Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa
File:                     AS400799.roa (raw, json)
Hash identifier:          xaxBVg8JEaI10HDcAoOQDC40gYqhXNfffdMSPoPGUDk=
Subject key identifier:   B1:BC:4F:46:B4:5B:D1:8D:E5:57:A2:47:1C:B8:F4:8A:2C:B7:C6:5D
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       264278758A2E3C3E9B03A2B35C39D27E625ACE4C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa
Signing time:             Thu 07 Aug 2025 14:54:13 +0000
ROA not before:           Thu 07 Aug 2025 14:49:13 +0000
ROA not after:            Thu 06 Aug 2026 14:54:13 +0000
asID:                     400799
IP address blocks:        89.116.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:42:78:75:8a:2e:3c:3e:9b:03:a2:b3:5c:39:d2:7e:62:5a:ce:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  7 14:49:13 2025 GMT
            Not After : Aug  6 14:54:13 2026 GMT
        Subject: CN=B1BC4F46B45BD18DE557A2471CB8F48A2CB7C65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:55:80:64:8f:19:fa:26:9d:28:85:b5:c2:
                    6f:31:9c:9e:0b:ef:01:51:a2:e4:16:61:38:a4:5d:
                    8d:d3:ee:1c:a9:1e:a8:05:49:55:86:31:22:1a:86:
                    f8:85:a8:f6:ec:27:1f:4c:cc:97:6b:12:78:2f:c1:
                    3b:78:b2:80:51:69:b4:77:17:26:ea:91:d0:a9:57:
                    ec:c0:79:07:f9:86:68:f5:eb:aa:9b:19:22:6f:a4:
                    22:7c:68:cd:1a:da:bc:e7:60:bc:41:a5:57:b8:b1:
                    b9:0e:95:56:dc:4e:2a:73:2e:0e:21:23:f1:5b:e9:
                    4f:5e:f6:01:a1:f8:f8:47:e8:f5:dc:77:fb:80:8a:
                    7e:19:73:be:c3:73:6f:82:0f:95:a6:46:a9:77:76:
                    47:45:07:9b:3c:f3:e4:9c:77:96:7f:7d:3a:fa:65:
                    e5:bd:aa:d5:8a:e0:ee:47:38:8b:ac:a1:2d:9c:09:
                    d7:e3:46:0b:93:d7:50:83:45:ac:04:0d:eb:a8:62:
                    2a:76:a0:b7:f5:7a:f3:81:51:a9:be:f5:51:84:19:
                    e0:fb:f6:9d:25:eb:f7:69:1b:ad:6a:ff:b3:cb:1b:
                    53:c0:e4:db:e1:26:6c:69:dd:43:43:23:50:5b:59:
                    b1:dd:f1:4e:96:8b:58:16:e2:31:8e:4e:71:d0:93:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:4F:46:B4:5B:D1:8D:E5:57:A2:47:1C:B8:F4:8A:2C:B7:C6:5D
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:08:39:33:57:6a:c4:f3:4e:8b:f7:24:7b:ef:47:42:d7:11:
         e6:46:ca:78:0c:a3:35:8f:2c:66:33:f3:11:c2:11:4f:57:41:
         bc:3a:a7:f7:e7:63:88:b7:db:73:1b:16:95:39:99:0a:84:f7:
         09:9f:76:fd:7d:24:92:7a:44:30:b1:88:fd:01:7a:4c:93:b0:
         34:18:e9:e6:5e:4e:e3:91:c4:b3:97:5d:31:fe:dc:0b:e5:ee:
         33:38:26:51:8a:45:00:bd:d8:47:b0:ac:8d:c9:c9:5c:97:59:
         3c:61:96:b1:fd:63:1f:37:e5:36:db:07:49:ed:7c:2d:25:74:
         cf:a2:91:c7:a2:68:04:60:2f:e4:8c:8f:b2:9e:a0:6e:3f:c4:
         49:f4:14:28:6c:55:f8:8a:1c:25:11:92:71:51:60:b8:22:2f:
         fb:02:07:fb:07:f0:22:3c:f8:43:08:77:a7:99:88:9d:34:a6:
         aa:b8:56:f4:44:4c:d1:aa:96:ca:43:03:dc:4c:4a:af:43:fa:
         3b:e8:8a:17:31:28:b0:e3:6b:05:2d:23:90:8b:cf:52:fc:16:
         0f:62:8e:2b:0d:76:b2:01:11:a3:75:2d:4b:a0:8c:51:21:05:
         c5:9a:0d:7a:10:f2:62:87:b1:62:f1:b7:29:b4:a0:b6:e1:6b:
         54:cf:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:30 2025 by rpki-client