Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
File:                     AS273508.roa (raw, json)
Hash identifier:          bC+N8cYtC1+VMjDKz8Xu9ObIKS29UmkdVlzhPRZhXvI=
Subject key identifier:   16:DC:B9:72:88:AF:8D:77:7B:44:28:13:4E:06:9E:34:95:F3:B4:CB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5CB87E559D33A5049686311BB9785E0743986DC6
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
Signing time:             Mon 31 Mar 2025 19:54:00 +0000
ROA not before:           Mon 31 Mar 2025 19:49:00 +0000
ROA not after:            Mon 30 Mar 2026 19:54:00 +0000
asID:                     273508
IP address blocks:        89.117.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 08:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b8:7e:55:9d:33:a5:04:96:86:31:1b:b9:78:5e:07:43:98:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 31 19:49:00 2025 GMT
            Not After : Mar 30 19:54:00 2026 GMT
        Subject: CN=16DCB97288AF8D777B4428134E069E3495F3B4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:2e:98:6d:af:5c:5c:80:59:d7:03:e5:12:
                    8a:8d:da:0b:ae:4c:33:32:a0:15:b3:25:c5:ea:da:
                    4e:ef:11:0a:76:b0:50:0e:c3:2b:d5:2f:b4:22:56:
                    b8:70:dc:d5:30:6e:93:19:62:92:53:48:d2:03:21:
                    94:5d:21:c8:f0:7a:01:c8:72:d3:5d:87:fc:38:32:
                    a9:f1:5b:89:07:3a:56:01:56:dc:8f:b0:88:db:4a:
                    7c:84:53:40:8b:81:e2:19:fc:f0:df:d3:9a:53:aa:
                    d8:63:40:05:fd:dc:12:1c:df:6c:c7:82:60:e5:a1:
                    d8:71:24:72:7d:9a:64:ae:01:2f:2c:ae:15:78:40:
                    75:5c:43:14:b0:16:b3:4a:1c:0f:0b:7f:73:f1:68:
                    db:92:c2:ce:c9:3b:f2:8e:57:7d:77:71:3c:c7:bf:
                    8e:b3:63:e6:be:8f:82:48:f4:60:5f:9b:90:2b:a7:
                    60:0f:ee:17:a3:99:20:77:c2:09:fe:39:52:65:5b:
                    95:4e:19:f5:60:6b:b9:ec:59:92:a7:b9:6d:4c:87:
                    25:56:e7:58:6f:25:18:f7:5b:49:90:a8:26:99:4b:
                    4f:05:17:a8:94:62:9a:fc:23:cd:cc:a6:3d:2e:17:
                    ec:16:50:0f:69:64:9f:db:a4:e1:20:87:fe:17:f4:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:B9:72:88:AF:8D:77:7B:44:28:13:4E:06:9E:34:95:F3:B4:CB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:d1:75:01:1f:70:81:a4:be:44:56:13:84:8f:e0:f1:32:
         9f:98:e9:24:2c:4d:e9:97:53:83:38:76:d4:09:e4:ac:51:4e:
         f5:80:c0:18:46:47:54:ae:18:41:ef:7a:83:0a:62:99:e2:49:
         75:c5:14:5b:52:33:f4:b4:dd:11:e7:bf:01:75:73:59:09:d6:
         d8:28:c6:2d:c2:39:b8:10:33:a9:4b:e8:45:a8:d0:68:c2:21:
         97:2b:7e:e9:e1:54:01:07:be:c0:9b:54:80:ba:19:d3:83:4e:
         0b:bb:7c:a8:76:d3:97:81:6a:24:43:b6:e8:4f:00:3c:cb:5a:
         41:e3:48:17:82:0b:c3:87:2d:53:11:26:44:ec:aa:d6:36:b5:
         fd:4a:9d:69:c8:b9:27:9e:0b:e8:a7:ea:ff:98:66:96:bd:2c:
         91:01:54:d0:f1:46:55:1b:de:25:1c:61:14:2f:60:80:94:1c:
         5d:7f:2f:7f:c2:f5:17:3d:25:1b:a9:fd:c6:79:4e:4f:7c:55:
         02:84:f6:57:64:16:d0:cf:21:a3:68:d7:7c:7d:47:ff:2b:3e:
         2e:6c:82:74:a5:f7:5d:d1:d2:cb:33:fd:97:9f:96:1d:14:2c:
         75:a3:bf:a9:5b:e9:f6:d1:51:85:7f:88:86:31:f0:7e:c4:0b:
         f2:d9:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:09:48 2025 by rpki-client