Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          oDLGFB7XofDUGytXzQjpmpLORDpmX2Ngf8rl5FtH6Fs=
Subject key identifier:   7E:90:BC:FF:A3:C0:EE:22:8B:F0:8F:FF:DA:22:FF:2D:AB:A8:4E:ED
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       230284D9303A2F242A3B947A967962297EC61DBF
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa
Signing time:             Thu 25 Sep 2025 08:30:41 +0000
ROA not before:           Thu 25 Sep 2025 08:25:41 +0000
ROA not after:            Thu 24 Sep 2026 08:30:41 +0000
asID:                     9304
IP address blocks:        86.38.184.0/24 maxlen: 24
                          89.116.8.0/24 maxlen: 24
                          89.116.9.0/24 maxlen: 24
                          89.116.10.0/24 maxlen: 24
                          89.116.11.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.165.0/24 maxlen: 24
                          89.116.172.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 24
                          89.116.237.0/24 maxlen: 24
                          89.116.244.0/24 maxlen: 24
                          89.117.65.0/24 maxlen: 24
                          89.117.84.0/24 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:84:d9:30:3a:2f:24:2a:3b:94:7a:96:79:62:29:7e:c6:1d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 25 08:25:41 2025 GMT
            Not After : Sep 24 08:30:41 2026 GMT
        Subject: CN=7E90BCFFA3C0EE228BF08FFFDA22FF2DABA84EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:e2:ef:c2:52:be:88:1a:72:a9:91:5e:68:
                    ec:f2:41:62:88:a4:76:3b:e1:d2:59:91:2c:bb:66:
                    30:57:fd:c6:d6:85:35:e5:b5:e6:17:cf:9e:87:8d:
                    ec:02:1a:8f:29:99:b8:4a:c4:ed:c2:06:4f:4e:8f:
                    58:02:30:2e:76:7c:3e:44:57:0f:9f:02:b9:8b:c8:
                    dd:78:32:df:9a:c8:9f:c6:3b:d0:b4:b2:ec:1b:64:
                    dd:eb:1e:cd:df:aa:19:75:1b:01:3b:0a:a1:a1:cc:
                    f8:13:83:9d:be:be:f8:52:0f:4b:f5:98:c6:86:94:
                    9f:be:a0:61:67:8f:30:2b:ea:80:07:91:8d:eb:ec:
                    70:52:24:7b:88:26:e7:b9:46:52:61:3d:87:f8:8f:
                    f5:03:70:dd:fc:50:2e:69:13:7e:97:52:cb:13:44:
                    1f:26:30:35:30:5b:79:e8:90:2b:8e:cf:15:f6:33:
                    17:95:a7:bb:e3:6a:46:01:31:cc:65:dd:9a:03:8a:
                    ce:fc:1b:e0:8c:5d:4d:0b:93:8e:51:ec:de:f2:7f:
                    fa:34:99:e5:00:7b:6b:c4:1c:2b:2e:03:9c:68:2e:
                    d8:d4:9c:55:8f:2d:d7:a4:76:00:c5:d2:e6:ba:42:
                    f4:35:dd:45:21:a8:93:82:57:c9:95:ba:98:bb:f6:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:90:BC:FF:A3:C0:EE:22:8B:F0:8F:FF:DA:22:FF:2D:AB:A8:4E:ED
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.184.0/24
                  89.116.8.0/22
                  89.116.141.0/24
                  89.116.165.0/24
                  89.116.172.0/24
                  89.116.184.0/23
                  89.116.237.0/24
                  89.116.244.0/24
                  89.117.65.0/24
                  89.117.84.0/24
                  89.117.129.0/24
                  89.117.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:07:67:9b:be:b9:3e:28:f5:73:10:37:48:a8:09:81:b0:f7:
         72:f8:ed:5b:16:3a:b0:db:05:92:83:99:31:89:03:86:78:d2:
         d1:3e:ba:75:22:c8:aa:08:00:69:b0:3e:ab:be:2a:13:f0:e9:
         44:ef:29:88:1b:ae:c4:ef:43:bd:44:8b:7d:ac:7a:de:65:67:
         25:04:24:52:1b:ca:1e:46:f7:5d:36:c3:8e:06:f7:41:d5:19:
         ad:81:c6:68:a9:f9:f2:09:ac:65:00:c8:17:44:0e:5c:74:e1:
         90:bd:65:bb:6b:b2:d9:ce:9a:36:1c:ce:e2:62:40:45:77:09:
         80:c3:65:b0:b0:cc:8c:70:7c:cc:d4:1d:24:c3:2a:81:f8:a7:
         c9:f2:89:28:a7:d8:af:5c:8b:2e:c5:21:90:4c:8c:df:2c:0c:
         50:de:d6:d8:f0:c1:33:81:59:69:74:b0:07:a9:0e:21:ac:35:
         12:bf:84:4b:ae:bd:68:7e:01:4a:54:61:cb:ec:bb:b4:c3:90:
         19:88:92:20:f8:b9:55:97:13:e5:d8:72:00:26:8a:05:f0:ec:
         3c:d5:5a:33:c4:d5:f6:59:9c:46:6d:ea:ec:91:d1:13:5e:b0:
         48:09:22:0e:b0:64:e1:1c:5d:b4:16:4a:7f:64:65:f9:3f:4d:
         82:90:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:07 2025 by rpki-client