Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35352e302f32342d3234203d3e20333935373933.roa
File:                     3130392e3130372e35352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          4DzpP0q5u6ary8M5gYfMHxWUKQG3FCkMQfImWEDqtts=
Subject key identifier:   9F:99:C6:75:FD:49:60:B1:96:3E:B0:B7:C7:45:8A:12:4B:A4:3C:25
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       62B1714AE49994983E273A0BDCF3475C1B379C12
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35352e302f32342d3234203d3e20333935373933.roa
Signing time:             Thu 17 Jul 2025 10:39:14 +0000
ROA not before:           Thu 17 Jul 2025 10:34:14 +0000
ROA not after:            Thu 16 Jul 2026 10:39:14 +0000
asID:                     395793
IP address blocks:        109.107.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b1:71:4a:e4:99:94:98:3e:27:3a:0b:dc:f3:47:5c:1b:37:9c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 17 10:34:14 2025 GMT
            Not After : Jul 16 10:39:14 2026 GMT
        Subject: CN=9F99C675FD4960B1963EB0B7C7458A124BA43C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a7:ae:38:ef:46:c2:b3:be:dc:91:70:5e:
                    7b:33:41:53:fc:64:9a:f3:24:97:83:af:41:a9:e7:
                    6d:e7:f2:d5:5f:a1:5f:73:de:e2:82:a5:09:73:ab:
                    68:96:7d:c3:49:8e:c7:6c:de:da:86:f1:b8:95:00:
                    67:cd:c1:8a:b2:b4:1b:61:90:36:83:d0:34:26:f2:
                    c7:19:38:1a:75:53:68:de:2e:c1:e4:98:c7:08:41:
                    5c:c5:ca:9b:96:97:12:c2:be:69:59:14:de:60:09:
                    19:f5:96:9e:9d:99:74:95:11:75:59:2c:a4:53:74:
                    9e:6b:69:60:63:f3:1c:bd:8b:0b:3a:b3:b5:da:fb:
                    5f:01:9e:83:20:78:9c:a1:17:7a:8c:7f:24:73:b2:
                    97:15:63:5a:13:19:2f:61:1d:02:74:53:2e:23:60:
                    a1:3a:f7:e7:d1:43:b4:8b:52:cc:b2:fa:ba:21:9a:
                    f5:95:55:3e:bd:6c:ab:96:a0:46:42:ff:67:84:ae:
                    ad:fa:f0:ac:41:d4:d3:63:bb:9c:0c:3b:89:7e:c8:
                    a9:13:1a:08:2f:dc:ad:9c:90:e5:20:b4:84:bd:07:
                    e3:98:e7:40:ca:e2:d2:ea:b8:38:7b:21:c8:cc:20:
                    ef:1a:6e:4f:1c:7d:56:d5:f9:d1:55:9d:64:03:b2:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:C6:75:FD:49:60:B1:96:3E:B0:B7:C7:45:8A:12:4B:A4:3C:25
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35352e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:bc:1e:80:3f:4d:01:58:1f:7d:1b:20:5b:c6:27:54:2c:d5:
         21:cb:1b:ca:b1:70:21:76:a9:6c:40:2d:5f:fe:d0:d8:19:24:
         60:1c:6d:33:9d:68:e9:0a:c6:35:b9:0c:be:9f:60:22:96:7c:
         ca:a7:97:8d:00:48:77:ca:15:75:50:53:bb:5f:81:ca:fe:80:
         e2:fc:e1:6c:55:90:10:b1:eb:24:10:ff:07:78:df:3b:76:e7:
         64:c6:3f:65:08:8f:89:c8:ec:bf:fc:10:96:c2:14:59:3e:a0:
         ec:fa:4f:8f:0e:81:b0:49:ec:39:c3:8a:e2:18:7b:0c:cf:01:
         60:1d:1b:42:99:f2:b1:2b:f0:36:e4:ac:9b:de:29:36:aa:e1:
         60:85:a9:06:3b:28:a7:ea:d6:d1:da:b8:28:f1:8e:6f:b1:a7:
         bd:83:28:c3:82:ed:7a:d8:e8:20:31:b5:d5:d7:5d:aa:5e:33:
         b1:02:dc:3f:dc:36:23:71:7f:89:16:1d:cf:e5:5b:aa:f8:1b:
         eb:46:29:ee:22:fa:3c:89:cb:33:c4:75:19:ad:b5:b8:49:e9:
         2e:7e:0e:24:b8:84:65:df:77:49:2f:42:27:eb:c1:39:ee:03:
         7c:c8:1a:51:dd:2d:dd:39:59:c7:6f:0a:39:e8:59:91:34:14:
         4d:fe:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:29:05 2025 by rpki-client