Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa
File:                     AS203048.roa (raw, json)
Hash identifier:          D15Pdupf27TA+BxKP1Cp6P+Vd9q4Te43k6RLRWYs0ZE=
Subject key identifier:   8F:4E:28:A6:C1:AD:8D:48:C6:41:CE:B2:1B:6B:8F:5C:3F:35:B1:AC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       351E9ECFBE3CC2873C99CB519438032C1AF2CA0C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa
Signing time:             Sun 05 Apr 2026 02:05:53 +0000
ROA not before:           Sun 05 Apr 2026 02:00:53 +0000
ROA not after:            Sun 04 Apr 2027 02:05:53 +0000
asID:                     203048
IP address blocks:        89.116.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 13:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1e:9e:cf:be:3c:c2:87:3c:99:cb:51:94:38:03:2c:1a:f2:ca:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr  5 02:00:53 2026 GMT
            Not After : Apr  4 02:05:53 2027 GMT
        Subject: CN=8F4E28A6C1AD8D48C641CEB21B6B8F5C3F35B1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:66:20:d8:c4:37:3c:da:ea:81:2f:e2:71:
                    ea:47:79:a4:26:e7:f9:66:dd:f0:9a:21:8b:e8:dd:
                    92:dd:a8:24:6e:28:37:a2:b2:0e:8d:50:62:81:ae:
                    b8:14:4c:77:97:7d:4d:42:9b:0f:f0:07:f3:1b:e9:
                    a0:b6:17:1f:ee:87:ec:fd:e9:69:49:2b:17:92:81:
                    f5:9b:e6:50:e5:78:98:e0:5f:fd:a4:8d:4f:04:98:
                    21:9a:8c:db:74:0f:3f:ae:5a:c9:a1:32:78:7e:7e:
                    57:8c:9d:bb:84:27:4f:b3:6a:da:c0:fe:c6:0d:3b:
                    24:03:f1:20:fb:f5:6e:c7:ce:7d:cf:23:42:48:17:
                    8e:37:d1:4f:2e:87:8f:18:56:44:59:76:bf:4e:52:
                    43:6e:8d:04:c8:e9:e1:2b:5b:cd:22:fc:68:a8:cc:
                    23:78:f3:c6:2c:45:2b:cb:e2:b5:cd:84:3d:6e:ce:
                    a7:7d:21:86:b9:d8:fa:4b:95:1a:e3:7e:d1:84:a4:
                    d5:97:a7:b8:b0:95:6e:3b:08:0a:f7:18:6a:ef:e1:
                    6e:f7:8b:73:9e:0a:54:24:21:5f:64:ad:58:0f:9b:
                    d2:68:24:88:fb:64:e5:10:ce:4d:4c:97:12:26:00:
                    4f:f0:c0:31:47:45:fe:eb:c3:66:c9:4d:52:0f:93:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4E:28:A6:C1:AD:8D:48:C6:41:CE:B2:1B:6B:8F:5C:3F:35:B1:AC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:af:02:97:e9:68:9c:25:af:3c:87:83:9c:c6:4d:12:6a:
         3f:41:e8:79:77:95:de:fb:41:0e:c9:c0:32:ba:0b:8f:57:c7:
         f4:c1:5c:f6:95:4a:40:ef:59:16:a8:c4:ec:5b:53:5e:e8:ee:
         34:ec:6c:53:df:d3:bd:07:ce:04:6a:59:ed:0c:f1:14:b6:00:
         66:c0:4a:c4:b2:27:be:c6:00:0d:ac:41:d0:80:ab:ba:09:45:
         0e:4f:34:36:15:93:18:a7:41:b2:26:ec:a6:36:19:1e:e7:2d:
         a0:bf:df:01:2a:b2:10:80:0d:c0:6f:1b:5d:c4:ae:63:3b:26:
         76:29:7d:0a:ad:22:28:a4:cf:75:a7:8c:4b:19:33:69:3e:d1:
         69:17:9d:b5:19:aa:d6:2e:8d:47:83:80:ea:21:02:7c:d1:eb:
         04:98:2b:c2:df:dd:96:ea:61:4a:e6:ae:7d:67:36:dd:b6:a7:
         51:d5:d4:f6:79:83:c8:ac:36:7a:1e:b0:03:84:2d:99:0c:5a:
         5f:60:62:b4:b1:eb:6c:46:12:ed:9d:90:62:18:a7:a2:89:6f:
         18:d6:36:2a:03:dc:b4:55:0f:28:1b:b1:ed:24:b0:78:01:93:
         0d:c7:9a:20:86:b1:6a:51:3b:c4:7f:9b:cb:13:f6:bb:16:50:
         88:84:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:40 2026 by rpki-client