Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS146813.roa
File:                     AS146813.roa (raw, json)
Hash identifier:          vWh3Pe7L79h6N1as6UkKnNxOJDNs0dMVTAgi6mHm/AM=
Subject key identifier:   10:2D:C6:D4:1C:7D:7F:E5:74:7E:60:09:2F:29:FC:15:81:C4:EA:EC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7E0DD8655FC303EE2ADE57548210561E4720471C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS146813.roa
Signing time:             Fri 25 Sep 2026 05:18:12 +0000
ROA not before:           Fri 25 Sep 2026 05:13:12 +0000
ROA not after:            Fri 24 Sep 2027 05:18:12 +0000
asID:                     146813
IP address blocks:        89.116.141.0/24 maxlen: 24
                          89.117.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:d8:65:5f:c3:03:ee:2a:de:57:54:82:10:56:1e:47:20:47:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 25 05:13:12 2026 GMT
            Not After : Sep 24 05:18:12 2027 GMT
        Subject: CN=102DC6D41C7D7FE5747E60092F29FC1581C4EAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:75:6a:1c:ac:cd:3a:b0:9b:1f:21:04:aa:
                    c0:b6:d4:ff:61:d7:9f:69:fd:04:e6:54:0e:18:14:
                    b8:79:b1:07:ae:3b:99:b9:c9:35:6b:c6:9c:0e:29:
                    d4:01:0c:9e:8a:c4:1e:06:84:4c:7e:a9:a1:3f:ed:
                    a5:7f:fc:4d:b6:25:d1:25:91:bf:58:aa:50:c2:93:
                    0b:ca:8c:1c:5f:b0:7b:87:61:6d:56:28:96:f3:b7:
                    c9:32:fe:f5:6f:2f:8e:bf:3e:1a:9b:db:89:ca:eb:
                    b0:d3:7b:90:a9:ee:95:1b:5d:73:3c:fe:7e:73:22:
                    a3:5e:b3:91:69:73:f1:c8:c3:23:22:c4:09:a5:20:
                    fe:c9:eb:1c:b4:08:25:2b:f4:3e:08:7a:5a:ec:07:
                    26:14:b6:4b:98:0b:0d:1f:56:42:29:b3:ea:e5:de:
                    54:6c:11:b8:64:66:a0:8b:0d:56:4f:12:bc:22:16:
                    dc:8d:07:25:2f:e8:2e:cb:90:83:6b:0d:8c:13:7c:
                    75:55:8d:d0:3d:27:6c:75:57:4f:89:f1:76:cc:2c:
                    f1:26:ea:55:ea:fc:96:d9:7c:00:55:ed:51:8c:89:
                    9e:b1:44:36:3e:ac:91:c9:54:e0:c3:04:7d:80:44:
                    e6:33:b0:ec:d3:1d:32:be:dd:77:2d:30:2f:6a:44:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:C6:D4:1C:7D:7F:E5:74:7E:60:09:2F:29:FC:15:81:C4:EA:EC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS146813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.141.0/24
                  89.117.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c6:56:05:82:9f:98:0a:0b:c4:1b:2d:f8:f9:90:ed:dd:c7:
         62:40:6d:1a:bd:1f:57:eb:65:8e:f1:ff:09:57:4f:1f:03:90:
         21:f7:a8:db:79:80:3c:8f:5a:19:e3:5e:2a:05:9b:d3:72:d9:
         d8:6a:76:6a:46:f5:fa:07:20:e1:c1:b2:e6:bb:c6:02:8f:67:
         4f:45:8f:91:4f:3a:cb:1d:d2:d7:3b:48:bf:d7:c4:38:86:2f:
         e3:af:82:68:15:70:a0:41:8d:4c:86:4f:45:21:a0:c2:83:fc:
         1b:25:30:9b:8e:87:28:b3:0c:45:73:b5:80:b1:61:d2:01:4d:
         9a:99:11:d0:84:1c:1a:29:4c:6f:1c:01:5a:d8:93:0e:41:a6:
         43:fa:2e:e1:be:04:0b:a9:f8:f1:5b:35:e7:61:50:65:53:66:
         90:d5:eb:7f:52:e2:86:11:ce:65:8d:78:59:d4:5e:aa:49:89:
         8f:69:43:f9:16:93:ae:28:a5:9f:ea:00:0d:f8:b9:cb:83:7a:
         86:6f:dc:0a:41:14:34:99:74:db:ee:64:41:34:3a:ae:55:f6:
         68:17:98:40:95:41:4a:64:65:88:fe:15:a9:ec:55:18:7b:22:
         dc:80:e6:cf:30:a5:6e:b2:e5:6d:09:38:f9:54:cc:0a:6f:21:
         f5:b4:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:21 2026 by rpki-client