Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          eeJ/g/6bqR0Zt8wt/C4kilFuzJCJO7RPbKJvnEi+dkk=
Subject key identifier:   52:4B:24:7B:2C:C0:39:E9:CF:96:14:08:E8:F9:07:50:8B:39:68:80
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       516B67AE8D19592918FCCF341D7BE9D485E9997B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa
Signing time:             Thu 24 Sep 2026 07:32:12 +0000
ROA not before:           Thu 24 Sep 2026 07:27:12 +0000
ROA not after:            Thu 23 Sep 2027 07:32:12 +0000
asID:                     14618
IP address blocks:        164.37.198.0/23 maxlen: 24
                          164.37.208.0/24 maxlen: 24
                          164.37.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6b:67:ae:8d:19:59:29:18:fc:cf:34:1d:7b:e9:d4:85:e9:99:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 24 07:27:12 2026 GMT
            Not After : Sep 23 07:32:12 2027 GMT
        Subject: CN=524B247B2CC039E9CF961408E8F907508B396880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:bd:db:b0:ae:91:ea:19:d3:90:c0:85:15:
                    c4:f0:b5:ea:55:9c:c1:09:3f:c6:55:13:7c:90:62:
                    19:1c:9e:56:fe:da:a3:33:62:5f:79:bd:ca:a1:1c:
                    ff:13:22:8e:a4:dc:c1:4b:c3:69:6a:43:cb:84:72:
                    ea:66:01:22:e7:96:9b:bc:48:58:ed:60:40:00:c2:
                    14:cc:29:54:12:c6:9c:62:f1:9e:25:b0:ea:c5:6b:
                    a4:41:00:15:8e:47:e6:d0:ba:fe:00:c7:f1:7b:30:
                    6c:28:7a:a6:48:4e:4d:4f:9d:32:5f:28:ee:7b:d3:
                    dd:91:07:91:85:a4:73:43:15:74:63:ce:19:85:2a:
                    59:32:55:17:37:01:19:0b:06:c1:6f:3c:53:e9:06:
                    91:16:9f:0f:84:ba:a1:85:ee:08:db:52:de:6b:fa:
                    54:19:81:06:2e:d6:1e:01:65:54:ec:94:41:90:b3:
                    e7:90:79:e7:33:3b:96:f1:87:d3:17:43:85:f8:52:
                    51:de:d0:6b:90:f1:e4:7b:02:fe:fa:10:5a:7c:ca:
                    46:80:20:1e:14:05:08:36:34:d7:77:cb:8f:a7:d4:
                    f4:86:b8:c9:e4:30:91:4c:d0:ab:cb:9a:e4:bc:b2:
                    4e:18:f7:af:e4:f7:7c:fa:05:74:23:19:72:d7:7a:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:24:7B:2C:C0:39:E9:CF:96:14:08:E8:F9:07:50:8B:39:68:80
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.198.0/23
                  164.37.208.0/24
                  164.37.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:0b:b0:2b:50:10:3a:f2:19:10:14:d2:86:c3:61:70:99:
         d3:4b:c7:57:30:1b:89:79:38:4b:f9:43:15:c1:52:62:c9:e5:
         1a:d1:5f:e6:b9:84:a9:fe:13:2f:f2:31:52:54:b3:6a:16:d6:
         e3:62:d9:17:56:7c:5c:02:12:1e:65:8d:34:11:39:3c:74:ce:
         94:cc:97:e4:be:df:85:1d:ae:81:8a:b1:19:ee:c5:ad:6c:cd:
         52:d9:02:92:19:e6:35:42:41:c6:46:d0:87:c6:fc:1b:67:7c:
         55:af:e5:12:7b:93:44:2f:11:5a:22:03:8f:6d:1e:db:ba:26:
         28:da:3d:94:39:94:43:34:61:9c:5b:18:93:e0:30:fd:fa:50:
         a3:34:d2:33:44:4a:f0:8a:8a:d7:f0:1c:3c:a9:44:22:68:4f:
         76:56:2d:a9:a6:bb:19:29:1f:36:33:cd:12:fb:9a:43:86:aa:
         aa:b4:76:b8:f2:4e:23:b4:ac:82:0b:b1:5a:ce:9b:ee:31:35:
         e5:c7:5f:d7:ba:d8:51:63:b0:76:53:84:d1:c6:a9:a2:be:b1:
         d4:4e:39:f8:83:a1:66:d4:63:b5:f3:b5:05:31:e1:cb:55:3f:
         9a:1f:b1:96:de:91:b4:d5:7c:ba:40:b4:7e:6b:aa:cb:95:0b:
         75:9c:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:12:38 2026 by rpki-client