Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
File:                     AS273508.roa (raw, json)
Hash identifier:          lI8+57xH1KM/CamWYW1CCvM9x7k1ZV9e+BhsLqQMSP0=
Subject key identifier:   C9:21:77:55:5F:E5:0E:0E:BF:DD:F5:A5:7D:D9:AC:37:43:AF:56:FC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       01ECB5826D4A44B908CF5037D51F16F6CA3B1A6D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
Signing time:             Mon 02 Mar 2026 20:46:42 +0000
ROA not before:           Mon 02 Mar 2026 20:41:42 +0000
ROA not after:            Mon 01 Mar 2027 20:46:42 +0000
asID:                     273508
IP address blocks:        89.117.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:b5:82:6d:4a:44:b9:08:cf:50:37:d5:1f:16:f6:ca:3b:1a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar  2 20:41:42 2026 GMT
            Not After : Mar  1 20:46:42 2027 GMT
        Subject: CN=C92177555FE50E0EBFDDF5A57DD9AC3743AF56FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:53:b6:79:79:14:a2:10:47:9c:10:63:91:
                    d2:0c:0e:dc:74:6a:c5:3f:48:ef:67:ef:e4:a2:f2:
                    52:6e:d1:52:5b:18:cc:d9:dc:ca:9a:18:9e:e7:7b:
                    f5:3e:d3:b2:24:be:c1:2e:1b:4d:3a:51:8a:55:0c:
                    5c:f8:11:71:57:e9:f0:0a:e2:d6:47:56:e4:7d:0c:
                    07:5a:29:0f:ec:ba:da:bb:a3:57:8e:80:49:58:66:
                    3f:59:49:31:9b:68:fd:ed:69:bc:4f:5a:34:31:6c:
                    24:a3:23:1d:d5:33:6e:c6:32:7f:e9:2e:be:29:a8:
                    da:7e:43:ab:1e:5a:a4:55:9f:33:dd:d1:2b:74:cc:
                    a5:7b:83:5c:08:bb:08:05:8e:67:61:48:de:ca:bb:
                    ea:29:9f:a4:cb:0e:e3:8c:44:3a:d2:00:d1:97:0e:
                    c8:86:9b:5a:f9:4a:b5:59:79:b8:90:4c:6d:ad:e2:
                    fb:a9:ef:d1:8e:1e:4b:72:fb:02:84:80:cd:7d:be:
                    83:22:3d:6b:17:a6:cd:ea:fd:ac:67:37:15:a4:49:
                    cd:68:d9:10:4f:ff:51:a7:f3:58:b8:11:87:44:5e:
                    2f:05:18:db:61:4a:b8:d4:71:d9:14:c3:86:a7:1c:
                    c8:0c:a9:c7:88:3d:7e:05:e1:f2:0b:27:fa:ed:19:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:77:55:5F:E5:0E:0E:BF:DD:F5:A5:7D:D9:AC:37:43:AF:56:FC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:2b:8a:79:a8:77:b0:64:28:3c:b9:d7:a1:c4:03:5b:61:
         3b:67:94:5d:96:4a:b2:e0:1f:18:30:7b:9e:80:d5:a1:20:84:
         99:47:f1:be:b5:67:a6:7a:df:f3:76:42:32:9f:d8:60:3c:50:
         a1:9a:13:c1:fa:ed:e6:ae:d6:30:6e:20:86:77:f2:00:02:c6:
         b3:8f:76:99:68:e7:65:aa:d2:e9:cd:9b:3f:b2:f6:e5:b8:e7:
         77:98:32:92:0d:43:8c:43:6f:ed:dd:3f:a5:ec:cc:66:91:0f:
         22:ff:21:9a:45:8b:de:d7:a7:e4:9f:7f:c6:8e:d1:84:28:12:
         54:2e:18:4e:53:1e:1a:23:ef:08:5d:ca:e3:d5:3a:f8:be:6e:
         69:86:3c:79:9a:22:75:11:70:ed:ae:e4:9b:42:9e:08:42:61:
         43:8a:b2:72:64:50:54:04:27:5c:77:ad:36:a5:d9:de:f0:56:
         ce:e4:6c:00:60:8b:fb:6a:c3:b5:06:37:71:76:e1:87:76:38:
         6a:78:b5:bb:6c:47:59:1e:2b:72:96:04:12:b3:25:79:82:cf:
         d4:7b:35:27:b3:c3:31:2e:a2:ff:bc:9c:b6:00:46:64:a9:8d:
         77:2c:8b:db:75:c6:6b:1c:52:56:80:0f:15:b8:c5:7e:45:da:
         6f:28:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 08:07:33 2026 by rpki-client