Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS151389.roa
File:                     AS151389.roa (raw, json)
Hash identifier:          YHZeB4ezQ22qV+jkmlYlNbJ7LSnNSjKzfRFc/GEyjGY=
Subject key identifier:   92:70:A8:F3:70:B7:09:11:95:10:52:6B:EE:19:22:C4:83:2C:9A:87
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4460FEF3C46B180D73469BD143AB0B03B0E52818
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS151389.roa
Signing time:             Fri 10 Jul 2026 20:23:18 +0000
ROA not before:           Fri 10 Jul 2026 20:18:18 +0000
ROA not after:            Fri 09 Jul 2027 20:23:18 +0000
asID:                     151389
IP address blocks:        164.37.216.0/24 maxlen: 24
                          164.37.232.0/24 maxlen: 24
                          164.37.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:fe:f3:c4:6b:18:0d:73:46:9b:d1:43:ab:0b:03:b0:e5:28:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:18 2026 GMT
            Not After : Jul  9 20:23:18 2027 GMT
        Subject: CN=9270A8F370B709119510526BEE1922C4832C9A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:f8:d9:03:52:be:48:89:e9:c8:a2:7f:89:
                    0c:6a:5c:f0:c3:fe:c6:12:ea:3e:38:d6:29:67:f2:
                    b7:1d:97:61:c6:d6:3a:3b:97:1d:58:e1:0a:5a:75:
                    b1:0e:b3:9a:53:fa:68:16:b8:0a:80:37:8d:37:af:
                    62:19:41:56:ca:44:59:81:79:5d:dc:73:cc:12:44:
                    03:bd:ef:03:5a:20:ee:e7:94:54:c6:84:a0:79:70:
                    81:c6:c2:a3:34:b0:45:10:49:14:e8:24:a0:67:1b:
                    df:aa:e9:b5:7d:e6:fc:9f:c7:84:38:86:6d:f4:2e:
                    ce:e4:0a:a3:79:04:cf:9c:15:e7:03:88:8f:b2:6a:
                    53:a9:aa:e7:e1:40:3c:af:0b:c4:af:5a:e0:d6:57:
                    f6:55:0f:31:c7:63:af:7b:6f:4b:86:93:c5:cf:fb:
                    81:66:05:9f:20:0d:73:5c:11:cb:dc:1d:f6:62:f0:
                    e9:10:d8:10:90:d8:02:d9:73:1e:d1:5f:64:7a:99:
                    71:34:55:21:7e:78:e7:5e:4f:4f:ed:7a:99:75:04:
                    41:5a:e8:4c:1e:50:8b:be:c7:0d:f4:2c:48:3c:74:
                    68:92:fd:aa:f9:5b:09:6b:44:b9:d8:4c:17:37:1b:
                    f0:d6:53:7a:2f:2f:f5:f9:a5:f8:a8:95:62:ac:65:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:A8:F3:70:B7:09:11:95:10:52:6B:EE:19:22:C4:83:2C:9A:87
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS151389.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.216.0/24
                  164.37.232.0/24
                  164.37.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:d7:3a:b9:15:67:c6:54:c5:a0:34:99:65:1c:aa:5f:2b:
         c8:45:0c:ea:32:cd:2b:e7:c7:94:aa:73:2b:ad:93:ff:94:e7:
         8e:52:f3:fd:92:0f:e8:44:60:0f:4e:ee:a4:5f:d5:28:6d:f3:
         b3:d3:9a:3b:db:15:bd:b1:21:7e:b7:e4:34:4c:24:04:9a:22:
         5d:63:6b:0e:c6:3a:95:a5:0f:31:51:eb:78:74:b6:87:4b:bf:
         03:41:56:70:6e:97:0c:9a:bb:0e:e1:8f:05:60:8f:60:69:14:
         cc:65:89:0d:16:84:29:97:ac:62:92:a4:03:56:cd:79:71:72:
         8f:99:93:73:65:71:90:c4:2f:e9:c4:f7:98:d3:23:49:05:65:
         b3:f7:dc:d1:a0:81:1b:28:64:89:2b:de:17:31:20:83:c2:8e:
         43:73:fe:93:97:b0:22:f2:d1:06:b6:c7:a4:31:07:cf:03:7b:
         15:44:9d:8f:01:70:43:be:68:42:a7:55:76:ae:94:31:4b:09:
         f6:73:be:9c:28:c0:e7:0a:15:4b:6b:42:ce:e6:08:bd:28:09:
         7c:6d:3c:42:7b:e5:71:2c:1e:bc:22:6e:67:45:ad:5a:9a:0b:
         fe:0c:e8:ae:b0:66:29:82:78:e9:00:a3:ed:aa:5d:d0:3b:8d:
         95:25:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:20 2026 by rpki-client