Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
File:                     AS50673.roa (raw, json)
Hash identifier:          yC/UXp2M8PPW3RdvJlxDAKMzodQg+tfv82HrOK1Drek=
Subject key identifier:   52:E5:07:4B:5E:80:11:97:11:F6:3E:B4:FA:34:61:48:85:24:D2:EB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       401259DF2F3CA50D6A0332241A1197F2AAC8FE90
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa
Signing time:             Wed 12 Nov 2025 08:55:11 +0000
ROA not before:           Wed 12 Nov 2025 08:50:11 +0000
ROA not after:            Wed 11 Nov 2026 08:55:11 +0000
asID:                     50673
IP address blocks:        89.117.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Nov 2025 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:59:df:2f:3c:a5:0d:6a:03:32:24:1a:11:97:f2:aa:c8:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 12 08:50:11 2025 GMT
            Not After : Nov 11 08:55:11 2026 GMT
        Subject: CN=52E5074B5E80119711F63EB4FA3461488524D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:60:00:63:51:90:cb:b5:08:31:61:47:a6:
                    cd:a9:12:03:23:50:f0:24:a7:83:21:6e:77:e3:70:
                    05:99:f1:3a:e2:aa:e1:6f:f5:c8:03:b4:48:ad:5c:
                    6e:59:ff:10:ba:27:f6:8e:28:d8:5c:08:b3:f9:83:
                    19:83:29:cf:66:b7:36:78:f8:2a:b6:32:35:04:75:
                    47:4f:19:0e:22:88:e1:a9:86:c9:5a:b7:40:4a:e9:
                    e5:92:4f:59:20:8a:3c:49:02:cf:14:9b:36:94:bd:
                    1d:aa:d1:85:7f:78:61:01:03:87:e5:38:e1:d4:20:
                    31:f4:a9:14:0b:5b:84:ae:8c:86:79:37:25:2a:cd:
                    55:2d:ac:a1:f1:f7:b4:5f:d7:94:22:26:9a:12:1e:
                    1b:cb:2d:a1:bc:e4:43:72:34:6e:db:de:35:5c:ba:
                    45:d4:b4:f4:14:58:4d:e6:8d:30:b9:bf:37:9c:7e:
                    fc:9b:d7:f1:93:2e:5d:26:98:31:ea:7c:b8:ba:70:
                    bb:72:8e:4d:68:9d:17:85:ae:1b:23:b8:18:63:7b:
                    c1:94:a6:31:21:0e:f3:4d:25:ab:7b:26:ea:ce:a1:
                    0e:ab:31:1c:0f:51:46:7b:f1:0a:60:e8:37:1f:55:
                    6a:f5:51:e3:57:ea:68:db:c5:21:a8:7c:31:d2:f3:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E5:07:4B:5E:80:11:97:11:F6:3E:B4:FA:34:61:48:85:24:D2:EB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS50673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:79:51:c2:c4:a7:33:e5:42:b5:99:2c:dc:e5:a2:ba:be:3a:
         6d:62:64:d5:bb:bc:cb:03:ac:f5:08:0f:d7:62:af:01:5f:79:
         db:82:ca:fd:dd:ba:3a:8a:5b:c7:4b:e3:52:b7:1b:7f:d0:84:
         bf:4b:17:73:48:1c:f1:03:f6:b1:ce:38:78:fc:a5:36:c0:df:
         c6:c3:5d:35:aa:72:c9:34:00:65:aa:1d:45:fc:c2:24:be:d9:
         24:4a:cb:02:93:4f:82:dc:72:ba:52:f4:db:ec:22:91:ab:56:
         85:8b:5e:ff:6f:de:49:7a:1f:74:7c:1d:f8:96:ae:a8:dd:aa:
         59:8f:31:c5:46:57:ca:0d:fb:80:41:39:d1:08:9c:67:7c:b6:
         f3:b5:3c:38:ec:92:53:30:96:96:5e:56:39:25:f4:6e:66:a3:
         7e:c0:56:07:35:5c:55:ee:44:57:eb:ff:70:d0:b2:76:5c:b2:
         1c:37:2f:a4:e8:74:64:bf:99:7b:18:df:47:45:31:ad:c5:af:
         0c:22:54:d8:1b:bb:a5:32:cc:b3:f7:b2:ab:43:85:5d:ff:f7:
         dc:02:a8:91:2a:81:79:61:ad:4f:04:3a:4d:1e:3d:23:aa:f6:
         6f:9f:19:aa:35:a4:4e:45:c1:67:67:91:f7:2e:ec:f1:e7:39:
         a4:a9:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 18:33:16 2025 by rpki-client