Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231312e302f32342d3234203d3e20343032343837.roa
File:                     3136342e33372e3231312e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier:          fifhONhO9bqFyYGXJZDie8ZFp2l/zzyl9VNd4uaTD1M=
Subject key identifier:   F3:CA:7D:3D:F6:A1:85:45:95:F8:F1:51:C0:6C:A0:C3:3A:D1:A0:A3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       62A2FA5E93775D59001D23B152C033F666B05351
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231312e302f32342d3234203d3e20343032343837.roa
Signing time:             Mon 29 Jun 2026 08:19:22 +0000
ROA not before:           Mon 29 Jun 2026 08:14:22 +0000
ROA not after:            Mon 28 Jun 2027 08:19:22 +0000
asID:                     402487
IP address blocks:        164.37.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:fa:5e:93:77:5d:59:00:1d:23:b1:52:c0:33:f6:66:b0:53:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 29 08:14:22 2026 GMT
            Not After : Jun 28 08:19:22 2027 GMT
        Subject: CN=F3CA7D3DF6A1854595F8F151C06CA0C33AD1A0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:66:c0:0d:66:bd:82:43:1c:c2:f0:23:59:
                    be:1e:7a:e5:28:55:3d:a6:98:8a:e9:d4:9e:41:f7:
                    90:96:1f:92:44:6d:22:74:58:00:c7:30:de:15:fb:
                    2b:59:fc:c3:f2:8b:9b:8a:67:c5:63:00:be:f6:41:
                    ba:fe:ce:af:d4:ee:67:5b:5a:82:01:4e:72:c1:9e:
                    5a:13:02:9d:52:38:59:c8:63:ee:25:59:7f:82:d1:
                    3a:66:cd:71:36:81:05:0c:b1:c4:f2:ac:54:88:ae:
                    03:9c:d9:af:27:20:fb:f8:cf:81:d8:1a:c3:b9:df:
                    1d:38:8d:6c:7f:32:f4:7e:a0:c6:7c:56:48:18:6c:
                    17:01:ee:0f:f2:2d:86:2a:eb:66:66:c5:fa:6a:26:
                    2e:27:a4:11:be:b9:63:91:e4:3e:b0:fc:86:85:db:
                    f7:1e:23:41:fb:cc:fe:ad:89:2c:dc:fe:e3:5c:4f:
                    c9:fe:fd:a9:98:45:b4:67:a9:91:29:16:ad:6c:7b:
                    ae:f4:3a:43:50:47:ad:dd:ac:b5:fb:ae:78:0d:ff:
                    ab:06:cb:90:01:f5:ed:28:f0:e3:20:34:45:fc:fd:
                    6c:71:79:f2:bd:70:96:29:43:88:72:9c:b7:e0:df:
                    86:fa:ba:e3:f1:09:72:48:69:a6:b3:05:ec:e8:d4:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:7D:3D:F6:A1:85:45:95:F8:F1:51:C0:6C:A0:C3:3A:D1:A0:A3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231312e302f32342d3234203d3e20343032343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:d5:47:b8:3d:b2:5b:71:54:75:7c:39:a7:63:3b:1a:27:
         90:26:4a:e3:22:8c:6c:0e:6d:98:1b:59:81:cf:37:b2:e4:a2:
         c0:b8:f1:04:f1:8c:7c:d4:a1:88:9a:f9:ed:78:7a:51:ca:e2:
         88:52:f5:04:3d:06:2e:01:71:b7:e2:46:3e:42:cd:cc:56:02:
         2b:26:93:82:c9:aa:47:9d:5d:c6:ab:e3:98:b6:23:6c:94:08:
         6b:76:7b:e6:a6:45:68:a0:e4:da:49:b0:58:06:42:73:08:dc:
         8d:02:df:1a:2a:46:6c:53:d8:14:7a:8b:86:01:23:85:2d:7c:
         59:9b:73:11:4d:50:54:c8:69:ae:75:f7:bc:bb:98:ca:f0:6e:
         0d:68:31:a6:c2:6c:57:95:00:c4:92:7c:7a:8c:21:63:3a:dc:
         d2:3b:d0:d3:3f:6f:da:d0:53:b3:4e:a4:c6:f5:29:ea:98:5b:
         72:3b:2e:22:98:c1:54:fb:d4:2a:97:da:5c:6a:52:24:2f:03:
         aa:a4:e1:c5:09:82:9e:1c:f1:13:d7:b7:30:40:dd:41:85:2e:
         29:d1:20:7b:59:b7:87:7e:af:b3:62:82:d4:3b:74:84:ab:7c:
         f5:d1:71:e6:a9:48:54:c6:7e:0d:75:ed:8e:e4:d1:bf:16:f2:
         5c:91:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:27 2026 by rpki-client