Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa
File:                     AS218862.roa (raw, json)
Hash identifier:          BrTaydTuOvWLkv2jFuUVuabYHW3sQlxntGpg3vV5evk=
Subject key identifier:   15:D8:23:C6:C8:8F:88:87:80:F2:70:BE:6E:A7:F1:76:F7:BD:E9:F5
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3AECCBE5452C65224DDA27E886068A6F8CEE5BFB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa
Signing time:             Mon 07 Sep 2026 06:21:28 +0000
ROA not before:           Mon 07 Sep 2026 06:16:28 +0000
ROA not after:            Mon 06 Sep 2027 06:21:28 +0000
asID:                     218862
IP address blocks:        89.116.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ec:cb:e5:45:2c:65:22:4d:da:27:e8:86:06:8a:6f:8c:ee:5b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  7 06:16:28 2026 GMT
            Not After : Sep  6 06:21:28 2027 GMT
        Subject: CN=15D823C6C88F888780F270BE6EA7F176F7BDE9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:41:a0:29:e5:bc:19:aa:7b:7d:c7:93:78:
                    91:63:32:83:18:c0:07:1b:05:41:d8:23:01:66:e1:
                    40:5c:2e:1e:7c:38:b6:f9:27:b8:1f:6a:5f:e9:4d:
                    1a:85:b2:86:9c:47:db:1a:50:19:fd:53:1f:85:88:
                    f5:ae:78:b1:7e:86:66:fa:ba:85:3e:a1:9b:b3:eb:
                    a6:f2:67:4e:7c:12:e9:d4:48:a0:7f:87:d8:4e:67:
                    c7:c3:bd:4a:50:95:0c:11:fa:3b:5b:a7:dc:19:2b:
                    a9:fa:cd:c8:16:89:ad:d2:10:d2:5b:d4:25:3a:fd:
                    84:63:96:c2:0e:ff:c1:57:35:05:7c:6e:01:1d:e1:
                    f2:48:ab:c8:3c:8c:8a:8e:ac:a4:b4:83:02:0c:0a:
                    a6:55:e1:6d:e7:5d:cc:86:5b:a9:01:96:a8:b4:00:
                    d9:f5:20:43:1f:1e:e0:79:b9:47:88:86:10:6f:cd:
                    d2:3f:25:3c:4f:89:ae:2f:f3:d5:93:7f:38:2d:4b:
                    4d:d6:0b:0b:20:4b:73:df:7d:01:a7:81:dd:3b:e3:
                    04:df:9e:ae:be:cc:20:f6:05:a8:aa:9a:10:45:6e:
                    30:55:fc:85:f6:32:f1:d1:f7:39:7f:2c:6b:d9:b3:
                    21:f0:39:6d:25:5e:57:06:a5:8c:9d:51:3a:9c:67:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:23:C6:C8:8F:88:87:80:F2:70:BE:6E:A7:F1:76:F7:BD:E9:F5
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:01:e2:83:18:c7:78:ac:de:8d:4b:e9:f4:d3:eb:95:d9:
         a0:30:4d:a7:3b:b1:6e:cc:ce:af:2a:eb:5e:bf:d1:44:70:e6:
         67:18:65:1f:30:6c:90:94:8f:32:b1:e1:06:cd:7a:2a:07:68:
         81:83:ce:3c:f4:70:5f:23:0e:95:a4:e0:a6:82:63:ac:dc:84:
         83:e6:9e:1a:15:cd:30:fe:15:0a:05:be:cf:62:cc:6c:17:60:
         33:7c:22:2f:7c:2a:07:f1:33:fe:bb:5a:cc:22:8d:74:d2:e3:
         91:49:1e:ea:27:32:28:16:96:7a:33:25:dc:08:65:ce:e8:52:
         03:b7:c6:2e:c5:14:f7:e8:67:10:62:43:55:11:f8:b5:bd:4e:
         8a:6e:f6:41:5d:8f:61:c6:3b:77:db:ef:f5:15:59:be:a6:2e:
         ef:92:a0:1e:ed:4d:ee:87:ca:e1:61:c0:a3:ea:d7:26:6b:08:
         a4:6a:11:84:81:f7:46:c6:b9:d1:03:28:63:7f:1b:f9:a8:35:
         37:56:b2:7d:41:f9:78:c8:c1:2a:9f:a4:36:5b:df:56:91:ed:
         f3:c0:a8:dd:1e:54:32:69:9c:56:e6:0e:a0:8d:20:76:5b:9c:
         13:21:7a:31:96:8c:80:3f:b6:12:6f:7b:d4:a7:79:b5:47:3f:
         58:28:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:46:54 2026 by rpki-client