Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          6dENEcXkTrffxCSWveDSQH/Y/Almky/eEggD2M0mjQ0=
Subject key identifier:   FE:B4:AB:3C:B8:DC:EA:67:5C:CB:F2:E4:5D:C2:A7:36:B0:AE:BC:75
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       334743901D697B1D80B1015C6E9F27D7547F49F3
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa
Signing time:             Fri 06 Nov 2026 09:49:40 +0000
ROA not before:           Fri 06 Nov 2026 09:44:40 +0000
ROA not after:            Fri 05 Nov 2027 09:49:40 +0000
asID:                     19437
IP address blocks:        86.38.189.0/24 maxlen: 24
                          89.117.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 23:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:47:43:90:1d:69:7b:1d:80:b1:01:5c:6e:9f:27:d7:54:7f:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov  6 09:44:40 2026 GMT
            Not After : Nov  5 09:49:40 2027 GMT
        Subject: CN=FEB4AB3CB8DCEA675CCBF2E45DC2A736B0AEBC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:0d:47:8b:ea:01:b2:66:d7:84:09:7d:ad:
                    d3:00:39:9c:5c:e6:2f:04:c4:c5:ba:4f:0c:6f:0d:
                    12:f2:4f:37:1e:be:bb:0b:88:e1:b5:1c:67:ef:30:
                    12:fd:84:d6:ac:97:fc:35:c7:cb:4c:9c:88:5f:d1:
                    9a:bd:6d:35:cf:c0:91:4c:e5:10:aa:11:7f:44:3e:
                    49:24:68:e7:f8:da:1e:2b:0e:e5:fb:78:a3:ca:2b:
                    af:03:91:e8:37:38:99:8d:ad:39:90:9c:88:8a:99:
                    8b:ce:97:06:4c:8c:b2:71:1a:ba:d5:7b:7c:16:b7:
                    b0:c9:09:87:3e:1d:b6:38:d8:d1:95:19:93:88:fd:
                    ee:3b:f0:34:30:88:d8:f1:3f:c5:3e:53:34:43:47:
                    c1:d9:c9:30:fa:b0:70:d9:93:39:93:c3:50:78:79:
                    a6:cc:68:d5:98:eb:a5:38:6d:be:20:8b:ff:18:ef:
                    85:2d:f2:18:b7:d9:2f:82:02:c3:68:76:33:ce:e9:
                    a3:57:54:d1:fe:32:2d:c3:2a:93:8e:49:82:b8:d9:
                    75:f6:eb:c3:c7:0d:56:23:02:5f:66:41:d0:5f:58:
                    a9:de:18:09:1e:8c:53:ff:86:c7:2b:49:3f:42:bc:
                    b5:80:19:89:c2:55:1b:f0:e0:93:40:44:98:98:5e:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:AB:3C:B8:DC:EA:67:5C:CB:F2:E4:5D:C2:A7:36:B0:AE:BC:75
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.189.0/24
                  89.117.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:fa:f1:8b:4d:a5:fb:29:53:bf:6a:5e:d9:ae:77:30:8c:
         51:9b:c3:ce:53:f9:6d:10:fc:b3:b3:a0:f5:ec:50:ad:2f:7c:
         29:cb:6f:40:81:ca:58:2e:71:f3:2c:ce:d3:06:cd:b1:0b:72:
         b5:d1:57:10:6d:64:ac:5c:90:d4:fd:e8:f2:e4:ce:e8:d9:3a:
         c7:7e:d9:ba:07:1c:08:f4:66:bd:f8:a3:c5:6c:d4:1e:17:e4:
         a1:58:73:a0:9f:85:19:a7:49:5e:2d:08:a3:ed:20:87:c0:0f:
         a7:3e:d3:a0:9d:97:04:02:f1:b3:2f:fc:26:0a:f7:33:f9:91:
         5e:83:3e:39:89:c4:0f:25:05:33:db:5e:cf:f4:b7:fa:21:a0:
         aa:01:75:96:79:91:87:33:67:ed:7a:e9:a4:e6:7e:0f:4f:be:
         55:00:45:50:eb:96:a2:f0:28:23:e3:06:a1:86:f8:16:01:ee:
         f1:31:5f:7f:43:8d:dc:5c:3f:47:d2:2a:65:f9:9f:c0:a4:bf:
         0f:b7:1f:85:33:dc:d0:39:9f:18:ea:b4:69:d5:6a:08:53:53:
         07:15:37:fa:13:0f:50:0f:2e:b4:6c:07:94:ba:1d:ff:f5:90:
         d1:9e:ea:a6:52:b4:9b:0e:13:39:d8:7f:6b:da:30:7c:86:50:
         99:7f:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 17:04:56 2026 by rpki-client