Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa
File:                     38392e3138352e32382e302f32342d3234203d3e20343031343334.roa (raw, json)
Hash identifier:          CpyDBa3Zgm8vl5cV7xP/1GSnk6ezUcXfRuG94l7hzH8=
Subject key identifier:   C2:35:E7:99:F7:E2:56:E6:55:EF:C8:D2:F3:1C:FA:8C:0B:6D:B3:AB
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       4F4748870817FCBD1056CA61E13F9683821216DD
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa
Signing time:             Mon 23 Feb 2026 15:06:35 +0000
ROA not before:           Mon 23 Feb 2026 15:01:35 +0000
ROA not after:            Mon 22 Feb 2027 15:06:35 +0000
asID:                     401434
IP address blocks:        89.185.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:48:87:08:17:fc:bd:10:56:ca:61:e1:3f:96:83:82:12:16:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:35 2026 GMT
            Not After : Feb 22 15:06:35 2027 GMT
        Subject: CN=C235E799F7E256E655EFC8D2F31CFA8C0B6DB3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:80:87:48:10:b7:50:8d:16:30:17:68:60:
                    e7:d1:3b:34:8c:09:1f:62:b1:3e:7b:8d:f6:7a:0e:
                    f0:96:6a:1a:dc:5e:e4:eb:fc:3f:94:f8:93:ab:7b:
                    54:9a:ad:18:47:4f:93:5d:e9:36:67:79:b6:25:10:
                    03:a8:eb:8d:27:e3:db:f4:93:23:9e:14:aa:22:67:
                    34:59:00:6a:5b:25:e3:d8:2e:67:98:e1:5d:2a:09:
                    bb:0f:f5:bc:73:ca:fb:75:f2:b5:50:e1:a3:4c:a1:
                    2c:65:95:83:c4:b1:19:23:1d:bd:51:88:58:20:5a:
                    3b:c2:78:bf:a6:5e:da:5a:3f:41:2b:0a:47:11:c0:
                    d2:e4:e1:e3:54:58:6e:16:05:9c:eb:a1:9b:f5:5e:
                    30:78:35:bb:27:bf:e1:5f:22:94:b0:53:c3:d6:b6:
                    7e:25:78:df:8e:83:9b:0b:4c:f8:03:47:28:d9:ee:
                    d8:99:5d:d6:2a:d4:9e:bf:b5:4e:75:b2:94:4e:fa:
                    0d:48:b3:fe:1e:cd:d6:cf:00:fa:fb:47:df:78:9f:
                    68:30:a7:b1:b0:73:06:8b:e2:35:3b:82:47:27:12:
                    db:69:04:51:a7:39:79:b5:4a:a4:08:2f:b9:46:e5:
                    57:ed:c5:4e:66:5d:65:f6:f1:b6:9e:59:38:39:bb:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:E7:99:F7:E2:56:E6:55:EF:C8:D2:F3:1C:FA:8C:0B:6D:B3:AB
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:df:8d:7e:50:40:35:ca:4f:71:c6:9a:04:a1:21:b6:b8:6b:
         09:41:31:08:5e:a5:8a:4a:70:00:83:21:05:09:5c:3d:44:32:
         19:28:3a:73:4a:0b:da:79:c6:c4:79:b8:f7:49:22:63:27:ba:
         39:94:e1:a3:b0:61:e3:53:0c:44:c1:cd:21:38:eb:ac:b2:d4:
         0e:25:b3:bd:21:36:7d:78:a9:5f:de:96:4a:fb:ac:f4:92:c0:
         e1:5b:18:a0:4b:6f:9c:8a:06:eb:a2:7d:0b:b3:3e:08:0c:a5:
         84:e6:0b:3c:48:a8:17:fe:6d:6e:be:59:83:0c:16:ea:8d:a2:
         ef:02:da:b2:33:06:11:a1:96:ac:e2:5f:24:9b:9a:7e:8f:e0:
         8b:86:ab:1a:bf:00:37:ef:c7:6b:d2:53:58:e4:05:79:7d:86:
         68:9d:c0:61:70:2a:9b:d0:fb:16:79:1d:3c:63:c6:a8:9b:1d:
         68:5a:01:fe:d8:a5:18:55:02:87:95:62:45:96:a7:d0:ff:8b:
         4c:1d:13:a8:5f:d4:84:5c:0d:80:6c:79:0b:8f:94:f1:cc:cf:
         04:19:5a:ea:e5:cc:1c:33:ac:59:7d:7d:6d:62:de:0e:9f:3c:
         db:51:f3:48:8d:a9:88:83:5e:d9:88:0a:18:10:bb:30:77:44:
         85:02:bb:c8
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUT0dIhwgX/L0QVsph4T+Wg4ISFt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzVaFw0yNzAyMjIxNTA2MzVaMDMxMTAvBgNV
BAMTKEMyMzVFNzk5RjdFMjU2RTY1NUVGQzhEMkYzMUNGQThDMEI2REIzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iYCHSBC3UI0WMBdoYOfROzSM
CR9isT57jfZ6DvCWahrcXuTr/D+U+JOre1SarRhHT5Nd6TZnebYlEAOo640n49v0
kyOeFKoiZzRZAGpbJePYLmeY4V0qCbsP9bxzyvt18rVQ4aNMoSxllYPEsRkjHb1R
iFggWjvCeL+mXtpaP0ErCkcRwNLk4eNUWG4WBZzroZv1XjB4Nbsnv+FfIpSwU8PW
tn4leN+Og5sLTPgDRyjZ7tiZXdYq1J6/tU51spRO+g1Is/4ezdbPAPr7R994n2gw
p7GwcwaL4jU7gkcnEttpBFGnOXm1SqQIL7lG5VftxU5mXWX28baeWTg5u885AgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUwjXnmffiVuZV78jS8xz6jAtts6swHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzAzMTM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5HDANBgkqhkiG
9w0BAQsFAAOCAQEAOd+NflBANcpPccaaBKEhtrhrCUExCF6likpwAIMhBQlcPUQy
GSg6c0oL2nnGxHm490kiYye6OZTho7Bh41MMRMHNITjrrLLUDiWzvSE2fXipX96W
Svus9JLA4VsYoEtvnIoG66J9C7M+CAylhOYLPEioF/5tbr5ZgwwW6o2i7wLasjMG
EaGWrOJfJJuafo/gi4arGr8AN+/Ha9JTWOQFeX2GaJ3AYXAqm9D7FnkdPGPGqJsd
aFoB/tilGFUCh5ViRZan0P+LTB0TqF/UhFwNgGx5C4+U8czPBBla6uXMHDOsWX19
bWLeDp8821HzSI2piINe2YgKGBC7MHdEhQK7yA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:20 2026 by rpki-client