Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa
File:                     AS59432.roa (raw, json)
Hash identifier:          tMjWPApa6HFTjACx8/WkWq37wxYzSmlEWvX6DhGza/c=
Subject key identifier:   7C:CB:90:46:2A:D7:23:75:19:FD:76:3C:A4:EB:DB:4A:8B:C0:F3:E2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3E139271FD8386B80749A0B937D27AC201B1A908
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa
Signing time:             Mon 18 May 2026 01:47:14 +0000
ROA not before:           Mon 18 May 2026 01:42:14 +0000
ROA not after:            Mon 17 May 2027 01:47:14 +0000
asID:                     59432
IP address blocks:        89.116.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 06:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:13:92:71:fd:83:86:b8:07:49:a0:b9:37:d2:7a:c2:01:b1:a9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 18 01:42:14 2026 GMT
            Not After : May 17 01:47:14 2027 GMT
        Subject: CN=7CCB90462AD7237519FD763CA4EBDB4A8BC0F3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:b6:43:85:64:e0:d0:69:b5:fe:7e:c0:99:
                    7e:b7:98:2a:bc:f3:52:85:a7:88:53:3e:48:32:4c:
                    8c:c0:e4:d2:85:d8:4b:8a:73:65:74:eb:af:b8:17:
                    bf:82:6d:7c:fb:bf:f6:4c:75:db:f3:b0:7d:48:66:
                    8b:c8:ec:00:3d:17:5e:4e:e1:5e:9b:d9:1e:7b:44:
                    c8:9d:c5:19:60:6d:5d:31:c2:a4:12:d3:19:4b:df:
                    66:15:8a:52:f5:a4:16:09:18:e9:21:b6:5c:a5:0c:
                    f0:63:0c:27:0f:71:8d:3c:90:57:e4:a7:39:9a:21:
                    31:eb:13:e4:d5:e2:c1:80:51:a1:00:f7:de:34:44:
                    d2:88:13:c9:27:b8:24:7e:77:46:c7:56:bc:5d:e5:
                    19:61:c8:56:30:91:d7:0a:28:ae:af:9c:05:d3:07:
                    65:70:e7:ca:90:31:a3:df:e6:46:48:4f:51:9a:df:
                    2d:e3:24:68:93:e0:a7:78:1d:32:c6:5e:6e:f4:25:
                    ff:a9:18:22:1c:05:8f:02:de:e3:65:0d:74:92:fa:
                    80:db:83:81:50:e7:53:c0:ec:16:21:e5:95:68:b2:
                    ee:5b:ee:bf:8c:f3:84:66:0d:45:e9:24:11:5e:3e:
                    a5:db:b0:7d:c5:63:5d:bf:58:0b:78:b8:9a:96:9a:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:90:46:2A:D7:23:75:19:FD:76:3C:A4:EB:DB:4A:8B:C0:F3:E2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS59432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:0a:d9:2a:b0:6c:c4:86:1e:03:02:58:43:71:3a:43:09:2a:
         15:68:66:9d:08:3e:68:ff:81:15:c4:40:15:81:44:a2:a7:5e:
         fd:44:1a:32:b8:74:cb:da:a2:44:b2:87:03:8a:45:28:1c:62:
         f8:14:de:ec:3e:9c:1f:90:f5:32:21:3b:6a:fe:7e:f4:00:c5:
         b2:f4:ca:b6:61:f2:2b:7c:f1:14:98:ba:14:53:5a:ff:7c:01:
         eb:7d:5e:ee:2e:26:47:f2:f9:69:ee:ce:6a:cd:4d:57:7d:11:
         7c:4e:cc:43:68:82:e2:6f:5e:26:51:c9:c5:58:37:07:2e:10:
         4d:cc:c3:7e:d1:4e:21:d2:2b:bb:6e:90:5e:c8:74:2e:0d:10:
         90:08:0c:41:0b:62:7a:f9:89:ad:eb:44:69:bf:99:d0:10:ad:
         2c:8f:6d:ed:e3:79:e8:50:00:00:40:b8:13:80:e1:31:72:a7:
         5f:b4:6a:06:6f:35:4d:a0:5d:31:9e:a5:16:8e:b8:b6:7b:00:
         5f:8b:82:56:b8:c9:5e:2e:4b:1a:95:a2:c7:e8:a2:d7:f3:18:
         5c:36:a3:96:78:57:77:39:82:ee:f8:a5:af:90:26:7a:05:a4:
         5e:81:3d:28:fe:e4:ee:bd:ae:78:cc:70:67:5a:1d:e0:bd:bb:
         55:7a:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:37 2026 by rpki-client