Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa
File:                     3136342e33372e3139382e302f32332d3234203d3e203134363138.roa (raw, json)
Hash identifier:          7qkNZWCXj2thfPBxSkcjQmPrrBfpJbqyweLzFU1Tfdo=
Subject key identifier:   6F:31:E9:E1:53:A1:F0:34:A7:4C:45:2F:8D:D2:CD:CE:E7:00:DA:0B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2C0BA2CDF1E5EB9E487FDA94BEF5F5D95DBB9DA9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa
Signing time:             Wed 26 Aug 2026 15:22:42 +0000
ROA not before:           Wed 26 Aug 2026 15:17:42 +0000
ROA not after:            Wed 25 Aug 2027 15:22:42 +0000
asID:                     14618
IP address blocks:        164.37.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:a2:cd:f1:e5:eb:9e:48:7f:da:94:be:f5:f5:d9:5d:bb:9d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 26 15:17:42 2026 GMT
            Not After : Aug 25 15:22:42 2027 GMT
        Subject: CN=6F31E9E153A1F034A74C452F8DD2CDCEE700DA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:f5:fb:e3:e1:36:d1:d5:21:f8:f1:ca:d2:
                    3f:dc:fc:ac:ea:99:95:b6:8b:cd:40:82:8a:56:38:
                    0e:99:51:11:35:ff:86:3b:c1:18:09:71:b6:49:dd:
                    e1:28:e0:19:ef:6c:fd:76:c7:17:62:99:5d:6d:ed:
                    53:86:c6:75:41:05:05:6a:9f:79:3a:ea:a2:28:0c:
                    c6:33:b0:9c:45:df:b8:d6:7b:4c:36:d5:d4:7f:9a:
                    f9:81:fb:05:c9:11:b3:bb:c5:ea:8b:9d:72:f9:3e:
                    0e:98:c0:82:7f:f9:65:fe:e2:87:dd:2b:e7:ca:86:
                    4b:44:59:2e:82:bc:fb:47:63:c8:16:7d:f2:ad:01:
                    e0:a0:87:a1:2a:68:12:d2:3a:2a:b9:6d:b1:e8:64:
                    67:47:64:20:64:2e:93:2e:d1:be:d9:1d:71:52:c9:
                    76:34:bb:1b:6f:66:41:58:4f:b0:13:19:b8:14:da:
                    78:2c:ae:97:50:ae:46:d5:39:f6:d7:a1:04:61:b7:
                    c8:9b:31:d2:89:86:6a:5a:16:fc:09:61:07:b6:df:
                    d8:1c:0f:a3:b0:d6:6b:22:d2:d9:7b:45:bb:5b:41:
                    dd:3c:1c:4b:d9:68:58:17:ae:86:34:66:b0:33:f3:
                    18:2f:a2:cf:ee:ab:ba:ed:96:72:17:11:c7:d9:62:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:E9:E1:53:A1:F0:34:A7:4C:45:2F:8D:D2:CD:CE:E7:00:DA:0B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:d9:7e:c8:ed:63:5f:4c:dc:6f:36:43:f1:8a:c4:3a:d6:
         b5:68:eb:7a:8b:e7:28:11:8a:ae:6c:81:2b:a4:37:f4:3e:03:
         14:17:51:1f:dc:fb:04:54:39:8e:74:4d:4e:10:50:5e:29:6c:
         ba:66:a2:fa:25:a0:6c:af:7e:7a:1f:2f:3d:fb:e6:96:08:9d:
         68:35:5b:b6:08:32:e4:32:03:4f:27:54:a3:c0:f5:42:e3:c1:
         3a:41:92:ff:04:6c:24:4b:cb:3d:10:4c:dd:3d:33:6e:06:b2:
         a6:69:41:af:6e:7c:26:73:65:80:c3:7a:83:ef:91:d3:7b:d2:
         37:fc:31:67:43:3f:90:27:26:76:97:40:e5:7d:dc:31:d3:77:
         c0:ea:46:f9:f0:a2:09:2f:4e:f5:61:6f:33:ab:69:ce:47:32:
         e2:11:0d:80:1e:50:78:36:ef:2a:3a:95:ce:b7:dd:f8:08:e9:
         c0:01:75:20:bd:48:03:67:60:2e:cd:3b:69:68:03:26:83:a9:
         d4:72:ae:67:a1:ed:10:20:c9:64:fe:e3:e0:d8:97:1b:52:de:
         cc:b8:7e:71:1a:02:68:0c:c9:f6:9b:ae:15:65:dd:4a:5b:56:
         05:e4:8c:38:83:92:68:20:65:14:9b:39:e4:c2:20:11:f6:59:
         9a:96:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:39 2026 by rpki-client