Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          3XDwZA6XWpJeDPArdhQkH5U89ANutBgJe62D22fmmtY=
Subject key identifier:   03:C4:53:C4:C3:F7:0A:62:81:18:C2:9E:0F:5F:5C:BC:09:8C:CA:84
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       319F19450D2F0C9B95B6804926B9003BC8D1ED7F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa
Signing time:             Mon 15 Sep 2025 13:45:41 +0000
ROA not before:           Mon 15 Sep 2025 13:40:41 +0000
ROA not after:            Mon 14 Sep 2026 13:45:41 +0000
asID:                     13335
IP address blocks:        86.38.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 07:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9f:19:45:0d:2f:0c:9b:95:b6:80:49:26:b9:00:3b:c8:d1:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 15 13:40:41 2025 GMT
            Not After : Sep 14 13:45:41 2026 GMT
        Subject: CN=03C453C4C3F70A628118C29E0F5F5CBC098CCA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:54:9c:6c:59:f9:11:c2:52:9d:21:13:1e:
                    53:86:8f:14:cb:55:1b:4a:90:80:59:dd:27:1e:78:
                    c5:9e:1d:fe:b1:6c:62:05:01:09:da:f1:67:7c:a3:
                    81:73:f4:40:c9:ef:07:63:87:45:0d:a4:2d:e7:ff:
                    31:b4:f2:12:ab:f0:cd:c3:1f:86:99:b2:b2:1e:7a:
                    01:2d:25:79:24:86:d2:3f:9a:ea:14:3b:dc:04:ad:
                    a1:e3:b5:9e:3a:17:5e:cd:9c:d7:dc:3d:c6:8d:c8:
                    b4:60:3b:11:c4:c2:7d:e4:fc:cb:9e:71:f0:10:8d:
                    cc:d0:0d:0b:78:b5:4e:ac:5f:59:0f:61:a1:c5:41:
                    8f:bb:71:b1:36:31:9e:45:78:bb:fc:aa:67:38:de:
                    e9:6a:17:8c:6b:32:29:2a:d5:49:6a:56:ea:25:f7:
                    2c:2e:9c:d1:36:ff:98:bb:b4:c6:da:bc:71:81:85:
                    f6:db:46:77:a5:a5:5a:d5:6f:21:aa:59:9d:0e:db:
                    7d:27:ba:52:17:b9:05:1b:6d:b9:c2:88:3a:76:1d:
                    4a:d4:94:d5:75:a8:e5:f0:54:63:08:12:35:39:90:
                    6d:f5:0e:55:7d:44:c3:f1:86:5f:99:db:c8:67:06:
                    ac:fc:1e:de:7a:01:7c:54:28:b0:65:ee:cb:23:34:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:53:C4:C3:F7:0A:62:81:18:C2:9E:0F:5F:5C:BC:09:8C:CA:84
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:b0:0f:32:31:20:7c:07:82:e4:98:78:75:6f:96:19:4b:
         aa:a6:ec:1a:4e:07:3f:fe:ed:d7:2d:d1:17:8b:6b:48:92:ef:
         e9:86:c3:be:19:4f:87:2a:25:7d:ee:ef:6d:45:62:7d:29:05:
         3f:d5:b5:13:81:de:61:d3:f5:ae:81:19:c6:e2:77:c4:43:a6:
         fb:5e:d8:83:0f:ff:19:93:10:53:61:66:01:6a:94:f2:de:2a:
         87:28:92:fa:66:f1:82:ab:96:57:3d:f7:27:b2:a0:35:c6:bd:
         41:ca:41:05:da:33:30:89:f6:ae:c8:d3:bb:06:63:aa:c6:6a:
         8a:75:4a:2d:2c:e7:13:8b:25:82:fd:d6:71:ce:1e:6b:54:8f:
         5a:8b:b7:c7:cc:d3:d5:72:a6:d2:34:74:4e:7e:6b:29:c6:5b:
         af:a3:10:49:5d:48:76:25:c5:ed:2d:b7:a4:45:04:22:71:e6:
         e0:3e:72:97:32:8a:8a:8b:6b:39:b5:98:4e:e9:2e:98:79:97:
         17:5e:50:c2:c2:c0:a0:b8:51:6f:9b:07:f1:41:a4:c9:6e:cd:
         87:64:ac:b8:01:b9:05:6e:02:67:72:1b:ff:4f:db:82:9e:70:
         9f:1f:9f:c6:43:fc:69:30:cc:27:14:97:fe:1f:f9:c7:88:42:
         ae:b9:74:7e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUMZ8ZRQ0vDJuVtoBJJrkAO8jR7X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTA5MTUxMzQwNDFaFw0yNjA5MTQxMzQ1NDFaMDMxMTAvBgNV
BAMTKDAzQzQ1M0M0QzNGNzBBNjI4MTE4QzI5RTBGNUY1Q0JDMDk4Q0NBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERFScbFn5EcJSnSETHlOGjxTL
VRtKkIBZ3SceeMWeHf6xbGIFAQna8Wd8o4Fz9EDJ7wdjh0UNpC3n/zG08hKr8M3D
H4aZsrIeegEtJXkkhtI/muoUO9wEraHjtZ46F17NnNfcPcaNyLRgOxHEwn3k/Mue
cfAQjczQDQt4tU6sX1kPYaHFQY+7cbE2MZ5FeLv8qmc43ulqF4xrMikq1UlqVuol
9ywunNE2/5i7tMbavHGBhfbbRnelpVrVbyGqWZ0O230nulIXuQUbbbnCiDp2HUrU
lNV1qOXwVGMIEjU5kG31DlV9RMPxhl+Z28hnBqz8Ht56AXxUKLBl7ssjNBg5AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUA8RTxMP3CmKBGMKeD19cvAmMyoQwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVib7MA0GCSqGSIb3DQEB
CwUAA4IBAQAudLAPMjEgfAeC5Jh4dW+WGUuqpuwaTgc//u3XLdEXi2tIku/phsO+
GU+HKiV97u9tRWJ9KQU/1bUTgd5h0/WugRnG4nfEQ6b7XtiDD/8ZkxBTYWYBapTy
3iqHKJL6ZvGCq5ZXPfcnsqA1xr1BykEF2jMwifauyNO7BmOqxmqKdUotLOcTiyWC
/dZxzh5rVI9ai7fHzNPVcqbSNHROfmspxluvoxBJXUh2JcXtLbekRQQicebgPnKX
MoqKi2s5tZhO6S6YeZcXXlDCwsCguFFvmwfxQaTJbs2HZKy4AbkFbgJnchv/T9uC
nnCfH5/GQ/xpMMwnFJf+H/nHiEKuuXR+
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:11 2025 by rpki-client