Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142240.roa
File:                     AS142240.roa (raw, json)
Hash identifier:          PkgbtNYfn0jzetvg6FRvmGqdajLoyywqK4Wf6yOaAl0=
Subject key identifier:   23:1D:41:50:C6:4E:83:64:4B:8E:22:D0:0D:D9:D3:46:2F:28:80:0C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       426B2C5ACD8918A55EA11AD1E1018F7F2FBD19D8
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142240.roa
Signing time:             Tue 25 Aug 2026 18:18:39 +0000
ROA not before:           Tue 25 Aug 2026 18:13:39 +0000
ROA not after:            Tue 24 Aug 2027 18:18:39 +0000
asID:                     142240
IP address blocks:        89.117.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:2c:5a:cd:89:18:a5:5e:a1:1a:d1:e1:01:8f:7f:2f:bd:19:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 25 18:13:39 2026 GMT
            Not After : Aug 24 18:18:39 2027 GMT
        Subject: CN=231D4150C64E83644B8E22D00DD9D3462F28800C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:04:d6:b1:9c:b7:5a:eb:ba:65:4d:45:0e:dd:
                    9f:f2:a0:c2:58:10:d1:56:4a:0a:68:ac:c5:a2:b4:
                    40:01:bc:d6:20:54:41:d5:cd:52:21:6e:a5:ef:7e:
                    e4:0b:d9:58:df:d6:ee:a4:80:3e:59:81:12:3a:96:
                    b8:ed:d3:e2:0b:bd:5f:3d:f1:d7:e0:8b:53:28:0c:
                    69:3f:21:89:58:40:18:36:28:1f:58:ea:0b:b9:65:
                    c3:52:b5:42:c9:e4:d1:20:fb:a3:b9:0c:92:5e:94:
                    3b:67:f7:73:5c:bb:65:10:f8:f3:67:2f:0a:bd:4d:
                    ce:2a:89:fc:6b:be:18:94:86:de:76:89:7b:41:3a:
                    83:3d:c1:64:4f:59:a6:ca:49:73:4a:e2:de:e7:20:
                    5e:a7:31:af:e2:e0:17:1c:c6:bd:d7:87:09:2e:4e:
                    aa:e4:44:50:13:0a:9b:fa:57:65:04:97:8b:d3:48:
                    fc:97:bd:ed:b0:f2:91:7d:b7:34:ee:c5:42:cd:32:
                    f7:67:95:cd:3f:22:41:d8:54:2b:a7:d7:6b:38:23:
                    67:9f:bc:35:eb:3d:98:f4:38:af:f7:19:f5:50:46:
                    4a:4b:0f:16:2f:71:8c:b7:29:0c:04:ad:35:b2:d2:
                    73:27:b9:2b:ff:ad:f3:21:8b:98:89:0c:fa:32:c9:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:41:50:C6:4E:83:64:4B:8E:22:D0:0D:D9:D3:46:2F:28:80:0C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:42:38:fc:ed:e6:a3:b5:0b:83:33:a6:56:fb:c1:75:35:c8:
         d0:ac:90:b1:22:c9:3c:b0:81:30:69:db:e9:e7:d1:7a:b0:6a:
         6e:93:fb:0d:33:3d:9b:b5:80:64:33:39:e1:7b:b1:14:3e:18:
         06:af:2b:1f:54:c9:58:57:ad:91:c1:b0:63:88:4d:c1:9c:f5:
         47:ae:83:d4:d7:dd:18:bd:ec:69:10:56:40:92:af:9f:26:e5:
         7f:84:46:77:93:c7:0e:8b:5e:7a:df:e6:c7:64:c9:e9:47:1a:
         13:5b:b7:a1:56:32:cb:63:59:1c:61:a7:90:ac:8c:bc:2d:af:
         7f:08:8c:7e:a3:47:b8:e8:53:02:48:f2:f6:e6:1a:eb:a7:16:
         ba:50:89:1a:ab:71:3d:af:08:09:45:8d:24:17:25:11:b3:3d:
         ee:66:af:9d:de:a3:f0:64:70:73:24:ce:b0:e4:f5:ef:bc:d5:
         cf:49:01:1d:9e:51:e4:3c:60:34:bc:5a:95:e0:e4:97:7d:a1:
         43:ca:ec:0f:76:00:34:45:2f:02:61:fa:4b:67:aa:7c:31:12:
         69:78:b4:bf:5d:1c:16:94:99:4a:00:d7:d4:ff:95:35:b2:74:
         fa:9c:6d:00:38:5c:ec:31:18:8a:72:e6:48:b1:64:5d:e5:88:
         79:b3:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:52:36 2026 by rpki-client