Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          AsWAVBSW9HWxIDaA/xRqrsdfH0uLThoMJkxsrLwWOYc=
Subject key identifier:   55:56:6A:92:1D:DB:DF:A3:2A:B1:80:4A:5C:28:BF:00:A7:03:2B:2D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3369C1C8053C91671932D0ECBB5218FEB752850B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa
Signing time:             Thu 28 May 2026 14:53:08 +0000
ROA not before:           Thu 28 May 2026 14:48:08 +0000
ROA not after:            Thu 27 May 2027 14:53:08 +0000
asID:                     29802
IP address blocks:        89.117.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:c1:c8:05:3c:91:67:19:32:d0:ec:bb:52:18:fe:b7:52:85:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 28 14:48:08 2026 GMT
            Not After : May 27 14:53:08 2027 GMT
        Subject: CN=55566A921DDBDFA32AB1804A5C28BF00A7032B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:e0:28:da:75:62:ef:93:35:27:a1:04:1d:
                    a8:8f:de:68:e5:d3:ea:6f:94:31:7f:2e:49:a9:2e:
                    7d:fa:21:a1:cb:01:ac:d1:86:f3:e6:5c:dc:14:1e:
                    1a:bf:0d:9f:cf:c7:50:90:b6:82:a8:86:46:b0:ee:
                    70:c5:40:d4:9e:52:85:45:d4:f5:e9:76:62:36:04:
                    a3:4f:f9:db:b1:ca:5d:5e:ea:1a:4f:b4:2a:ba:a0:
                    e4:84:35:91:0c:3f:9a:e9:e8:8c:6f:2d:25:3c:f9:
                    e6:cf:5f:6f:bc:b1:0b:31:11:dd:7e:c3:b3:37:86:
                    dc:52:e8:b9:e6:19:a3:d3:c5:2f:36:fe:a1:fe:4c:
                    cc:24:52:93:ca:f5:49:6a:11:43:0e:17:23:93:b4:
                    b4:1f:26:0b:c7:98:7d:77:46:a2:a5:cb:df:24:46:
                    d9:5d:29:6f:c5:8b:91:91:f2:76:81:03:5e:93:40:
                    03:c1:79:e4:95:e1:18:25:bc:2f:71:21:18:6e:e2:
                    28:38:47:e0:bb:95:f3:04:c5:1a:ba:1e:6a:82:8f:
                    07:e4:6f:8e:f1:cc:33:bb:68:fe:ca:99:32:97:ba:
                    49:6b:c8:fe:14:35:77:87:e0:af:7f:59:f1:d2:77:
                    a7:11:5a:e0:c6:fa:6d:5e:95:87:e7:3e:0f:08:e5:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:6A:92:1D:DB:DF:A3:2A:B1:80:4A:5C:28:BF:00:A7:03:2B:2D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:76:2b:d3:73:0f:55:2b:bc:e5:85:3b:75:88:d9:44:22:3e:
         5c:86:b2:ee:59:de:db:52:12:e1:c4:45:a5:c6:be:93:e4:cc:
         66:7e:49:0e:f5:4a:31:fa:10:71:65:bf:38:71:bc:e7:8d:eb:
         14:53:ff:ef:1a:4e:75:41:41:0a:c8:a1:67:60:71:35:8e:4c:
         25:02:9f:0b:ec:e9:da:2f:bb:0b:0f:ec:7b:63:0f:4a:be:ee:
         0a:31:6d:3e:ba:a5:27:f4:93:1c:aa:03:c8:2b:9b:2b:10:72:
         85:54:41:c5:c4:77:0e:6e:ee:c5:43:ad:c4:20:f4:61:ac:e0:
         9e:94:8a:b9:13:3e:71:da:ec:b2:16:87:4f:4b:a6:82:9c:e6:
         a4:28:f5:ff:f6:f7:f6:54:93:88:28:8d:9e:af:c5:f7:88:a1:
         24:75:ae:60:02:d6:db:63:46:7d:5a:81:47:2a:1c:50:82:57:
         06:c0:b7:06:42:32:b3:63:13:4b:9e:3d:ff:40:aa:f8:90:6b:
         08:a4:10:c5:c4:35:5f:dd:9f:6d:69:35:6f:7f:1a:d7:b2:4c:
         fa:94:d3:77:a4:f1:1b:b7:73:98:87:71:3c:1b:24:78:1d:7f:
         b7:46:78:73:b7:07:38:cb:f6:4a:b9:17:9e:98:58:c3:88:5f:
         be:af:18:05
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUM2nByAU8kWcZMtDsu1IY/rdShQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA1MjgxNDQ4MDhaFw0yNzA1MjcxNDUzMDhaMDMxMTAvBgNV
BAMTKDU1NTY2QTkyMUREQkRGQTMyQUIxODA0QTVDMjhCRjAwQTcwMzJCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3OAo2nVi75M1J6EEHaiP3mjl
0+pvlDF/LkmpLn36IaHLAazRhvPmXNwUHhq/DZ/Px1CQtoKohkaw7nDFQNSeUoVF
1PXpdmI2BKNP+duxyl1e6hpPtCq6oOSENZEMP5rp6IxvLSU8+ebPX2+8sQsxEd1+
w7M3htxS6LnmGaPTxS82/qH+TMwkUpPK9UlqEUMOFyOTtLQfJgvHmH13RqKly98k
RtldKW/Fi5GR8naBA16TQAPBeeSV4RglvC9xIRhu4ig4R+C7lfMExRq6HmqCjwfk
b47xzDO7aP7KmTKXuklryP4UNXeH4K9/WfHSd6cRWuDG+m1elYfnPg8I5cL9AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUVVZqkh3b36MqsYBKXCi/AKcDKy0wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXXXMA0GCSqGSIb3DQEB
CwUAA4IBAQCEdivTcw9VK7zlhTt1iNlEIj5chrLuWd7bUhLhxEWlxr6T5MxmfkkO
9Uox+hBxZb84cbznjesUU//vGk51QUEKyKFnYHE1jkwlAp8L7OnaL7sLD+x7Yw9K
vu4KMW0+uqUn9JMcqgPIK5srEHKFVEHFxHcObu7FQ63EIPRhrOCelIq5Ez5x2uyy
FodPS6aCnOakKPX/9vf2VJOIKI2er8X3iKEkda5gAtbbY0Z9WoFHKhxQglcGwLcG
QjKzYxNLnj3/QKr4kGsIpBDFxDVf3Z9taTVvfxrXskz6lNN3pPEbt3OYh3E8GyR4
HX+3Rnhztwc4y/ZKuReemFjDiF++rxgF
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:44 2026 by rpki-client