Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
File:                     AS24723.roa (raw, json)
Hash identifier:          FZocnDYJWGFtwllNR6tETr2z+AsCYljJYyulR43v4l4=
Subject key identifier:   AC:5D:AE:82:14:A0:9C:A0:60:60:2F:4B:F7:FB:93:60:4B:08:12:F0
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2C683CFC7633832DF674302E189465139E8A121E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa
Signing time:             Fri 21 Aug 2026 07:49:30 +0000
ROA not before:           Fri 21 Aug 2026 07:44:30 +0000
ROA not after:            Fri 20 Aug 2027 07:49:30 +0000
asID:                     24723
IP address blocks:        89.117.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:3c:fc:76:33:83:2d:f6:74:30:2e:18:94:65:13:9e:8a:12:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 21 07:44:30 2026 GMT
            Not After : Aug 20 07:49:30 2027 GMT
        Subject: CN=AC5DAE8214A09CA060602F4BF7FB93604B0812F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:c3:4c:71:37:1c:46:ae:0e:43:ae:4d:9f:
                    1d:37:53:4a:38:98:b5:6f:2e:fd:74:03:8a:29:7d:
                    13:f5:5e:78:17:84:6c:32:d9:bc:d2:6f:f6:79:3d:
                    a3:dd:8e:82:94:5d:a5:f1:5c:49:c5:77:c0:f8:64:
                    37:2a:f7:06:00:b4:a3:74:2f:3d:c9:28:71:d7:4d:
                    5a:83:16:94:fe:fd:b0:f5:1d:a2:18:1b:74:5a:f5:
                    95:54:70:71:3a:44:d5:9a:70:74:05:cc:bd:1c:02:
                    4a:44:8f:10:da:61:c0:aa:06:85:8c:0d:25:bc:7a:
                    cd:ca:be:9f:36:17:64:01:31:c7:db:f3:55:01:7b:
                    b2:76:0c:16:30:89:99:fd:48:45:9c:c9:18:a7:f2:
                    aa:33:9e:3a:ee:31:01:25:08:30:b4:ff:46:c9:b8:
                    24:58:fc:22:e3:26:bf:ea:55:ad:3c:42:38:cd:cf:
                    3e:0d:7a:78:1f:a6:91:e2:a0:42:91:4b:41:45:ae:
                    25:76:bd:fe:57:ec:f1:02:56:62:c7:f5:9e:75:fd:
                    4c:96:1e:74:9a:3b:e8:d6:e6:52:05:4c:93:66:8f:
                    eb:73:8e:97:c3:bc:2b:7c:a9:24:c3:32:c9:91:6e:
                    be:64:21:ca:33:f8:73:c9:a9:dc:2c:69:51:ef:6e:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:AE:82:14:A0:9C:A0:60:60:2F:4B:F7:FB:93:60:4B:08:12:F0
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS24723.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:0f:94:e7:eb:a4:b2:27:4d:cb:3d:3d:d6:80:6a:5f:7e:
         91:8d:d8:b4:b2:e5:1a:dd:00:43:25:a9:e8:db:32:53:0d:9c:
         9c:47:84:c8:c9:7a:08:7d:bb:4a:b1:bd:17:65:62:3b:bd:1a:
         e7:c6:e1:41:06:00:28:73:84:f9:c1:85:83:8e:83:46:b0:f0:
         01:e3:ee:ff:41:23:bb:27:5c:bd:dc:40:1a:f3:9d:12:17:7c:
         c3:70:e0:4d:16:f9:a1:50:57:a3:b8:bb:fa:73:0e:8c:ea:84:
         3a:2d:a1:a2:58:58:ce:fb:45:20:d4:cb:f9:03:29:ae:6a:48:
         fc:00:1a:de:1f:a8:fa:fe:91:4e:ae:48:6d:23:e2:ab:e9:e8:
         ed:0d:49:0f:ff:f3:04:4b:1b:ac:04:8f:59:7b:b8:a2:ed:58:
         18:65:48:d4:70:ff:a1:b5:34:6a:62:28:56:82:bd:c8:c1:2c:
         90:29:82:4a:19:fd:cd:0d:04:01:79:45:b7:f2:1f:c8:9e:82:
         d1:8c:2f:8e:13:f4:42:06:8c:cb:af:6d:81:f6:79:6d:35:d2:
         cd:07:58:93:c3:29:37:5a:1d:d0:04:e9:c5:a1:52:67:62:1b:
         a0:fd:67:ea:a3:33:63:bb:7a:aa:c6:57:e9:22:6f:9c:cc:67:
         a1:46:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:57 2026 by rpki-client