Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
File:                     38392e3138352e33302e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          KIFLFOi9Ykg00zK/KBOSpQvLJMrvzs0Mbk60dXJbe8M=
Subject key identifier:   EE:8A:C0:72:7B:A1:49:AF:12:04:5C:20:E6:79:25:61:FF:AB:E5:97
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       2EB29BDAA90615FE66F25AE7C62E052D93BAF5F1
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
Signing time:             Mon 23 Feb 2026 15:06:36 +0000
ROA not before:           Mon 23 Feb 2026 15:01:36 +0000
ROA not after:            Mon 22 Feb 2027 15:06:36 +0000
asID:                     202662
IP address blocks:        89.185.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b2:9b:da:a9:06:15:fe:66:f2:5a:e7:c6:2e:05:2d:93:ba:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:36 2026 GMT
            Not After : Feb 22 15:06:36 2027 GMT
        Subject: CN=EE8AC0727BA149AF12045C20E6792561FFABE597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:1c:cb:7e:e3:c8:db:98:a3:2b:03:f0:13:
                    b8:3a:4c:3c:11:6f:58:da:55:d6:d9:da:4e:46:48:
                    e0:22:a9:12:01:16:6e:57:57:12:e1:36:b5:76:d4:
                    a9:5c:00:5b:a5:ac:86:76:04:54:80:e9:7c:45:63:
                    61:2a:cf:a4:b6:3f:96:6e:b7:64:90:32:69:50:2d:
                    b5:66:32:47:06:0d:c0:4d:dd:68:b9:ff:b0:c3:ed:
                    37:71:dc:7f:2e:d2:df:a8:64:f7:da:71:c2:96:02:
                    af:4f:1f:3d:93:35:ad:90:6f:4f:33:79:bc:d8:02:
                    f5:a1:02:e2:95:31:d3:a7:e2:98:20:07:de:ef:9b:
                    59:a6:4d:e2:6a:35:a2:56:b3:d3:6f:a7:49:57:c5:
                    72:b8:ba:5e:6f:bc:3f:3e:ef:4f:e0:6e:b6:44:9e:
                    94:18:f4:c5:3d:a2:de:3c:b7:3e:57:f3:6b:17:fb:
                    13:87:71:c8:d7:60:e2:8e:0d:2f:9e:d4:e1:1c:00:
                    62:34:3c:18:aa:c1:33:bf:be:25:5c:01:a2:66:38:
                    b4:a6:a2:ce:06:5a:f4:82:35:39:1d:9c:df:3c:71:
                    bf:af:3b:23:a1:8d:95:1d:3c:51:86:83:0f:eb:cf:
                    4a:9a:01:9a:c8:68:e0:90:ad:99:88:49:85:58:a9:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:C0:72:7B:A1:49:AF:12:04:5C:20:E6:79:25:61:FF:AB:E5:97
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:de:6e:49:e0:ea:86:9e:b1:6e:0d:18:12:76:19:91:9f:
         5e:c0:7d:73:4a:0d:dd:ad:47:23:df:50:cc:55:54:4f:33:fd:
         d5:3b:67:cd:34:05:64:3b:47:a0:c2:58:8f:4c:f5:a9:9b:4f:
         c9:99:d5:25:f2:fb:a3:e4:83:8b:43:22:90:ec:19:2e:ea:8c:
         15:96:93:d0:6f:ff:e2:f1:73:11:8d:6e:48:41:45:dc:0b:65:
         a2:4c:19:58:9f:ec:b6:df:a9:6c:a3:a1:3d:32:f2:62:7c:eb:
         e4:40:53:7d:1c:b5:5a:ad:3d:50:be:a2:ba:71:37:4d:ce:79:
         8c:ba:00:1a:42:48:a6:13:75:21:5a:b5:29:b2:c4:6c:b8:11:
         31:f7:03:1c:22:fa:ee:c5:e5:a3:c2:d8:e4:25:b8:9c:6a:32:
         35:d3:00:9c:16:dd:06:f8:26:11:96:5b:fd:ba:55:0d:91:5f:
         75:29:19:bb:65:b1:34:61:49:05:20:0f:8b:d2:9c:17:ec:fa:
         45:77:8f:20:a4:5c:02:b7:ce:ef:fd:6d:1b:f2:05:05:e5:cc:
         d0:68:52:62:61:08:cc:9d:35:de:f1:e9:07:91:40:29:a5:b0:
         8e:12:03:4e:dc:d7:16:6f:16:64:0a:69:0e:9b:04:34:e7:14:
         3b:b9:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:24 2026 by rpki-client