Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e20343032323736.roa
File:                     3136342e33372e3231372e302f32342d3234203d3e20343032323736.roa (raw, json)
Hash identifier:          cvCxyxk93w6H00/r8tW51ps67EKpk06wiIY0LflwODs=
Subject key identifier:   9E:AB:F6:33:7E:8B:0E:9B:BA:44:17:9E:17:B6:2D:75:28:AB:C0:72
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       131E9F7D0A372008AC7123CDA5FDBD97DDB60FE2
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e20343032323736.roa
Signing time:             Sat 27 Jun 2026 14:55:26 +0000
ROA not before:           Sat 27 Jun 2026 14:50:26 +0000
ROA not after:            Sat 26 Jun 2027 14:55:26 +0000
asID:                     402276
IP address blocks:        164.37.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:9f:7d:0a:37:20:08:ac:71:23:cd:a5:fd:bd:97:dd:b6:0f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun 27 14:50:26 2026 GMT
            Not After : Jun 26 14:55:26 2027 GMT
        Subject: CN=9EABF6337E8B0E9BBA44179E17B62D7528ABC072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:88:e6:b4:28:37:26:b5:15:c2:5d:77:bc:
                    8a:bd:e6:ba:9b:16:b6:81:2c:b8:de:e0:52:a4:f5:
                    43:a7:9f:a3:e6:b2:5e:82:1d:27:0e:cc:f1:5b:14:
                    c9:f9:8b:a7:a9:8b:4b:29:ab:af:b2:81:0d:af:0e:
                    f1:eb:28:22:b4:bb:85:3f:0d:4d:89:2e:34:55:5e:
                    1f:e3:cd:80:2d:f8:20:0b:71:fc:d5:b2:94:85:5a:
                    0c:da:eb:05:6d:88:2e:71:83:ca:52:36:c4:d9:28:
                    ca:90:31:a8:d0:b1:f0:cb:b3:1f:df:4c:6f:c6:5c:
                    75:21:4c:28:55:ac:e9:dc:52:55:6f:0f:54:91:ec:
                    16:13:04:51:30:36:62:d9:10:87:e8:26:f7:b0:2a:
                    8c:8c:86:4f:50:15:b7:64:04:0b:21:e5:6f:b8:f0:
                    7e:9d:ec:eb:9e:16:9b:15:81:31:fa:fe:89:06:95:
                    bf:6d:ec:18:b4:17:10:6b:e7:8b:e7:f8:b5:74:79:
                    5f:d4:32:d3:c1:5e:8a:0e:46:78:8b:fd:89:af:ac:
                    43:35:c7:13:bb:03:06:e6:7e:39:13:16:36:b6:13:
                    42:26:47:f5:b2:01:03:89:e3:07:5f:38:4a:fc:4a:
                    a7:66:78:d3:83:41:b3:d3:c7:65:88:9e:63:35:d9:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:F6:33:7E:8B:0E:9B:BA:44:17:9E:17:B6:2D:75:28:AB:C0:72
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e20343032323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:66:e4:9e:c9:ce:ae:5b:97:ac:f5:d4:96:c2:ff:80:6d:
         06:d7:61:7a:56:27:59:54:b5:40:d0:53:b2:7f:f0:2d:0d:fd:
         98:d2:77:b0:7b:40:1c:f4:4d:44:ab:28:61:13:bc:53:a3:19:
         f7:3b:18:d4:ab:5b:f4:0a:bf:8d:aa:2d:02:d7:82:e0:f2:34:
         66:e9:2b:bf:2e:9f:64:9f:fd:c6:39:15:0f:d6:ef:84:81:73:
         81:a4:cb:f9:77:d5:e6:1b:5d:7a:af:83:e6:c8:86:e8:48:df:
         52:0f:02:aa:f1:7b:c9:56:ea:73:63:57:94:72:25:2e:ba:64:
         ef:ad:c3:90:5e:61:b2:d5:c9:03:90:13:f0:de:0d:4c:c0:9f:
         b2:e6:d7:3e:6a:77:0d:4b:3c:47:4b:d4:10:d0:1d:db:24:7f:
         b6:3d:f4:88:ea:c2:bf:89:ee:3d:91:87:28:c3:42:ec:c4:1c:
         df:20:2f:e0:d3:fd:f7:c2:37:e9:b9:c4:d9:51:aa:df:cf:b7:
         ed:9f:37:a6:f7:87:9e:cb:53:da:a7:12:5b:82:29:9b:be:39:
         53:a6:0f:58:3e:88:05:83:e3:0a:c0:7e:f0:15:e6:fd:b9:6c:
         4b:d9:70:7d:4a:ab:50:73:fa:8d:58:2b:6b:49:91:b7:70:b9:
         c3:91:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:27 2026 by rpki-client