Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          RPkixtzvVtJ/Fu3Viqi5DZuTOwKFoT+8CBAAaYXA70M=
Subject key identifier:   BD:15:03:EC:ED:15:23:85:0A:36:F3:F9:55:EB:15:0F:29:2A:CC:BA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       08C8F063751C64E87E75A0D1E74A391D6D81A368
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
Signing time:             Mon 07 Jul 2025 00:54:13 +0000
ROA not before:           Mon 07 Jul 2025 00:49:13 +0000
ROA not after:            Mon 06 Jul 2026 00:54:13 +0000
asID:                     142036
IP address blocks:        89.117.1.0/24 maxlen: 24
                          89.117.2.0/24 maxlen: 24
                          89.117.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 11:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:f0:63:75:1c:64:e8:7e:75:a0:d1:e7:4a:39:1d:6d:81:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul  7 00:49:13 2025 GMT
            Not After : Jul  6 00:54:13 2026 GMT
        Subject: CN=BD1503ECED1523850A36F3F955EB150F292ACCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:a8:07:5e:51:90:62:d9:74:0c:82:d4:42:
                    9f:38:f6:ff:b3:ae:4c:e6:04:93:f4:85:dc:6d:56:
                    2e:93:df:41:58:70:ef:93:dd:0d:51:83:15:15:3f:
                    da:96:96:00:8a:4a:7d:9d:ce:ac:1a:be:7e:5e:fc:
                    f8:db:c7:c8:6d:ab:f2:8c:53:33:33:ca:55:51:4b:
                    cc:5e:ee:a4:62:1f:ea:c7:4c:a1:5b:db:f5:37:f3:
                    85:a1:6e:b0:64:7e:9e:c5:08:58:1a:4e:90:bc:69:
                    55:fd:e7:c3:b2:33:51:42:99:a2:0a:8f:96:02:47:
                    24:5a:54:5c:31:2b:2d:c8:fc:bc:d6:4f:bf:be:af:
                    de:68:da:47:1e:66:46:f9:d0:7d:74:1d:a0:08:23:
                    c1:70:39:cd:ee:c6:a4:fa:e7:c5:7e:08:76:06:9f:
                    3c:92:6c:54:68:d5:22:c7:48:4f:42:bd:82:18:0a:
                    4f:9a:82:b6:82:dc:86:f9:d7:ef:6a:2d:76:ba:23:
                    58:35:3f:43:e4:a9:3b:d3:8e:d7:f5:29:59:f9:7a:
                    b0:cb:2a:4d:03:b7:cb:bf:ce:83:6e:2b:db:96:30:
                    ad:1a:1d:13:b5:4a:ed:75:bd:38:d9:22:ce:de:da:
                    6c:79:55:e3:24:6d:22:45:54:d7:9c:ed:a0:59:dc:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:15:03:EC:ED:15:23:85:0A:36:F3:F9:55:EB:15:0F:29:2A:CC:BA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.1.0-89.117.3.255

    Signature Algorithm: sha256WithRSAEncryption
         a9:c7:85:bc:c1:6c:1b:13:8f:84:ce:3d:fa:5e:ba:4c:f3:cf:
         40:55:59:37:a5:22:bc:0e:d3:8f:43:43:cd:c5:f8:f1:96:da:
         4a:17:20:9b:63:fc:56:07:88:12:10:a1:7e:88:e8:ad:5e:14:
         17:e9:1b:4c:56:6d:c6:47:bf:ef:80:08:9e:3c:68:ed:88:1e:
         52:9e:13:4a:fa:d0:e7:f6:c0:ef:cd:52:91:3d:8b:c4:8d:3b:
         11:f2:04:d2:1f:6b:24:a4:b0:b6:6c:a6:02:f7:54:b4:85:8d:
         47:05:1b:d2:17:92:7a:d1:2b:e5:61:df:a0:5d:81:ce:37:84:
         50:5c:22:b7:6c:4b:86:d3:2c:5f:ca:7d:c0:e6:48:ed:ff:6d:
         7a:47:88:37:c8:52:77:53:c3:13:41:5c:3d:22:eb:85:42:18:
         e8:5f:75:17:ea:c3:de:98:30:2c:6c:9c:3e:2c:03:98:43:b3:
         84:58:9d:c8:46:ae:44:c8:fd:72:91:4b:64:82:91:58:ae:b8:
         d7:3f:16:9b:7e:f3:de:1e:db:57:41:2a:4a:45:5e:51:95:4f:
         f7:d5:a5:5e:61:6e:ad:e5:24:72:df:eb:b3:82:4c:24:5e:7d:
         d4:72:76:c5:3d:34:e0:1f:a6:ae:41:3b:9e:81:a0:85:ed:1a:
         da:40:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:41:45 2025 by rpki-client