Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zq9w7AbCGVZxTILs/LYq6M0eA66qkwMl84yJTKgdHLY=
Subject key identifier:   07:CC:E8:1C:39:B1:B5:9C:8D:6E:AA:63:C5:FB:91:C2:5E:E9:A1:9E
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7CFCC8E267DFE734E0A974D4CC48767AD678A6DB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20383334.roa
Signing time:             Mon 21 Jul 2025 00:04:06 +0000
ROA not before:           Sun 20 Jul 2025 23:59:06 +0000
ROA not after:            Mon 20 Jul 2026 00:04:06 +0000
asID:                     834
IP address blocks:        37.230.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fc:c8:e2:67:df:e7:34:e0:a9:74:d4:cc:48:76:7a:d6:78:a6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 20 23:59:06 2025 GMT
            Not After : Jul 20 00:04:06 2026 GMT
        Subject: CN=07CCE81C39B1B59C8D6EAA63C5FB91C25EE9A19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:da:c9:64:5c:02:ce:cf:0a:46:08:fc:9c:
                    42:12:a6:de:50:bf:a0:c7:9f:64:30:5c:57:fa:dd:
                    bd:4d:18:42:59:2a:ac:35:57:db:72:d4:eb:a2:54:
                    20:53:5b:5b:2b:5c:91:1c:dc:25:3f:5d:45:11:23:
                    a4:3d:14:b2:fd:e7:13:ae:e3:f2:48:74:dc:3b:f8:
                    7b:04:3e:c4:a5:01:21:b7:d8:36:58:48:8d:58:3c:
                    99:2f:36:a3:29:d6:a0:11:73:17:d7:59:29:ef:65:
                    cd:bd:82:b1:85:dd:44:ca:35:e0:a1:ee:35:98:ae:
                    62:66:eb:83:b4:6a:de:ca:73:b5:47:1d:a8:2c:8f:
                    a8:f4:b0:ba:3f:e7:7f:8b:27:86:1e:98:3f:ea:d1:
                    24:c6:d9:14:86:d8:69:79:a7:90:cf:21:63:06:69:
                    e2:e4:d9:ed:bd:ba:ed:c1:04:02:50:c0:a9:63:33:
                    e0:a2:31:51:d3:26:38:e8:f0:bb:fc:4f:63:37:f5:
                    84:bc:81:12:cd:03:1e:8b:02:99:fb:00:9c:7e:c7:
                    02:36:4d:b9:d0:65:4b:eb:13:be:55:74:6e:d4:1b:
                    14:f5:c7:0a:a1:89:f7:34:66:32:6f:31:e0:67:b5:
                    91:62:99:fd:34:d0:24:09:8d:6f:d2:00:ad:b6:00:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:E8:1C:39:B1:B5:9C:8D:6E:AA:63:C5:FB:91:C2:5E:E9:A1:9E
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:dc:63:65:c3:88:fc:b9:2e:af:dd:08:6c:cd:24:eb:a0:
         c4:f3:52:e6:17:f5:fd:e8:ac:2a:a7:ca:f7:5a:19:05:0d:cc:
         cd:17:22:54:79:0f:b9:0e:ad:f2:e6:24:e1:cc:5a:ee:40:de:
         9b:6c:fa:4a:04:f0:2b:df:92:a3:70:cd:0e:00:c7:39:c0:e6:
         4e:76:c7:a9:13:5a:c1:6b:7f:19:91:2a:55:a5:da:e1:ec:e4:
         94:2a:57:d6:0e:1c:96:e3:d5:e2:7e:18:65:26:f0:2e:65:22:
         ce:ee:d2:21:6a:55:31:0c:2a:16:e9:d1:fd:ef:ed:99:8d:f2:
         2f:ed:b8:c0:15:b2:d3:e8:20:70:cf:aa:72:17:ac:6c:80:57:
         a7:b7:5e:97:21:e9:ca:cf:59:f3:f8:0a:7a:aa:21:de:d2:e1:
         02:e6:cb:e5:fb:98:7a:cd:58:75:65:7d:7b:af:6d:91:7c:e4:
         1c:de:d4:29:ef:50:d0:a3:d0:60:9d:48:8d:82:6f:1f:9b:47:
         78:b9:b3:85:6b:77:98:c5:28:dd:c8:ea:82:9e:82:c9:30:99:
         da:e9:ff:4e:e0:8a:a0:72:e8:24:1a:5e:0e:ca:5f:52:48:37:
         c4:1f:db:2f:92:05:fc:df:a0:6f:5a:47:87:5a:1b:7b:f5:cf:
         88:5b:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 22:55:50 2025 by rpki-client