Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS17497.roa
File:                     AS17497.roa (raw, json)
Hash identifier:          AzToNu6L7xQeno9IyiWOtgqlRwfvTSO91WbQxXGiwsU=
Subject key identifier:   B2:01:BC:88:96:A9:EB:78:98:CE:4A:9D:B7:58:DE:0A:54:74:88:F2
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       1B00F5D48C7EA8BA960584CDDC9DC8E254EDA840
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS17497.roa
Signing time:             Fri 10 Jul 2026 20:23:20 +0000
ROA not before:           Fri 10 Jul 2026 20:18:20 +0000
ROA not after:            Fri 09 Jul 2027 20:23:20 +0000
asID:                     17497
IP address blocks:        164.37.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:f5:d4:8c:7e:a8:ba:96:05:84:cd:dc:9d:c8:e2:54:ed:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:20 2026 GMT
            Not After : Jul  9 20:23:20 2027 GMT
        Subject: CN=B201BC8896A9EB7898CE4A9DB758DE0A547488F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:a8:96:75:13:7f:cd:b8:fb:3f:a7:ea:12:
                    65:8a:14:bc:50:fd:38:c7:e1:9d:db:75:68:8a:76:
                    af:d3:7a:54:f5:80:94:4c:7e:d1:3b:fd:88:47:9e:
                    30:03:af:78:02:bf:ea:1f:1b:c3:61:c7:72:16:9a:
                    f6:12:1a:7a:c8:7c:69:08:d9:81:95:b3:23:b1:ff:
                    c3:a6:5d:20:15:c0:3c:0f:48:10:8a:d2:59:43:0c:
                    4f:10:77:93:6a:42:72:07:bb:10:d2:81:49:6a:b2:
                    6a:34:e5:4e:7e:4e:aa:7c:02:b0:00:87:f8:ed:71:
                    b8:c1:99:2b:63:e9:e3:e1:44:7b:34:bb:47:3e:92:
                    0a:69:dd:60:1d:27:fe:b4:8b:d9:24:a9:7c:5a:ac:
                    b5:e2:08:78:1d:2d:6e:d9:1e:13:ae:5f:8e:78:4d:
                    82:ff:a8:5c:d6:24:77:76:9b:f9:8f:8f:29:20:1e:
                    d2:9e:35:03:ee:88:6d:4f:83:fb:bd:d8:9d:c1:2f:
                    5b:01:01:24:39:3f:9b:9f:dc:92:68:74:52:bd:8d:
                    af:9e:b6:4e:c5:c7:f8:e5:a0:ae:c7:79:b9:eb:77:
                    5f:a0:cf:12:e5:2e:f1:4d:ad:45:15:78:7c:ef:d5:
                    8c:6f:51:29:e9:64:ac:f3:e6:d1:36:08:ca:56:48:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:BC:88:96:A9:EB:78:98:CE:4A:9D:B7:58:DE:0A:54:74:88:F2
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS17497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:22:59:8a:88:1a:3a:78:c1:42:a9:ef:17:77:28:26:15:f8:
         af:17:3d:e2:bd:33:09:b7:f2:8e:83:96:e7:f4:b7:cb:c1:fc:
         d7:bb:98:63:11:bc:93:60:42:24:a4:80:a6:e4:19:5c:51:14:
         95:b6:7b:6f:62:ed:dc:60:c1:6c:72:72:33:3a:4e:b0:ff:27:
         a3:c1:9e:f4:cd:47:85:b2:4e:ae:dc:2b:d7:05:cd:8f:9c:3f:
         97:30:20:06:63:07:44:88:46:1d:70:3b:c8:6b:8c:82:99:37:
         9a:bc:d0:cf:9f:57:9a:48:41:bd:22:39:bc:e9:fd:d8:f4:da:
         80:c3:7b:91:71:fd:8e:35:e5:44:63:26:80:ee:1c:e5:63:54:
         55:95:4f:c6:a8:af:45:bd:cc:40:c6:49:4e:74:f0:b9:fe:63:
         8f:d5:e3:a3:ed:69:74:89:9c:e2:be:1c:8f:48:02:b2:f6:62:
         b0:f7:74:9c:e0:7e:5d:f9:00:91:d1:f2:02:e3:57:b8:e8:0c:
         ca:54:81:80:07:c1:d9:71:a5:a4:3b:ac:ce:73:45:86:a8:36:
         a7:3a:3f:71:e8:51:e8:b8:0b:09:8d:3d:ff:e6:98:7f:e4:fc:
         be:3b:a0:bd:5e:6c:f7:22:af:6e:eb:d2:16:ed:3b:93:c5:27:
         94:6d:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:21 2026 by rpki-client