Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          /vOM7MgpxPo9RGJ4r3hhPJR4DqRvWLT3MSs8pUfoXsQ=
Subject key identifier:   43:2F:68:B8:86:11:19:95:0A:49:71:9E:F4:BA:C0:82:AB:04:48:39
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       3E7C54D768C055732477EFD9F59CFFEA99E4F088
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa
Signing time:             Thu 07 Aug 2025 14:54:13 +0000
ROA not before:           Thu 07 Aug 2025 14:49:13 +0000
ROA not after:            Thu 06 Aug 2026 14:54:13 +0000
asID:                     46450
IP address blocks:        89.116.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:54:d7:68:c0:55:73:24:77:ef:d9:f5:9c:ff:ea:99:e4:f0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug  7 14:49:13 2025 GMT
            Not After : Aug  6 14:54:13 2026 GMT
        Subject: CN=432F68B8861119950A49719EF4BAC082AB044839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:e6:8c:ae:aa:55:fb:c0:79:ac:ca:80:d6:
                    c8:9f:40:d7:49:ff:45:0b:ba:bc:e5:64:75:68:36:
                    8f:ce:b0:5c:22:5c:1b:d2:84:62:48:7b:76:c9:ea:
                    65:1b:70:bf:cc:68:2d:97:c5:02:a4:a4:80:44:fa:
                    66:84:4d:6f:40:0e:f0:63:6f:1b:5f:3e:47:44:3f:
                    fc:bc:3c:bd:1f:2f:5f:83:97:ef:16:e5:67:eb:dc:
                    b3:9f:f5:0c:49:72:b3:0d:2c:03:0f:a8:43:0f:d1:
                    8d:aa:1e:fa:2b:06:8e:0f:4c:d7:06:99:9e:77:d0:
                    ba:7d:2a:10:3b:db:3d:34:22:79:39:14:ff:9a:09:
                    e4:44:8b:38:b6:e9:92:45:b4:17:a7:15:c6:23:ce:
                    b6:c8:19:b7:60:b7:60:b1:f2:59:16:0b:55:2d:a0:
                    57:02:93:f8:76:75:57:34:34:a0:dd:7e:0f:47:f6:
                    4b:98:0d:35:c1:b0:18:ba:75:82:86:b7:da:2f:12:
                    f7:f3:70:80:62:a1:18:f0:04:3d:47:94:5c:54:91:
                    7d:31:dc:b4:1c:8e:07:53:d0:8c:f2:af:d8:ac:c4:
                    07:62:f8:96:5e:71:b0:cf:7f:00:24:d9:d3:2a:b4:
                    f8:17:40:32:17:47:dd:6d:6c:04:49:c0:43:81:86:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2F:68:B8:86:11:19:95:0A:49:71:9E:F4:BA:C0:82:AB:04:48:39
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:9b:08:6c:26:23:cc:9d:6a:aa:a4:5c:8f:10:b1:4e:a1:
         91:40:a3:7a:e7:b9:32:20:c5:fc:f3:71:09:3b:79:6b:78:d9:
         fe:d1:40:93:2e:c2:39:57:1e:29:7f:89:0d:12:4f:04:68:ad:
         2f:a3:aa:d6:78:4c:a9:c9:76:92:96:09:bb:43:ac:83:4c:01:
         cc:51:c9:78:95:da:eb:cb:fa:81:5a:45:41:c8:af:d6:87:fc:
         98:47:5b:12:bd:dd:b8:72:71:22:f2:ff:e9:75:38:07:35:51:
         48:7e:76:c0:eb:c6:88:01:9b:57:fc:3b:bd:d3:28:60:cd:12:
         1f:89:6f:63:18:11:fe:d5:ac:f7:f3:39:ed:ad:47:8d:98:f6:
         03:b3:e3:5e:4c:45:b8:82:f5:bd:25:c7:d9:a2:ea:22:81:80:
         2e:22:8c:40:ee:74:bb:41:20:da:0f:a2:bb:5f:7a:eb:89:9b:
         5b:08:fe:ba:9d:44:75:7e:b0:7c:e5:80:98:80:b4:e3:d7:99:
         f3:95:21:57:5e:fb:28:f9:d3:6f:c3:ce:43:58:c6:e0:2b:30:
         4b:ea:a1:12:15:73:98:df:2b:1b:8c:80:8e:9c:3f:66:ab:53:
         08:9e:61:6f:6e:11:05:30:65:23:6a:09:cc:5f:fa:6d:a2:75:
         9d:6e:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:56 2025 by rpki-client