Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20333936333536.roa
File:                     33372e3233302e36322e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          /gM2R+LpSe6Xmg3vJtpfqfeHGSFlToDzm5KXtZvGjGI=
Subject key identifier:   64:37:1E:EC:BB:77:C7:FE:D6:AB:F6:1D:43:E0:2B:4C:76:0F:16:57
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7B94757691692B9BDB58D61D7ED55A5B6AD9D439
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 04 Apr 2025 22:54:00 +0000
ROA not before:           Fri 04 Apr 2025 22:49:00 +0000
ROA not after:            Fri 03 Apr 2026 22:54:00 +0000
asID:                     396356
IP address blocks:        37.230.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 11:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:94:75:76:91:69:2b:9b:db:58:d6:1d:7e:d5:5a:5b:6a:d9:d4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr  4 22:49:00 2025 GMT
            Not After : Apr  3 22:54:00 2026 GMT
        Subject: CN=64371EECBB77C7FED6ABF61D43E02B4C760F1657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:04:f5:e7:f5:6b:47:8d:d2:be:0b:94:62:
                    dd:9e:c3:f4:94:3a:1d:ab:1c:46:d9:b2:fd:ca:4a:
                    97:19:b2:54:a2:33:c3:13:a8:2b:0d:a3:f7:fb:99:
                    5c:fd:1d:0a:74:41:53:2a:2a:03:b0:13:1d:45:b5:
                    a5:74:87:b0:fc:64:d3:e9:de:e1:85:e9:e8:27:28:
                    8c:e1:a3:8e:91:b2:cf:15:99:b9:a5:69:2d:8a:f7:
                    fa:c9:0e:32:70:79:f6:2a:48:c4:a3:4e:d9:27:28:
                    49:c5:b1:30:d7:96:2a:60:c8:68:4c:76:33:53:95:
                    77:35:86:db:d7:25:e8:6d:db:0e:47:b1:17:b8:f9:
                    c7:90:cb:3d:2b:d5:57:2e:5f:e2:a7:a0:0b:1a:1d:
                    50:0a:25:e1:5f:7b:e4:df:99:67:7a:d4:f4:b3:12:
                    72:4b:c5:e7:38:18:e0:d0:98:9e:41:c7:2d:a7:af:
                    41:a5:3e:b5:a6:00:54:20:45:c0:a7:9c:00:4b:c6:
                    03:60:8a:93:7a:3e:46:c4:c1:0a:14:0b:24:b3:40:
                    92:6f:48:dd:78:82:dd:8e:27:0f:38:33:12:6d:e1:
                    8f:6f:fc:42:2c:5a:10:ee:c9:9c:51:ae:b7:c4:b9:
                    56:e0:ff:94:19:e0:b4:cb:1c:27:a1:4f:ec:3b:d7:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:37:1E:EC:BB:77:C7:FE:D6:AB:F6:1D:43:E0:2B:4C:76:0F:16:57
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:4d:3d:69:0b:61:fb:b6:fd:ba:37:c4:23:d6:5f:60:cc:
         7d:60:4c:07:76:d4:62:4b:d4:b7:a3:57:fb:dd:3a:9a:26:c6:
         e9:ab:12:de:49:12:28:a9:7c:d5:34:4b:f9:95:a5:33:b2:07:
         16:d1:3b:87:08:e7:5c:50:d6:96:79:62:c2:77:bc:3d:e2:b8:
         00:d0:df:80:12:f7:12:4c:45:b1:5c:f9:80:44:26:c0:4c:2a:
         c3:ef:ea:05:69:f6:a4:4b:f4:9a:5d:55:bf:1a:dc:37:c0:cf:
         5a:84:20:4e:91:f5:2e:f8:5c:c2:9d:46:84:57:db:55:3b:33:
         b2:ca:2d:36:bc:a6:f8:81:d6:7a:9f:9f:33:77:7c:8f:70:5b:
         f7:a4:4b:70:82:61:6c:c2:89:0c:1f:51:69:02:d0:2e:0c:4c:
         3a:56:6c:3e:5b:e9:30:33:dd:93:d4:88:59:ba:90:92:01:a7:
         2e:5f:9b:fd:96:2b:04:3e:da:91:62:55:af:bd:28:46:ea:90:
         18:51:5a:60:90:ef:2f:2c:c9:83:1e:96:f9:2e:e4:0f:43:23:
         69:13:ad:1a:71:7c:ba:d8:a6:c2:99:b6:e9:87:f0:3f:76:db:
         54:ee:a5:f3:fc:bd:a4:cd:6b:a6:7c:75:e3:96:81:4b:80:44:
         b6:a5:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:34:52 2025 by rpki-client