Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa
File:                     AS25369.roa (raw, json)
Hash identifier:          sHtEsse4YxHbJW+/ADxQnNu8fZuPXwdHZCUTrtzgzK8=
Subject key identifier:   77:4D:F3:6F:00:A4:5A:EB:B1:8D:B6:DB:E8:C6:3C:80:73:1C:FA:9F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       64C6392B6417D91C1861CE281EC9B46D37B9C5DC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa
Signing time:             Thu 26 Mar 2026 01:46:55 +0000
ROA not before:           Thu 26 Mar 2026 01:41:55 +0000
ROA not after:            Thu 25 Mar 2027 01:46:55 +0000
asID:                     25369
IP address blocks:        89.116.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:39:2b:64:17:d9:1c:18:61:ce:28:1e:c9:b4:6d:37:b9:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Mar 26 01:41:55 2026 GMT
            Not After : Mar 25 01:46:55 2027 GMT
        Subject: CN=774DF36F00A45AEBB18DB6DBE8C63C80731CFA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:cb:4f:f8:3e:2a:12:d9:f3:ba:de:f6:c9:
                    57:b8:4f:46:01:bc:df:fc:f1:ea:ad:0b:4e:da:a4:
                    6b:df:0f:73:40:19:95:75:bd:d9:22:ee:f1:a0:bc:
                    1e:a4:e9:9c:8d:f2:8c:88:ae:8e:02:c2:31:4d:65:
                    d2:86:d9:37:62:e7:c7:d3:d5:ca:cb:f9:38:e9:c9:
                    fe:74:3a:7a:03:f3:7f:b1:29:39:d8:c0:87:8b:e9:
                    fb:a7:69:7b:f3:77:8b:f1:94:4e:00:eb:97:2f:7c:
                    42:ac:ee:6b:98:f4:33:0d:ba:79:a5:23:2b:35:e7:
                    3f:ce:18:ef:06:3a:9f:23:a9:13:66:e9:d1:30:1b:
                    e7:30:72:4d:5a:4a:b3:d6:96:5d:c2:fa:0f:7f:8b:
                    4c:4a:62:08:28:08:98:83:28:5d:43:d9:0f:ba:f6:
                    e7:a7:46:f6:b4:1d:35:e6:50:e3:e5:f4:2b:74:2c:
                    5f:01:3c:db:c8:be:6c:4e:d1:e4:cc:f7:29:d5:8a:
                    ab:0c:41:ca:ab:8b:c9:30:c6:4d:af:72:d1:da:b8:
                    59:a7:cc:66:d2:3f:4b:95:6a:c0:c0:e3:c5:68:65:
                    25:d1:70:21:2b:09:c9:96:be:b2:c4:c3:75:ec:dc:
                    e0:33:fb:e0:39:6e:f7:94:6b:f6:28:10:c8:09:f9:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:F3:6F:00:A4:5A:EB:B1:8D:B6:DB:E8:C6:3C:80:73:1C:FA:9F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:af:23:c8:d1:74:e2:a3:de:03:fe:95:19:af:a6:0c:58:49:
         92:ab:32:55:25:2f:78:3a:07:46:22:9a:e1:70:e6:1a:11:04:
         72:4b:47:2c:bb:39:28:a7:8d:a1:2d:a7:6a:6b:27:75:9b:13:
         9f:2c:c1:51:34:d6:6d:14:08:00:ca:72:0c:0c:7b:fd:8d:58:
         4c:19:8f:d5:62:3d:18:f2:72:83:c2:df:63:c3:7c:5c:a6:0a:
         cd:c6:aa:7a:5f:c8:eb:b4:b1:3a:44:cc:f9:5f:c3:e7:d1:99:
         e5:fc:ee:d0:a3:1d:99:19:34:31:fe:8a:97:23:20:fe:e0:3d:
         5e:c0:1d:72:bf:75:54:c4:08:f2:f6:d0:e8:47:39:8f:30:e1:
         4c:1a:47:bc:a3:26:20:32:ef:f1:7e:41:c2:73:6b:54:fc:12:
         d3:85:ed:a6:3f:a8:ba:33:05:e1:d9:55:4a:95:67:bc:b1:90:
         1c:00:de:a2:d3:ee:ac:fb:c3:cd:ac:d3:fe:2a:f8:db:e8:82:
         e8:6b:34:08:d1:ae:a2:63:9a:e5:43:38:95:cf:a9:8b:43:70:
         a2:95:de:0b:41:07:cd:c6:9e:63:80:0f:70:3e:bc:18:e6:ad:
         66:42:22:60:90:e5:56:1d:ba:ae:88:6b:ed:d2:86:cc:36:03:
         27:5e:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:01:34 2026 by rpki-client