Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa
File:                     AS58061.roa (raw, json)
Hash identifier:          fsxsDzYWInOHUYM4sJ8ch6kucBKDv+dkZO778hUPV4g=
Subject key identifier:   FD:9D:07:95:8C:0C:41:48:A9:2C:D5:5B:09:2B:CE:59:1E:8B:F4:9C
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5EE2E843A08E01B0B6433D0182849B79867BBB2F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa
Signing time:             Thu 09 Jul 2026 15:49:07 +0000
ROA not before:           Thu 09 Jul 2026 15:44:07 +0000
ROA not after:            Thu 08 Jul 2027 15:49:07 +0000
asID:                     58061
IP address blocks:        89.116.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e2:e8:43:a0:8e:01:b0:b6:43:3d:01:82:84:9b:79:86:7b:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jul  9 15:44:07 2026 GMT
            Not After : Jul  8 15:49:07 2027 GMT
        Subject: CN=FD9D07958C0C4148A92CD55B092BCE591E8BF49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:b7:72:8d:c4:ae:11:32:2e:96:a0:cf:5b:
                    55:d2:ee:81:22:33:54:b2:c2:e9:e8:00:8f:87:f3:
                    7a:e2:0f:36:82:b5:40:f6:d9:92:51:f1:c4:eb:3f:
                    69:43:3c:76:ef:4a:ce:35:bd:d9:01:a2:31:59:21:
                    c4:b0:69:35:b9:c4:0e:39:c8:01:ca:55:39:90:d3:
                    62:ad:fd:d1:c8:1b:42:59:f6:3c:7f:04:eb:89:30:
                    f0:03:0c:53:e5:a3:38:64:9a:b4:1d:3f:7d:5f:0b:
                    9b:11:07:39:fd:d8:d9:af:28:7a:a2:9a:75:75:ba:
                    18:57:96:2d:dc:aa:73:3d:c4:c3:ca:00:9b:76:a8:
                    5b:a1:0b:44:7a:d9:55:9c:ee:c4:87:d0:c7:fa:3a:
                    a8:ef:76:c2:5c:8a:cd:53:5b:8c:57:07:a4:06:1b:
                    8f:60:2f:fb:39:0e:99:68:63:13:11:1e:c4:49:38:
                    b1:f1:c3:77:cc:2f:c8:06:77:12:3f:cf:2c:62:06:
                    7a:e0:0a:8c:78:3e:50:81:d3:ba:4e:42:b5:c0:81:
                    fd:9a:76:8a:23:f2:41:71:aa:54:a9:9b:cf:c3:be:
                    99:70:5a:fe:37:70:28:6d:89:37:05:ac:45:c9:28:
                    a9:2d:38:1b:9f:05:49:6a:d0:f7:ee:28:6b:f5:cc:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:07:95:8C:0C:41:48:A9:2C:D5:5B:09:2B:CE:59:1E:8B:F4:9C
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS58061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:ff:eb:ee:68:6b:f0:3c:f3:bd:4f:d2:7d:0d:f6:95:07:28:
         26:f9:87:26:24:4c:72:b2:13:58:ce:5a:cf:11:ed:9f:65:5b:
         8a:33:a7:67:32:f7:32:c4:35:1e:0c:1f:cc:ea:40:08:eb:a6:
         7d:89:56:14:7d:b7:e7:af:85:51:8a:f2:35:20:c5:52:57:fc:
         20:ef:d1:55:cc:53:ae:cd:a7:30:32:07:d9:28:47:81:52:39:
         5a:5b:db:41:11:eb:78:15:2a:1b:6a:03:7b:9f:3a:a3:2a:3a:
         88:ba:e3:fe:e7:2f:fb:62:10:8f:81:a2:f0:2f:c3:d6:4e:49:
         fd:c5:ba:26:c2:4b:6d:a4:2e:1f:da:38:dc:21:89:1e:83:23:
         d1:cf:5a:a2:c7:03:c5:ed:6d:89:b0:56:bc:5d:7c:69:33:d6:
         56:b6:b2:72:4c:7e:d5:f7:fb:24:c7:eb:b0:fc:6f:2f:1f:9d:
         6b:52:3d:e4:39:43:59:db:e0:4e:35:b2:ae:ef:b1:ef:e4:5d:
         2f:b3:3c:24:9e:c8:c1:95:51:ef:0a:0d:ba:d5:2e:d0:c1:fc:
         ee:e5:47:d1:fa:db:e8:f9:f6:9f:95:9e:da:ea:7a:1a:e3:0c:
         e2:ca:e5:f6:35:cb:83:00:0b:1b:0c:b6:23:c6:38:8b:4e:4d:
         76:4f:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:10:42 2026 by rpki-client