Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          vMMGAl9jSvDEfC/zk5UO/QZm7eHpptd0+ZsFjLsVAU8=
Subject key identifier:   30:69:AB:64:52:33:E0:00:FC:D2:8D:59:6A:B3:B0:9E:6D:EF:C1:1B
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       27D5CC0A80DB4ADBAC489589B3F12733EB1EE952
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa
Signing time:             Tue 28 Oct 2025 06:42:40 +0000
ROA not before:           Tue 28 Oct 2025 06:37:40 +0000
ROA not after:            Tue 27 Oct 2026 06:42:40 +0000
asID:                     205886
IP address blocks:        89.116.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Nov 2025 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d5:cc:0a:80:db:4a:db:ac:48:95:89:b3:f1:27:33:eb:1e:e9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 28 06:37:40 2025 GMT
            Not After : Oct 27 06:42:40 2026 GMT
        Subject: CN=3069AB645233E000FCD28D596AB3B09E6DEFC11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:c0:db:35:b9:34:bd:8e:8d:03:1b:c5:65:
                    2a:9d:dc:d9:6a:35:a2:c9:43:fa:62:12:42:b5:35:
                    55:72:60:ec:3d:45:98:1e:0e:6c:c1:74:3b:54:3e:
                    4a:53:06:bc:c1:e7:1d:74:e4:27:cf:6f:b4:be:e0:
                    b6:42:73:82:58:77:22:70:e2:6f:7b:e4:11:06:71:
                    09:da:0f:d8:b1:fc:a3:78:05:24:0d:15:48:cf:83:
                    24:7f:6c:2a:28:9f:cf:99:f1:03:d8:e2:f4:d5:34:
                    fd:8e:52:e6:3c:a1:8f:4d:c9:f3:dd:5b:c5:02:d9:
                    1b:2a:b3:5b:b7:67:4a:da:8a:27:d0:dc:5c:16:ca:
                    4a:d5:74:be:04:7a:e6:f9:c9:c9:d0:5e:f0:b4:50:
                    6c:70:aa:d4:71:18:86:52:21:ad:52:d1:41:4b:96:
                    4b:8f:4c:b7:af:41:2d:99:5b:f9:06:53:7f:53:0e:
                    1b:c4:02:0b:64:2f:0f:ad:21:86:80:a7:46:05:3a:
                    8d:c7:da:b3:81:74:2f:53:5e:df:7e:3b:2f:98:3f:
                    46:e8:8c:c2:d1:05:77:fe:c3:5e:e2:0a:7a:3c:be:
                    c7:fc:18:0e:7f:7b:f0:3c:c4:9a:5f:19:b4:9b:71:
                    2b:ee:06:eb:cc:a6:ec:e5:bb:ae:35:eb:96:c3:1b:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:AB:64:52:33:E0:00:FC:D2:8D:59:6A:B3:B0:9E:6D:EF:C1:1B
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:1a:f8:0b:b9:13:71:1a:36:b0:e5:5c:87:19:c9:90:60:09:
         d9:7d:d2:d5:8b:00:00:35:6d:ca:08:2d:5f:41:33:07:ff:8a:
         df:56:a4:fe:01:92:d4:cb:91:bd:8c:9f:bc:c3:15:5e:9a:83:
         40:11:44:d5:95:74:e4:32:aa:2a:d2:41:9c:e2:12:8e:9f:07:
         92:89:a4:a5:44:08:63:5e:ef:24:36:e0:06:25:28:06:4a:00:
         67:e8:35:4f:9b:cb:3f:dd:01:08:a1:2e:9c:62:73:e7:f0:7a:
         e2:2a:d0:1f:30:b4:7e:42:43:92:83:5f:d8:1b:44:a0:3a:60:
         ec:7d:9f:5a:37:85:2e:7c:5b:67:fa:9a:30:7c:7c:03:d8:50:
         99:b6:98:9b:84:75:cf:97:06:95:35:b3:97:7c:34:2a:33:48:
         9c:6f:bf:33:e7:14:dd:fd:7d:98:e7:76:7c:6c:30:6a:cc:e8:
         bb:8e:45:d5:36:59:df:1c:86:46:80:be:bc:2a:67:58:85:88:
         83:9e:34:2a:10:e6:a2:bd:fc:a4:21:ac:11:ab:16:3a:bc:d1:
         ca:8a:dd:25:07:e2:ca:1b:21:76:98:d3:52:00:67:4a:3a:37:
         e5:96:c6:22:40:a7:86:89:1f:28:aa:ab:76:59:fa:37:5e:5a:
         09:29:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:28:42 2025 by rpki-client