Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa
File:                     3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa (raw, json)
Hash identifier:          jZBl2dE/mT0Zt2TpFRHcUDjhv/LTWM/dfuuyON3datE=
Subject key identifier:   98:C9:E8:27:68:A5:06:C9:8A:CE:E5:60:ED:28:80:38:E3:99:EC:BB
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       499181B82D90617FE6AFCF207E0808428ADBF7FB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa
Signing time:             Wed 19 Aug 2026 07:45:38 +0000
ROA not before:           Wed 19 Aug 2026 07:40:38 +0000
ROA not after:            Wed 18 Aug 2027 07:45:38 +0000
asID:                     199779
IP address blocks:        164.37.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:81:b8:2d:90:61:7f:e6:af:cf:20:7e:08:08:42:8a:db:f7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 19 07:40:38 2026 GMT
            Not After : Aug 18 07:45:38 2027 GMT
        Subject: CN=98C9E82768A506C98ACEE560ED288038E399ECBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:df:0e:07:9b:46:4c:02:8c:a9:2f:a5:f3:
                    b6:8d:1f:b8:1c:3d:b9:73:3b:56:8a:3a:ca:eb:be:
                    c0:9e:b2:34:a5:b8:2b:4e:b7:ea:6b:ff:9c:df:67:
                    05:5d:17:2e:66:bf:38:32:14:ac:44:59:46:fa:91:
                    97:60:94:9f:6c:21:b2:88:d9:ed:21:40:2e:5a:02:
                    09:5a:f6:80:84:db:eb:d6:e7:0b:a2:1e:f8:7e:a0:
                    06:79:50:70:a9:30:b3:e6:12:b2:96:f4:23:56:d7:
                    0c:d0:1a:5f:8f:db:47:b5:e3:85:b5:74:8f:a4:96:
                    ad:67:04:19:f7:45:c7:55:14:b1:be:30:4d:c8:08:
                    0c:fc:57:17:56:8c:29:cd:b4:36:86:ab:cb:73:d3:
                    93:4d:1f:7b:15:5f:af:44:ec:8f:1d:97:35:d2:35:
                    36:44:21:b6:18:5d:c5:b5:4c:84:e0:a9:aa:d3:48:
                    be:50:c0:8e:d9:a2:e2:de:41:71:ef:fc:ce:9a:65:
                    4c:25:b4:4c:54:62:42:ce:af:bd:96:4c:2f:b3:91:
                    2c:de:51:fa:80:a1:5e:19:79:e5:7e:61:04:fb:e1:
                    f4:36:a8:73:79:c1:61:92:ca:39:9d:6c:e1:3c:c5:
                    29:05:e4:71:ea:58:61:11:19:49:6b:27:d9:b2:4a:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:E8:27:68:A5:06:C9:8A:CE:E5:60:ED:28:80:38:E3:99:EC:BB
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:9b:20:a9:cd:37:44:58:bc:84:7a:a5:31:9a:f6:d6:87:32:
         e3:8e:e4:5c:33:27:2a:dd:fe:2e:d3:bc:1b:cf:d3:29:42:a6:
         28:df:42:c3:df:45:ca:77:ab:b9:b5:e0:6f:4f:e8:4f:84:33:
         9f:51:b6:99:42:ca:7d:37:ab:d1:f1:1d:c6:00:46:ba:0e:2b:
         cc:63:d4:20:44:05:c9:6b:87:01:7a:53:7d:07:4e:b5:70:1b:
         0a:60:76:32:10:89:e8:cf:57:37:64:8a:ef:5d:64:65:2f:38:
         44:96:6a:27:a5:4b:d1:39:6a:88:c0:8d:3f:b0:eb:c8:1e:32:
         89:3b:fd:80:1f:61:86:c5:59:fb:e0:e3:32:2e:b8:84:6b:5f:
         18:45:11:cf:75:bb:ca:27:1b:bf:57:a2:ff:2a:4a:24:fa:d3:
         e4:41:03:c9:dd:7e:aa:fe:04:b3:57:81:ca:56:13:d9:2e:b5:
         a4:91:36:b1:27:b0:d6:eb:db:83:32:d5:0b:9b:0d:70:2f:a0:
         a6:0f:72:f6:cf:3b:78:09:15:df:18:3a:93:31:b6:1d:b2:c0:
         79:7c:4d:7e:c9:8f:16:55:37:5c:57:5d:50:de:be:5e:0b:a9:
         3a:8f:5c:57:de:63:0b:8a:08:95:73:9e:02:60:fd:2a:9d:e6:
         6a:48:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:42 2026 by rpki-client