Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          l79Y5xBlrBSk0C2TLtW3bAO24L9ZqIdQsf5hxJMeuXg=
Subject key identifier:   73:2E:25:16:56:27:6A:55:EB:37:5D:9C:30:5E:F8:9A:13:95:55:06
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       473217C2FC7062BB342BC371DC9469D52ABCB965
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22427.roa
Signing time:             Mon 11 May 2026 09:15:34 +0000
ROA not before:           Mon 11 May 2026 09:10:34 +0000
ROA not after:            Mon 10 May 2027 09:15:34 +0000
asID:                     22427
IP address blocks:        89.116.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:17:c2:fc:70:62:bb:34:2b:c3:71:dc:94:69:d5:2a:bc:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: May 11 09:10:34 2026 GMT
            Not After : May 10 09:15:34 2027 GMT
        Subject: CN=732E251656276A55EB375D9C305EF89A13955506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:85:b0:b9:f1:3f:28:b4:c9:8c:14:0e:ec:
                    c2:73:81:13:2b:73:0f:f1:1d:ef:6d:1a:c0:d7:b7:
                    58:2c:a1:ea:a6:eb:86:02:c3:12:98:d9:bb:47:6a:
                    e9:25:53:00:f2:f9:d5:99:58:d3:1d:48:c7:4e:2a:
                    da:ae:38:4b:a5:1a:1d:10:71:74:83:c7:b0:96:e3:
                    b6:59:8e:3b:9d:9e:52:ab:49:52:cf:c0:db:62:bd:
                    a4:37:ac:aa:35:22:b5:56:ed:e5:dd:f0:65:b9:ee:
                    78:34:5d:3b:1f:94:0a:de:c1:61:ec:cb:4a:ad:ab:
                    68:a0:12:83:4e:dd:44:ad:3d:85:1b:8a:0c:f1:a7:
                    5d:8e:1e:44:db:9f:06:89:15:d0:c5:e1:91:03:86:
                    9e:00:48:3e:20:98:6d:18:a9:7f:15:bf:a5:69:62:
                    be:1a:07:a8:b7:c3:ef:7e:f5:42:76:84:68:0f:4c:
                    06:90:06:57:d9:d2:12:24:b1:b3:46:75:82:af:12:
                    b4:78:76:73:6f:f1:5d:d0:72:9e:5f:26:9d:ae:1c:
                    cf:63:af:dd:b4:71:91:f5:99:40:4b:0b:a3:fd:ad:
                    cc:ed:de:6c:ef:42:7a:aa:79:1d:24:04:a0:dd:d8:
                    45:92:f2:8b:5e:d7:06:49:8e:bd:46:29:6f:7d:7a:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:25:16:56:27:6A:55:EB:37:5D:9C:30:5E:F8:9A:13:95:55:06
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:06:f4:30:23:43:8d:76:04:7d:82:3e:a4:31:ce:27:f4:
         d4:ce:9f:88:47:bd:aa:72:a4:a2:ca:ac:87:72:4b:ec:93:f4:
         aa:a1:4d:4b:06:53:3a:ee:23:8f:1d:59:4e:5f:3a:d5:11:d6:
         e0:84:79:4d:52:23:f2:52:32:2f:27:be:fb:35:60:b8:8e:0c:
         06:72:f0:d1:9c:ac:fe:bf:00:55:8f:66:97:a7:32:91:aa:4a:
         76:3f:68:3b:0c:c9:1a:6a:9c:87:b8:7a:70:d4:24:97:6b:98:
         04:d0:23:b7:b8:61:fe:09:b3:34:7b:2f:95:2f:01:1c:6a:71:
         d5:6e:7a:6c:4c:9e:80:e4:23:d5:99:74:61:71:01:74:31:63:
         83:1d:e0:6c:51:bf:0a:e3:22:de:64:02:26:c0:cf:0b:f9:b5:
         1e:1d:fa:d7:93:e4:11:14:f3:12:9d:78:13:7b:13:48:ac:e0:
         7c:48:87:d4:7b:76:40:b8:e9:1e:5a:d9:7a:8f:01:eb:f4:9c:
         6d:21:7a:a1:37:6f:43:1d:1f:52:f0:a6:91:4f:ac:61:3e:84:
         54:b5:57:29:0a:fc:f6:8e:a0:ca:15:d4:b3:ad:c2:37:5f:a6:
         8f:4a:32:17:62:56:6f:40:ac:d1:71:a7:bb:e7:ff:2a:1d:ec:
         8d:6f:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:08 2026 by rpki-client