Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          fyxPeszAUSSh2ZVfbsmBZGjHORkoySaD+YNIbaYuFBU=
Subject key identifier:   1C:97:EC:C0:77:6F:37:67:F2:7C:CB:C8:43:12:03:68:35:17:7F:E5
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       1A11180CFE441AC7A512E799FE61E5632BBCE865
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
Signing time:             Thu 03 Sep 2026 00:05:21 +0000
ROA not before:           Thu 03 Sep 2026 00:00:21 +0000
ROA not after:            Thu 02 Sep 2027 00:05:21 +0000
asID:                     14618
IP address blocks:        89.117.15.0/24 maxlen: 24
                          89.117.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:11:18:0c:fe:44:1a:c7:a5:12:e7:99:fe:61:e5:63:2b:bc:e8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  3 00:00:21 2026 GMT
            Not After : Sep  2 00:05:21 2027 GMT
        Subject: CN=1C97ECC0776F3767F27CCBC84312036835177FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:48:18:5f:6f:53:1e:a7:2d:1e:1a:df:55:
                    9c:95:6d:7a:59:f5:5b:0a:ec:2d:a0:af:1e:1e:91:
                    62:e3:c6:70:7f:2d:6b:f9:49:b7:a8:b7:16:45:bd:
                    7e:dc:35:dc:a4:d8:d4:c2:92:c2:c4:03:31:51:4a:
                    41:6a:fa:05:22:7b:f8:fe:5f:46:2c:c9:fb:4b:86:
                    b7:aa:55:cb:44:41:a8:68:94:86:6c:48:63:cb:49:
                    27:51:b6:f3:b4:15:5b:8b:f1:3d:25:bb:ca:cc:cd:
                    be:3c:ef:b1:5e:ac:27:fe:b6:64:f6:29:57:9b:37:
                    18:40:ff:90:f0:0f:0e:85:dc:51:52:1b:53:87:eb:
                    fa:36:a4:f4:fc:09:dc:19:02:a5:ef:aa:7c:ef:79:
                    eb:68:9e:58:c7:d9:60:ba:ac:ff:fb:a8:f2:39:8a:
                    54:4d:3e:06:07:b3:bd:a9:0f:c7:62:8c:d3:69:db:
                    0a:32:6b:5e:36:b8:41:43:cb:db:52:7b:41:27:e0:
                    a3:e5:f1:d5:d1:2a:0d:15:2c:31:54:6f:f7:50:66:
                    1f:9b:c2:19:95:c1:25:67:f3:a3:86:41:83:18:8d:
                    6c:bc:f4:67:c8:42:81:34:5d:bf:79:9d:f4:00:cb:
                    33:61:d8:9e:c1:83:31:2e:7c:a4:08:95:f0:1c:ce:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:EC:C0:77:6F:37:67:F2:7C:CB:C8:43:12:03:68:35:17:7F:E5
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.15.0/24
                  89.117.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:59:28:40:2e:e9:5c:7f:d2:4a:8f:93:ab:9e:6c:ba:a2:
         b8:43:16:97:a8:fc:3a:1a:86:57:7b:7a:57:6f:a9:5c:6b:d6:
         fe:ca:75:0d:f5:4b:6f:d9:19:da:8d:ff:bb:b5:c7:81:a6:36:
         ad:75:5c:69:c5:cd:a3:88:56:24:6a:43:1d:05:1e:ea:4a:13:
         b0:c8:f0:fd:58:ec:2b:de:2e:77:7c:f0:39:00:81:09:de:b4:
         ea:34:74:4e:ed:6a:07:e5:47:6b:9c:48:27:25:b9:3a:45:a9:
         89:7d:ed:35:3f:6c:62:f8:79:b1:f3:d6:b5:00:95:ec:97:5d:
         cd:c9:83:6c:3d:66:5f:75:23:e7:49:7b:70:35:e2:ab:83:e7:
         e6:d4:fb:08:92:31:ef:f6:c2:74:d2:32:8d:2f:8f:28:3d:80:
         28:a4:2f:6a:3c:83:b4:f8:db:02:0c:00:96:f5:98:7e:17:ff:
         38:75:d3:7a:d3:57:cb:af:11:70:96:c8:3e:6c:6b:54:16:d4:
         d9:e3:49:87:cb:88:27:25:ed:6e:32:ec:07:bd:d6:b9:42:2a:
         25:43:1a:2b:ce:42:59:6b:6f:de:aa:ca:c2:6a:ed:04:af:5a:
         e6:2d:1e:ed:a3:c0:b3:67:59:70:f8:a4:9c:44:b1:21:71:f9:
         ab:f7:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:36:40 2026 by rpki-client