Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          eujNkiOGojfARxpa90f/m5IS2X2MRnTTFRRmFKBH4RM=
Subject key identifier:   AB:1C:C3:D7:E1:6E:9B:AB:3E:F3:EE:32:0A:D6:3A:04:30:F2:D8:CA
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5BA3C1D6AF11B44ED97B682E30B3D201EC8EF6FC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa
Signing time:             Wed 30 Apr 2025 00:00:05 +0000
ROA not before:           Tue 29 Apr 2025 23:55:05 +0000
ROA not after:            Wed 29 Apr 2026 00:00:05 +0000
asID:                     61317
IP address blocks:        86.38.177.0/24 maxlen: 24
                          86.38.183.0/24 maxlen: 24
                          89.116.56.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.132.0/23 maxlen: 23
                          89.117.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a3:c1:d6:af:11:b4:4e:d9:7b:68:2e:30:b3:d2:01:ec:8e:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 29 23:55:05 2025 GMT
            Not After : Apr 29 00:00:05 2026 GMT
        Subject: CN=AB1CC3D7E16E9BAB3EF3EE320AD63A0430F2D8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:12:ff:d2:58:e9:24:c5:63:9e:95:d0:d2:
                    7c:01:76:3d:77:12:da:28:1e:c5:2f:67:fe:06:69:
                    4d:0f:c8:36:6e:78:b0:df:f3:c0:e8:3b:38:b7:0f:
                    cf:04:8d:79:7e:25:35:8f:73:e9:c7:76:3c:cd:ba:
                    8f:74:92:a6:43:d3:41:c2:6b:57:f6:74:bf:01:a7:
                    44:66:49:fb:3e:67:a7:29:43:8b:61:64:19:16:5c:
                    54:e2:74:0c:1f:87:85:67:66:7f:5e:f6:39:6e:b9:
                    78:2f:d7:ba:74:8a:f5:b0:24:41:e4:99:24:1f:50:
                    b2:aa:c5:46:e6:f8:dc:71:d5:3f:4b:e6:51:5f:85:
                    93:51:63:8e:b2:2a:96:4c:67:8a:51:59:05:bf:b1:
                    b6:50:e8:65:06:f9:6e:4a:7f:be:03:d3:6b:20:7e:
                    20:52:7c:32:d9:76:08:04:36:8b:f3:80:f2:25:e3:
                    78:56:39:f6:20:f6:03:17:e7:3f:85:b0:fa:71:66:
                    cc:14:42:a6:64:39:89:7b:dd:af:84:db:30:91:a5:
                    37:6a:1c:e0:ce:ab:ca:7d:60:e2:f9:63:24:06:2f:
                    fa:28:87:c2:84:69:37:e7:15:17:21:6f:1e:14:74:
                    8b:35:ab:2d:c7:fe:d2:e0:6c:dc:be:41:28:3a:86:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:C3:D7:E1:6E:9B:AB:3E:F3:EE:32:0A:D6:3A:04:30:F2:D8:CA
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.177.0/24
                  86.38.183.0/24
                  89.116.56.0/24
                  89.117.126.0/24
                  89.117.132.0/23
                  89.117.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:4d:4e:e7:96:7d:f0:3e:97:fd:9d:25:f4:1d:50:95:43:
         68:12:84:15:0f:02:52:7d:df:8c:fd:59:38:5d:6b:40:27:e2:
         fe:29:dd:a4:70:8d:c6:09:84:c2:5f:ab:3e:25:c0:59:6e:7c:
         e5:12:2e:3c:3e:8e:14:5c:28:b9:b6:c8:7b:9e:fd:eb:5e:cb:
         8f:aa:fc:d0:bf:0d:65:be:a6:db:b4:e5:7c:79:46:1c:9d:88:
         26:ea:b8:50:d9:76:16:fa:7e:dd:bc:94:c3:ee:4d:95:de:c0:
         85:15:fa:25:c2:3d:a2:4d:63:a3:d6:66:53:c5:2f:f4:69:dc:
         ff:a1:d7:c9:5a:01:3a:23:cc:cb:c5:f6:a3:08:25:82:d5:2c:
         8b:b4:49:c7:bc:41:b3:ad:38:85:b0:b8:b8:fa:a2:cd:09:be:
         ba:a4:db:4d:a1:2d:29:58:85:3d:76:27:7b:53:41:52:e5:13:
         87:55:20:1b:79:2c:8e:8d:f6:f0:c3:86:7b:a9:71:9e:be:7d:
         31:c7:d2:c4:7d:da:05:7e:35:02:ca:4f:61:42:64:0b:a3:3e:
         2c:4b:2a:b6:af:fd:6b:73:41:37:65:ba:c5:e3:fd:99:9d:01:
         a1:75:d4:43:6a:94:9d:98:14:16:38:be:ae:39:d5:bf:e3:38:
         42:e2:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:56 2025 by rpki-client