Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa
File:                     AS51765.roa (raw, json)
Hash identifier:          5iePxQnGHdvoND5HWx2m8RwIsgMULyBBsaGrKI8cOmM=
Subject key identifier:   89:33:6B:C0:C2:E5:74:6D:23:5B:90:ED:5E:4F:7A:70:72:0C:B4:67
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7E1A7914633B665BF0F2496AB75682657AC71C02
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa
Signing time:             Thu 09 Jul 2026 15:49:07 +0000
ROA not before:           Thu 09 Jul 2026 15:44:07 +0000
ROA not after:            Thu 08 Jul 2027 15:49:07 +0000
asID:                     51765
IP address blocks:        89.117.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1a:79:14:63:3b:66:5b:f0:f2:49:6a:b7:56:82:65:7a:c7:1c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul  9 15:44:07 2026 GMT
            Not After : Jul  8 15:49:07 2027 GMT
        Subject: CN=89336BC0C2E5746D235B90ED5E4F7A70720CB467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:3a:56:0c:0b:43:6a:05:2f:3c:b4:5d:0f:
                    e2:11:42:8a:22:d5:08:0d:4f:98:9e:b0:a1:77:23:
                    73:a1:91:ad:76:67:a8:fd:1e:c9:bc:8a:fe:e7:f8:
                    2b:d0:23:b2:36:26:ad:9a:27:6e:7f:f6:48:0b:77:
                    bf:53:de:4b:48:ec:28:cf:c9:5a:79:91:59:e1:6f:
                    ae:85:07:5c:07:3e:14:7f:2e:7e:fe:e1:9e:af:36:
                    b2:35:be:9f:25:dd:7a:6d:ea:76:63:aa:71:9f:db:
                    17:d6:44:77:d0:a0:2b:f3:23:0d:81:63:39:39:42:
                    b8:26:49:f8:3a:fd:6b:4f:56:5e:02:c9:48:b8:e7:
                    6c:29:d0:30:cd:53:c7:00:f6:10:8f:3a:5f:94:35:
                    b7:95:2b:a0:27:b2:28:4a:a3:e9:75:0c:86:15:28:
                    4b:1c:f5:f9:09:56:8c:e1:79:70:88:50:14:22:02:
                    b4:bd:d1:8a:4f:30:65:97:2f:4d:1c:d5:60:64:50:
                    ba:64:d8:2a:0a:c1:af:e7:b8:30:98:91:c0:ad:4d:
                    de:44:60:f0:f2:11:c7:20:09:cd:5c:12:03:9a:46:
                    ed:50:02:a9:b6:6a:db:68:ec:73:ba:79:36:3e:6c:
                    c8:d9:31:62:79:38:d1:02:35:17:87:1d:17:9c:05:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:6B:C0:C2:E5:74:6D:23:5B:90:ED:5E:4F:7A:70:72:0C:B4:67
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:d5:2a:79:03:1d:39:37:2c:23:90:15:42:51:40:a3:b6:
         d1:c6:90:c5:bb:10:32:e9:11:69:c8:9e:82:c2:e2:5f:05:60:
         2d:3f:35:04:bb:c6:b3:e0:c7:9e:b6:95:8e:93:61:07:3d:3e:
         54:00:ad:df:1c:7e:f7:97:59:04:da:28:47:da:c2:71:a1:7f:
         16:d3:45:a7:1e:c4:b0:01:c0:0c:8c:41:7d:54:5b:bd:16:65:
         e4:fc:d1:62:70:5c:40:de:36:42:68:3b:be:55:fb:8f:b5:c2:
         09:fa:50:32:de:cf:3a:44:36:74:24:73:7b:4a:2c:12:43:ff:
         8f:22:fe:30:d4:e1:7b:c3:0b:63:58:16:d1:f9:a9:62:dc:36:
         d5:be:ec:b5:a8:9e:cc:ea:02:cb:4e:c4:ee:57:f8:15:e6:8a:
         73:3e:9a:58:de:17:0e:6a:f5:9f:79:35:f8:e6:bf:47:11:97:
         a2:6d:79:28:dd:13:6c:f8:4f:08:88:fe:26:8c:bc:65:ff:d4:
         14:39:37:35:6f:73:4f:9d:a6:18:e0:e5:b3:cd:33:f5:ae:c1:
         1c:eb:f8:8f:dc:67:4b:ca:f9:94:62:2c:2d:9b:1e:d5:61:8e:
         78:89:c5:73:0b:6a:be:f3:c5:94:87:89:01:e3:26:8f:ea:75:
         aa:ee:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:10:28 2026 by rpki-client