Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          Jp54nbRbY2FMyPTm6tw6LcTD8VVBUGf4OgFkoVfKka4=
Subject key identifier:   59:05:FA:AA:7D:9A:89:9E:08:41:93:BE:F0:15:29:87:83:FC:E3:63
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       01A67997619E33D41C8F7A88DEB1D4E2A047CB6A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
Signing time:             Sun 24 May 2026 00:03:45 +0000
ROA not before:           Sat 23 May 2026 23:58:45 +0000
ROA not after:            Sun 23 May 2027 00:03:45 +0000
asID:                     61317
IP address blocks:        86.38.177.0/24 maxlen: 24
                          86.38.183.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 01:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a6:79:97:61:9e:33:d4:1c:8f:7a:88:de:b1:d4:e2:a0:47:cb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 23 23:58:45 2026 GMT
            Not After : May 23 00:03:45 2027 GMT
        Subject: CN=5905FAAA7D9A899E084193BEF015298783FCE363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:d4:52:62:5d:c8:40:7c:5e:c2:bb:fe:3e:
                    f5:18:39:fd:2c:6c:dd:99:a7:51:71:78:68:7f:d7:
                    cd:6c:af:f0:03:b8:5c:24:61:c1:95:9a:43:68:36:
                    bb:0a:46:73:b1:78:35:3c:df:1a:68:43:15:85:e0:
                    69:6c:e9:e4:ce:f4:1f:23:9f:5e:b1:78:47:ee:87:
                    22:2a:bb:8d:50:9b:24:78:cf:79:45:46:b0:84:93:
                    0b:cb:ea:85:8f:65:ff:35:a4:59:a0:47:a5:2e:ee:
                    48:3e:a8:69:e7:cd:f3:01:b0:89:86:e7:70:b1:85:
                    30:27:a3:d2:e1:d2:4f:42:02:88:b9:dd:7e:05:b2:
                    f6:d6:7d:ad:26:b6:a2:2b:d0:2e:73:ae:a4:05:57:
                    fa:46:91:8a:26:a2:09:01:76:7e:d4:21:6b:68:67:
                    7c:28:62:c0:a3:6e:81:c9:1d:dd:e1:51:75:ad:fd:
                    09:5a:0f:cb:20:c6:cd:c9:a9:78:9c:a4:5c:31:d0:
                    fa:73:70:7f:12:4c:d5:f5:1a:c4:2e:8c:1d:82:e5:
                    e3:61:3c:cd:73:a8:34:a7:0f:8c:b4:8c:9e:92:74:
                    09:7e:bf:b6:43:b4:1a:8b:4b:71:1c:71:6d:c4:7a:
                    28:db:a3:ae:ba:22:f6:18:6c:0b:b9:a2:12:09:79:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:FA:AA:7D:9A:89:9E:08:41:93:BE:F0:15:29:87:83:FC:E3:63
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.177.0/24
                  86.38.183.0/24
                  89.117.126.0/24
                  89.117.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:5b:81:be:f1:6e:cc:f1:84:c6:38:bc:0e:55:4a:19:4b:
         45:71:5d:14:d9:10:01:42:11:09:aa:8a:87:47:34:fb:66:a7:
         69:c6:91:3a:b1:bb:4c:02:62:b3:72:d8:2c:6c:7e:63:81:8a:
         db:13:8d:be:af:af:02:37:16:10:be:d2:d2:99:03:29:9d:4b:
         df:77:42:dc:39:26:8a:46:70:90:08:63:8e:c9:80:3f:b1:3c:
         5c:cd:2f:27:08:c0:4d:cd:1f:b3:4d:82:60:bf:e6:27:fe:17:
         4c:29:70:69:2a:fc:db:15:df:19:b4:e5:46:dc:b5:41:ec:c1:
         d7:bc:ad:79:ae:36:50:46:80:ee:e7:f2:af:d8:62:29:59:02:
         52:ad:f2:dc:1c:54:8d:e3:8a:b6:e2:aa:d5:0b:a3:d9:7c:80:
         f1:46:2c:04:0d:fe:a7:f5:b3:5f:bb:43:3d:6b:55:0f:3e:6a:
         3d:6e:31:8f:87:c9:60:3a:8b:77:74:0e:d3:5e:dd:c6:55:02:
         38:55:51:22:f9:4b:50:04:6b:c1:ce:ad:7c:fa:13:ec:cc:b5:
         d8:b5:c8:15:ff:24:33:5f:78:1c:1c:f5:06:2a:fd:13:92:84:
         cb:de:c1:a1:80:9b:40:a7:74:b6:9e:f3:d6:ec:3b:83:92:a9:
         7f:8b:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 10:24:04 2026 by rpki-client