Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313531333839.roa
File:                     3136342e33372e3231362e302f32342d3234203d3e20313531333839.roa (raw, json)
Hash identifier:          WQAcfSyAjzJlpe1xYx/36+gM1H9UjYbfbc6bW28Nxek=
Subject key identifier:   FB:FB:6E:FD:67:52:FD:B8:60:C8:23:BF:DA:19:64:D5:3D:F2:49:BF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       218654949C9C0507E1EB27C06B120124661331BC
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313531333839.roa
Signing time:             Sat 27 Jun 2026 14:55:16 +0000
ROA not before:           Sat 27 Jun 2026 14:50:16 +0000
ROA not after:            Sat 26 Jun 2027 14:55:16 +0000
asID:                     151389
IP address blocks:        164.37.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:86:54:94:9c:9c:05:07:e1:eb:27:c0:6b:12:01:24:66:13:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 27 14:50:16 2026 GMT
            Not After : Jun 26 14:55:16 2027 GMT
        Subject: CN=FBFB6EFD6752FDB860C823BFDA1964D53DF249BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:be:22:1e:93:73:92:08:63:04:fe:84:bc:
                    81:a1:e2:61:e9:3f:2f:38:3d:2f:1d:24:c7:15:aa:
                    7f:d6:ef:d7:49:42:3d:34:d0:cc:87:35:4d:84:9a:
                    4d:b0:7d:82:6e:e3:a6:e4:db:69:ab:8a:38:d0:b0:
                    86:34:48:55:91:39:ff:a6:a7:57:70:1b:5d:eb:d9:
                    6b:80:f3:c1:98:e5:71:6e:f7:8e:60:fc:3e:1e:bc:
                    dd:8d:62:bb:38:ba:51:c1:e9:c8:24:d3:6c:0b:de:
                    62:a0:71:8e:28:55:e6:c6:43:11:06:bb:08:15:a6:
                    93:eb:40:e2:96:38:16:39:1d:e8:15:9b:00:2b:ec:
                    0d:12:84:fa:e8:3e:b9:b7:f7:09:da:ea:25:8c:31:
                    5e:9b:59:67:4f:af:5b:a4:1b:f8:a0:6a:dc:3c:0a:
                    4a:3e:a5:79:5c:49:6f:d9:6d:c0:47:d3:47:79:9c:
                    61:54:4f:98:07:7b:be:92:c6:32:ff:7a:52:31:87:
                    b7:09:aa:c3:ff:b5:7e:99:79:2d:34:24:fb:a0:dd:
                    82:95:f7:4a:89:48:06:58:84:3f:ff:4d:3b:a7:de:
                    70:6c:70:6d:59:71:c5:60:60:14:1b:b8:70:fc:50:
                    83:e3:61:70:46:4c:a1:2c:c4:22:81:ca:bf:b0:41:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:6E:FD:67:52:FD:B8:60:C8:23:BF:DA:19:64:D5:3D:F2:49:BF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313531333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:d8:43:06:87:fc:28:91:5b:42:ed:04:e6:cc:46:bc:bf:ba:
         ac:a6:72:32:66:a2:d5:61:f0:10:4e:db:17:3b:90:0a:d2:52:
         da:b6:be:54:44:63:62:6a:67:60:95:36:a1:e3:22:6b:7a:99:
         9b:8e:8a:4d:b5:80:bb:95:7f:f2:d7:1a:08:e8:2c:0a:45:a9:
         71:91:6b:73:ea:1d:d3:62:81:66:c2:6a:18:27:7e:95:64:96:
         79:8f:fd:65:4a:22:a3:43:0a:a6:2e:6b:31:14:e3:cd:df:ae:
         5a:cd:33:3d:58:a9:d2:84:85:c7:a1:83:f9:45:4c:42:4b:fd:
         5d:4e:09:f1:19:e9:76:b1:77:18:a7:e6:2d:64:40:ef:46:e8:
         08:71:8c:64:b8:86:fe:d7:96:11:0f:dd:66:71:bd:f9:0c:56:
         73:41:02:70:59:9e:db:af:76:e7:c9:df:71:47:49:c7:c8:a4:
         b7:80:5d:f4:23:78:d0:0d:6b:aa:e0:b0:7c:84:72:ec:9b:bf:
         59:24:22:31:c1:0e:16:8c:d4:49:05:41:35:de:a8:50:28:d7:
         19:7c:25:36:c7:3d:a3:a2:23:c0:e9:81:ba:26:64:09:ef:0e:
         99:6f:d1:3d:ed:22:24:54:dd:72:8b:fb:6f:6f:e0:8d:f4:e6:
         0f:3d:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:22:17 2026 by rpki-client