Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: NeR3H3PoROXSsQCU5IJCV3yeJKNCMO5aLB1QALA/hJY=
Subject key identifier: 72:4B:55:52:F0:11:45:EF:6F:D9:C6:FE:E2:65:31:2D:BC:48:39:27
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 6BBBF1D887734CF96719C23FF8730998F96C98DE
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
Signing time: Tue 02 Sep 2025 11:02:17 +0000
ROA not before: Tue 02 Sep 2025 10:57:17 +0000
ROA not after: Tue 01 Sep 2026 11:02:17 +0000
asID: 396356
IP address blocks: 86.38.32.0/24 maxlen: 24
86.38.185.0/24 maxlen: 24
86.38.186.0/24 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.131.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.89.0/24 maxlen: 24
89.117.90.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.113.0/24 maxlen: 24
89.117.114.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.142.0/24 maxlen: 24
89.117.143.0/24 maxlen: 24
89.117.159.0/24 maxlen: 24
89.117.173.0/24 maxlen: 24
89.117.174.0/24 maxlen: 24
89.117.175.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/24 maxlen: 24
89.117.227.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bb:f1:d8:87:73:4c:f9:67:19:c2:3f:f8:73:09:98:f9:6c:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 2 10:57:17 2025 GMT
Not After : Sep 1 11:02:17 2026 GMT
Subject: CN=724B5552F01145EF6FD9C6FEE265312DBC483927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:7b:73:9e:c7:8c:35:24:8b:9a:a3:f2:75:
6b:87:fd:93:43:21:3f:b4:55:5b:fe:6d:34:b3:f7:
32:61:36:30:db:fc:d9:cf:dd:d6:53:66:d8:af:5f:
4f:8f:f6:88:ac:ad:bd:74:d4:58:c5:a5:63:df:e2:
f3:6b:a7:cf:bd:cf:e6:d8:6c:af:96:c9:67:29:d4:
c7:1c:66:1b:72:6d:21:13:bb:85:39:28:bc:9f:72:
e9:21:79:03:1c:a9:a0:ed:e1:3b:72:0a:6e:95:5f:
26:b8:57:ae:96:7b:81:69:3b:11:4f:0e:39:b4:1c:
72:de:15:0e:86:2a:d5:a7:d0:59:18:cf:0e:21:64:
97:4f:bc:00:98:16:62:59:5c:53:2b:49:e6:98:bb:
da:e6:cc:03:9d:dd:84:af:f6:9d:20:cd:40:c8:95:
ef:2a:3a:fd:a6:65:df:31:85:09:dd:ec:d0:11:ef:
64:14:e6:3e:fa:d6:a0:55:0e:9b:64:d1:fe:72:86:
52:23:0f:6a:d1:21:01:3f:c5:09:ea:aa:0e:6b:bb:
0d:fa:11:08:b0:fc:88:81:27:87:09:d6:09:ad:c3:
ee:3c:10:2d:6b:07:fa:2d:81:29:f1:cc:72:38:d4:
8e:d3:51:b5:97:81:49:32:93:f3:5a:97:25:87:b4:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:55:52:F0:11:45:EF:6F:D9:C6:FE:E2:65:31:2D:BC:48:39:27
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
86.38.185.0-86.38.186.255
86.38.241.0/24
89.116.99.0/24
89.116.112.0/24
89.116.131.0-89.116.132.255
89.116.154.0/24
89.116.158.0/24
89.116.166.0/24
89.116.218.0/24
89.116.223.0/24
89.116.248.0/24
89.116.253.0/24
89.117.89.0-89.117.90.255
89.117.101.0/24
89.117.113.0-89.117.114.255
89.117.118.0/24
89.117.142.0/23
89.117.159.0/24
89.117.173.0-89.117.175.255
89.117.190.0/24
89.117.216.0/24
89.117.227.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1b:dc:41:9f:b4:c7:aa:1e:dd:cc:03:e5:1a:6d:74:18:20:
8a:eb:fa:39:7c:82:fb:31:43:f2:2b:7d:f0:47:bf:f3:f0:27:
f7:dd:d4:a1:9a:44:c7:19:2e:ae:af:b7:2c:36:e2:04:72:f0:
4b:b8:b0:eb:60:30:19:e0:40:44:6e:79:43:4e:c2:66:a8:60:
06:55:40:b8:0a:a0:a2:4b:92:ea:29:d2:1a:d9:95:7a:53:c5:
a8:f7:a0:75:80:07:16:86:ad:78:93:11:23:98:96:28:cc:32:
d5:b4:b2:79:6c:d4:b3:37:3b:fc:3d:26:5f:63:ed:1d:5b:f2:
67:b5:3a:69:5f:9f:08:6a:4a:b7:c7:2f:92:b8:22:c3:34:7a:
38:a2:1d:15:8d:9e:18:39:c8:be:e8:29:96:f6:a7:1b:77:2f:
01:c7:0e:04:2a:77:f8:6c:ee:cc:68:60:67:6a:02:91:1d:4c:
69:17:d9:80:01:7d:ef:d3:b6:f5:3e:24:4a:4a:c3:8a:53:03:
a4:34:c5:2a:7f:c4:72:9b:95:a7:49:f6:92:17:82:5a:f0:65:
ac:d4:74:7e:3e:f9:8c:44:0f:1a:20:a6:cf:49:91:9b:07:00:
66:91:16:39:47:70:97:aa:4e:b3:b1:8a:f8:66:95:c7:28:2f:
53:1c:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:42 2025 by rpki-client