Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa
File:                     AS142561.roa (raw, json)
Hash identifier:          ws4J6MwDNGYhn14eNVchJf46zmv+iwwqcHfTLEBrnyU=
Subject key identifier:   EA:DC:39:8A:6B:EF:B3:62:54:3D:92:8E:F1:3D:B3:6F:B1:C7:20:F9
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5531768DD5C8BD848E8B519332A04520E676AEF4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa
Signing time:             Thu 16 Jul 2026 09:49:12 +0000
ROA not before:           Thu 16 Jul 2026 09:44:12 +0000
ROA not after:            Thu 15 Jul 2027 09:49:12 +0000
asID:                     142561
IP address blocks:        89.116.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:76:8d:d5:c8:bd:84:8e:8b:51:93:32:a0:45:20:e6:76:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul 16 09:44:12 2026 GMT
            Not After : Jul 15 09:49:12 2027 GMT
        Subject: CN=EADC398A6BEFB362543D928EF13DB36FB1C720F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:15:ae:2a:6c:79:03:f0:d8:e0:bc:a1:ea:
                    32:22:e3:ac:86:50:be:f2:90:d2:80:12:17:38:5e:
                    46:c9:ba:b2:c8:00:e1:61:86:64:f8:c7:83:d8:d6:
                    e7:27:f1:4c:f9:8e:4c:3f:ab:ff:46:e5:3d:9d:80:
                    30:6c:a0:d2:4a:77:c1:27:b5:31:66:67:4d:4f:64:
                    dc:86:88:4c:84:32:12:8f:87:f7:d8:69:15:86:8f:
                    68:41:ed:9a:4a:c8:0a:dc:f0:54:40:f3:ce:5b:71:
                    22:8b:26:f3:35:27:a1:36:e6:cc:73:3b:c0:28:c6:
                    53:08:bf:97:43:a0:5e:6c:fb:77:58:8f:c9:9d:d8:
                    b4:b6:be:86:f0:07:c6:84:17:1e:ca:1d:32:07:7e:
                    b1:f5:39:2d:62:db:59:87:2f:d5:21:43:75:53:79:
                    69:eb:d1:63:46:57:22:f2:32:68:65:82:c3:12:b0:
                    37:d8:30:72:55:a5:6e:22:40:e9:25:35:84:9f:4b:
                    af:03:21:a7:bf:85:58:13:7e:24:b9:86:7d:e7:b4:
                    71:47:ff:d9:c9:50:bc:4e:47:7e:af:46:23:dd:83:
                    b5:7c:26:c0:d5:3a:4c:bf:88:b9:db:31:ce:fd:67:
                    3f:a6:91:d0:f1:f4:2f:e3:e9:84:07:d3:37:7d:88:
                    c3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:39:8A:6B:EF:B3:62:54:3D:92:8E:F1:3D:B3:6F:B1:C7:20:F9
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:9c:79:37:13:e6:a9:c1:9c:be:e3:7f:73:bb:13:89:3e:
         1f:e5:5c:6c:d2:e6:51:75:8e:aa:ac:b5:ad:da:5c:78:72:e3:
         3b:a9:1d:fb:f7:32:75:e0:d9:ff:25:74:1e:e0:c6:36:36:fb:
         0a:0c:90:d4:88:fa:5e:fd:03:20:0d:36:9c:db:9a:e1:64:36:
         ca:67:2f:67:3c:86:78:06:0c:0e:20:d5:65:7b:7e:89:a7:02:
         fd:31:2f:1d:c9:de:bc:65:72:45:c3:fb:17:4c:19:8f:80:d4:
         e5:55:f5:d7:92:f3:e3:7b:6a:d8:f8:e3:6e:63:c6:da:bc:39:
         43:18:45:2d:db:42:ec:1f:d1:84:2c:35:e4:59:b4:65:7c:64:
         c7:3e:e8:83:32:9d:eb:76:e2:97:5a:27:60:d5:5c:d7:72:a4:
         dd:52:37:a5:a2:e2:40:f7:5d:93:42:ba:dd:e9:59:d5:2d:6b:
         75:4b:6a:eb:cc:3e:6f:92:a5:52:8f:c2:fb:51:f6:9d:a9:7a:
         18:ee:e0:29:81:9c:1d:6f:56:34:cc:28:cb:cc:cc:ce:06:ac:
         74:30:f5:bd:a9:fb:35:ba:1c:78:d3:5a:d5:c6:60:d1:55:de:
         48:36:ba:e8:39:6b:fb:a8:9e:7d:a9:75:2c:7a:4b:e6:fa:50:
         b6:27:5e:6c
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUVTF2jdXIvYSOi1GTMqBFIOZ2rvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA3MTYwOTQ0MTJaFw0yNzA3MTUwOTQ5MTJaMDMxMTAvBgNV
BAMTKEVBREMzOThBNkJFRkIzNjI1NDNEOTI4RUYxM0RCMzZGQjFDNzIwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqBWuKmx5A/DY4Lyh6jIi46yG
UL7ykNKAEhc4XkbJurLIAOFhhmT4x4PY1ucn8Uz5jkw/q/9G5T2dgDBsoNJKd8En
tTFmZ01PZNyGiEyEMhKPh/fYaRWGj2hB7ZpKyArc8FRA885bcSKLJvM1J6E25sxz
O8AoxlMIv5dDoF5s+3dYj8md2LS2vobwB8aEFx7KHTIHfrH1OS1i21mHL9UhQ3VT
eWnr0WNGVyLyMmhlgsMSsDfYMHJVpW4iQOklNYSfS68DIae/hVgTfiS5hn3ntHFH
/9nJULxOR36vRiPdg7V8JsDVOky/iLnbMc79Zz+mkdDx9C/j6YQH0zd9iMO1AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU6tw5imvvs2JUPZKO8T2zb7HHIPkwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE0MjU2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl03TANBgkqhkiG9w0B
AQsFAAOCAQEAZw6ceTcT5qnBnL7jf3O7E4k+H+VcbNLmUXWOqqy1rdpceHLjO6kd
+/cydeDZ/yV0HuDGNjb7CgyQ1Ij6Xv0DIA02nNua4WQ2ymcvZzyGeAYMDiDVZXt+
iacC/TEvHcnevGVyRcP7F0wZj4DU5VX115Lz43tq2PjjbmPG2rw5QxhFLdtC7B/R
hCw15Fm0ZXxkxz7ogzKd63bil1onYNVc13Kk3VI3paLiQPddk0K63elZ1S1rdUtq
68w+b5KlUo/C+1H2nal6GO7gKYGcHW9WNMwoy8zMzgasdDD1van7NboceNNa1cZg
0VXeSDa66Dlr+6iefal1LHpL5vpQtidebA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:10:58 2026 by rpki-client