9d:c5:51:20:80:10:1e:e7:31:23:6c:
                    09:05:df:b0:09:5f:61:93:e3:0d:14:a4:9a:c3:f3:
                    35:19:9d:cb:cd:d1:b6:66:f2:60:b8:a2:b4:57:47:
                    06:73:7d:af:e0:c4:75:5e:60:2e:7d:f9:0f:1b:86:
                    ec:b5:07:69:4b:4d:69:68:cf:2f:28:0f:2f:3d:3c:
                    30:ea:5b:52:ea:d1:de:ca:b8:d9:16:b9:a7:09:2f:
                    fe:f6:6a:d2:97:8d:8e:a3:b4:31:2c:e4:33:29:ab:
                    1f:4e:a7:47:1b:76:ba:e2:ce:ae:ce:b3:7d:05:65:
                    38:ee:da:a0:ed:25:a8:4c:9d:a1:32:84:b2:d6:b7:
                    bf:14:52:b1:16:ff:61:4c:67:94:83:c6:dc:53:72:
                    d7:c4:19:96:c9:57:3f:ec:48:48:01:2a:80:db:96:
                    34:45:2c:55:4a:29:13:68:a8:d3:18:7b:c0:32:be:
                    92:1c:4c:32:ff:8d:99:0d:d8:5f:de:9b:9a:e0:6d:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:98:29:82:48:CE:F4:7E:19:06:A5:DB:CA:7A:0A:1F:7A:93:BC:0F
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:e2:4c:37:ef:a2:33:69:74:f7:40:f9:a0:37:31:c4:c5:
         96:17:ba:1a:b1:ea:ca:6d:12:0b:ca:e4:d4:81:eb:16:c0:6d:
         5d:9e:88:07:69:aa:38:f6:c1:50:fd:df:64:7b:72:f5:e4:86:
         b0:8a:9c:6b:2d:37:8d:48:30:6d:e8:01:11:8e:37:f1:99:8e:
         af:05:0c:cb:73:9c:b7:30:92:24:0c:4f:98:9d:e8:c3:e3:6d:
         8b:92:a2:9c:5c:f1:3a:0b:6a:96:15:c5:c4:47:d7:e5:0d:da:
         9c:92:5a:22:8b:d0:c9:1d:a5:f5:58:49:99:42:48:d9:5b:fa:
         74:bb:ea:26:f2:bf:f6:f6:f2:1e:58:e6:b3:0a:17:09:d5:05:
         fa:49:6a:52:94:06:41:be:ab:2f:86:d4:60:51:7f:de:78:20:
         59:e3:09:bc:88:71:5f:30:dd:06:28:8f:2f:2f:9d:be:2c:7f:
         ee:e1:ba:39:bb:7e:45:44:e3:8e:a0:12:8d:0d:cf:ee:43:af:
         a7:3b:23:59:d1:99:eb:6d:7f:68:07:12:06:2e:5a:4e:db:c9:
         d3:78:4e:20:25:6c:2f:39:47:7c:bf:1f:fa:3b:76:4c:05:6a:
         8d:8d:4b:b2:cd:49:7c:47:40:1a:be:58:8b:23:f5:b8:14:4f:
         e4:94:90:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURVxmRZcsHDUaeX3xR0WJY1//MeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzNaFw0yNzAyMjIxNTA2MzNaMDMxMTAvBgNV
BAMTKEFGOTgyOTgyNDhDRUY0N0UxOTA2QTVEQkNBN0EwQTFGN0E5M0JDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXyPyNknvyuzZxaVg1ulayBP6
fhX6ylBhE/AU5M6nQHJF2+pERQuqacesN39CRplmO2ZtoBnYjV2tLEyDkqudxVEg
gBAe5zEjbAkF37AJX2GT4w0UpJrD8zUZncvN0bZm8mC4orRXRwZzfa/gxHVeYC59
+Q8bhuy1B2lLTWlozy8oDy89PDDqW1Lq0d7KuNkWuacJL/72atKXjY6jtDEs5DMp
qx9Op0cbdrrizq7Os30FZTju2qDtJahMnaEyhLLWt78UUrEW/2FMZ5SDxtxTctfE
GZbJVz/sSEgBKoDbljRFLFVKKRNoqNMYe8AyvpIcTDL/jZkN2F/em5rgbQAxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUr5gpgkjO9H4ZBqXbynoKH3qTvA8wHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RkZDE4MThiLTlmYmYtNDQwYy1hYWVj
LTQ0YTRkMTU5MGY4Ny0wLzAvMzgzOTJlMzEzODM1MmUzMDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuE+JMN++iM2l090D5oDcxxMWWF7oaserKbRILyuTUgesWwG1dnogHaao4
9sFQ/d9ke3L15IawipxrLTeNSDBt6AERjjfxmY6vBQzLc5y3MJIkDE+YnejD422L
kqKcXPE6C2qWFcXER9flDdqckloii9DJHaX1WEmZQkjZW/p0u+om8r/29vIeWOaz
ChcJ1QX6SWpSlAZBvqsvhtRgUX/eeCBZ4wm8iHFfMN0GKI8vL52+LH/u4bo5u35F
ROOOoBKNDc/uQ6+nOyNZ0ZnrbX9oBxIGLlpO28nTeE4gJWwvOUd8vx/6O3ZMBWqN
jUuyzUl8R0AavliLI/W4FE/klJCi
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:31 2026 by rpki-client