Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS153034.roa
File:                     AS153034.roa (raw, json)
Hash identifier:          L0sQIXg6S6hzmIjGGXubSaLCKtNID9tfmNVSc7/UWb4=
Subject key identifier:   E2:7D:24:FF:0C:5C:C1:E8:80:F1:6D:E6:F7:E7:76:86:0C:60:3F:5E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       176E4150F1E56A33E186963F0CEF922CB1097FBF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS153034.roa
Signing time:             Fri 10 Jul 2026 20:23:19 +0000
ROA not before:           Fri 10 Jul 2026 20:18:19 +0000
ROA not after:            Fri 09 Jul 2027 20:23:19 +0000
asID:                     153034
IP address blocks:        164.37.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6e:41:50:f1:e5:6a:33:e1:86:96:3f:0c:ef:92:2c:b1:09:7f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:19 2026 GMT
            Not After : Jul  9 20:23:19 2027 GMT
        Subject: CN=E27D24FF0C5CC1E880F16DE6F7E776860C603F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:7e:34:a3:0d:07:90:9a:72:00:f0:f6:47:
                    6f:95:55:6d:db:a8:02:72:00:cf:3d:51:b5:ee:ce:
                    95:43:a2:1c:99:04:18:3f:59:72:14:8a:34:22:2b:
                    91:67:f0:f6:db:c3:f3:f8:34:18:e1:ba:12:2e:7e:
                    ac:5d:0f:67:b4:04:f4:83:b5:e1:3b:06:7b:ea:e0:
                    a6:25:f9:9f:3d:27:6a:5b:f3:6a:18:e4:1a:69:bc:
                    81:03:b5:a9:85:f2:3f:b1:38:5a:c7:51:a8:f4:41:
                    a5:fa:39:e0:c9:3a:c1:2a:8e:54:b4:f2:0e:3c:d3:
                    2f:f2:da:b0:9a:0d:f7:fd:0a:2c:c2:d6:19:e8:ba:
                    d5:57:d9:95:08:3e:f4:28:70:a6:f0:ce:c3:1f:47:
                    d2:e9:0c:94:21:9b:b4:9c:35:d3:3d:8b:a3:60:86:
                    40:f0:60:0a:22:d3:1d:e2:87:c3:b8:0f:cb:80:3e:
                    02:5d:63:9f:42:3c:9c:38:57:53:12:9b:da:2c:ca:
                    c3:89:ef:08:ec:b9:6f:1f:8a:29:b1:3a:d0:5f:5f:
                    b8:ca:bb:b3:ba:45:43:1b:b8:ce:bb:7b:22:e5:7e:
                    db:94:0f:c4:1a:ee:af:1e:6b:10:b3:a6:41:48:aa:
                    ec:d5:31:7d:6e:39:1d:98:91:5b:56:ea:19:c7:be:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7D:24:FF:0C:5C:C1:E8:80:F1:6D:E6:F7:E7:76:86:0C:60:3F:5E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS153034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:32:02:9c:5c:9e:5b:19:06:86:08:18:08:5d:1c:5f:ca:e8:
         3a:e6:92:6a:b5:d8:59:74:b3:af:9d:bc:ee:07:ed:76:da:25:
         61:34:5d:a5:d8:a5:28:e0:33:03:9f:b3:8e:67:d6:f0:0b:a6:
         2e:77:28:b6:78:fb:ee:59:87:ef:31:f0:d3:16:9d:6c:47:22:
         bd:55:90:16:8e:ae:f8:69:8a:f2:d0:8c:b2:e7:38:74:45:83:
         dd:86:e4:12:f1:87:7d:c8:c8:5e:11:d9:01:e8:69:62:e9:18:
         31:39:4b:c1:19:e4:90:59:77:4e:8c:08:57:a1:e3:e7:69:56:
         e9:90:12:77:88:4e:f2:fd:39:0d:00:ad:16:81:20:75:e0:06:
         69:ad:44:93:f7:19:54:a5:f5:ca:06:bc:42:3c:05:19:29:2c:
         07:3f:8f:ee:4c:0b:e4:00:59:a6:b2:ea:3a:b6:53:6d:a6:e8:
         32:c2:a3:70:08:59:fa:1f:96:23:71:4c:d6:52:66:87:93:91:
         2f:81:e6:4b:83:ab:95:9d:ec:64:5a:c2:fc:7a:a0:dc:48:21:
         96:e1:8c:36:9c:58:e1:f7:7f:2f:d2:2c:63:c6:ba:87:c6:1d:
         35:e3:7b:6f:ad:1b:de:7c:04:96:75:c1:10:e0:96:27:be:e2:
         c0:df:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:21 2026 by rpki-client