Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa
File:                     3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa (raw, json)
Hash identifier:          A5Erk8aoxrceyL2HYONUsfIG16hOMF4cSuhdrHIshaM=
Subject key identifier:   9A:A8:8A:9B:ED:68:42:67:9A:B8:1A:16:3B:76:DD:A3:94:BC:F5:19
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       76A4E2B392EF20157EE23F464C8DD75D9AE5EB74
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa
Signing time:             Sat 27 Jun 2026 14:52:51 +0000
ROA not before:           Sat 27 Jun 2026 14:47:51 +0000
ROA not after:            Sat 26 Jun 2027 14:52:51 +0000
asID:                     402221
IP address blocks:        164.37.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a4:e2:b3:92:ef:20:15:7e:e2:3f:46:4c:8d:d7:5d:9a:e5:eb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 27 14:47:51 2026 GMT
            Not After : Jun 26 14:52:51 2027 GMT
        Subject: CN=9AA88A9BED6842679AB81A163B76DDA394BCF519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:89:34:81:c5:00:78:41:bc:3c:bd:09:b4:
                    a4:16:9d:b2:fa:5d:8f:de:65:0f:88:82:7e:11:2f:
                    1c:62:26:d0:cd:4b:3c:6b:ff:2d:ef:00:a7:b9:80:
                    97:28:37:cd:e9:d2:26:f1:1d:8f:eb:c6:7e:b2:89:
                    82:ae:e2:d5:31:ca:56:a0:4b:aa:49:bc:77:3f:ad:
                    4a:ae:cb:0f:48:28:e0:d5:66:d2:b7:ce:b0:79:ba:
                    d8:ea:ba:88:76:ae:3e:4a:e3:be:7a:40:67:f9:dd:
                    ea:73:72:cf:16:5e:a1:07:7b:9f:57:24:9b:6b:cd:
                    86:df:5b:88:63:bb:cb:8f:52:40:4f:6b:45:83:3b:
                    39:ab:f7:88:21:2c:05:af:b6:73:ee:0c:d1:0b:e3:
                    fa:b2:d5:c5:ce:e1:98:84:11:58:29:df:0c:bc:e6:
                    5e:f5:cf:7a:62:3a:58:4f:92:45:de:9a:07:c7:a2:
                    ac:0e:93:a2:b3:71:37:9f:56:06:8c:06:34:55:a0:
                    0e:38:b6:6d:a5:22:7e:b0:bc:89:ab:02:21:16:50:
                    a4:5a:27:a1:cc:73:e3:80:f2:54:37:8d:76:50:3d:
                    16:21:66:82:e9:16:31:2e:08:3b:fa:89:02:42:a3:
                    53:9f:ec:8e:93:ce:5a:f8:a7:66:bc:75:0e:96:35:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:8A:9B:ED:68:42:67:9A:B8:1A:16:3B:76:DD:A3:94:BC:F5:19
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:ee:d3:51:95:56:21:5b:b3:99:69:4d:20:6a:d1:c8:15:
         0e:01:b8:b6:35:2b:a8:3e:d2:5d:ea:ec:de:a6:99:2f:c5:2b:
         45:54:04:67:64:64:ff:35:58:52:cf:ab:f0:44:d0:cc:44:7f:
         d1:85:63:a9:81:2d:1e:57:68:c6:61:7d:b9:b6:54:dd:9b:f3:
         47:f2:6a:18:6f:68:ad:bb:55:2f:ef:2a:dd:65:8e:47:7e:c5:
         89:7d:66:3b:71:3c:0f:ad:ba:5b:98:41:ba:ba:f4:80:d2:25:
         de:d6:d0:28:77:f3:98:b2:6e:20:9e:68:c6:5b:5d:c3:54:2a:
         5e:d9:9e:2f:c5:18:8b:21:14:c9:d1:d7:98:2f:2b:97:15:5b:
         56:83:7d:ed:df:59:ba:1f:d2:4d:c0:a3:d2:6b:2c:cf:0b:2d:
         5d:ad:c2:54:ab:cd:0a:f9:01:53:cd:79:48:a2:b2:5e:9a:e9:
         be:87:42:b6:b8:51:9e:3e:19:7f:84:05:7e:7b:82:eb:d1:f5:
         5b:89:a6:b7:37:69:d9:1b:1b:01:cb:a1:2f:22:d3:83:8b:6c:
         9d:f8:a0:0b:25:a4:57:31:7c:fc:e6:9d:48:05:e4:a9:df:97:
         ec:d7:b9:5e:42:72:9d:cf:11:24:78:e8:14:21:26:aa:b3:29:
         e7:a5:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:51 2026 by rpki-client