Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207343.roa
File:                     AS207343.roa (raw, json)
Hash identifier:          Rd/lQf8vMZaRgixolmPFGbpJKBpXYHZ0pDfsPSDSq7M=
Subject key identifier:   E7:C4:09:B1:9B:0B:68:39:AA:AB:A5:CF:1A:C1:AB:AC:79:76:2B:9F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       53378C5C3878A08640ED957F7B34D3C1DC82C27B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207343.roa
Signing time:             Fri 10 Jul 2026 20:23:18 +0000
ROA not before:           Fri 10 Jul 2026 20:18:18 +0000
ROA not after:            Fri 09 Jul 2027 20:23:18 +0000
asID:                     207343
IP address blocks:        164.37.194.0/24 maxlen: 24
                          164.37.209.0/24 maxlen: 24
                          164.37.221.0/24 maxlen: 24
                          164.37.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:8c:5c:38:78:a0:86:40:ed:95:7f:7b:34:d3:c1:dc:82:c2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:18 2026 GMT
            Not After : Jul  9 20:23:18 2027 GMT
        Subject: CN=E7C409B19B0B6839AAABA5CF1AC1ABAC79762B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:3f:ba:21:dc:b7:71:1d:a8:bb:e8:f2:fc:
                    6a:25:2b:42:75:d2:12:87:eb:9c:8b:e1:ab:54:5b:
                    8c:cd:9e:f2:e9:06:89:38:a3:b1:e1:32:17:eb:0b:
                    c3:63:34:15:98:fe:fd:b0:be:d7:81:97:4a:28:98:
                    9f:79:88:9e:a8:22:84:73:1e:97:3d:4f:ef:93:d0:
                    48:33:ac:79:a0:0a:23:59:c5:bb:bd:05:4a:2b:32:
                    b8:b5:07:ff:10:c0:d7:87:e5:8f:bd:ea:62:35:bd:
                    ca:0b:e1:dd:5f:6a:47:29:6a:6d:6f:a3:27:d9:5a:
                    f5:c1:a7:05:2b:1b:ab:d7:3b:e7:d6:6f:fa:6e:56:
                    56:a9:8e:98:fe:08:cb:ca:fa:21:c1:85:75:fb:7a:
                    df:cd:30:94:51:2e:bb:db:a6:2f:41:23:a1:ba:a4:
                    f4:d2:b1:c5:0b:b2:99:5a:ed:7b:07:c4:30:ca:b3:
                    d9:ea:cf:f7:7e:7e:2a:33:0c:ac:89:6d:d9:6f:1d:
                    07:f1:1e:6f:98:fd:d5:38:cd:23:f8:a9:0e:7d:64:
                    a7:58:17:e4:cf:bf:96:6b:00:91:6e:7c:71:ae:62:
                    26:5c:4d:74:97:42:78:90:c4:b3:80:ea:b7:1f:57:
                    d5:e6:33:45:8e:f7:a5:09:d4:8f:91:7c:9f:43:09:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:09:B1:9B:0B:68:39:AA:AB:A5:CF:1A:C1:AB:AC:79:76:2B:9F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207343.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.194.0/24
                  164.37.209.0/24
                  164.37.221.0-164.37.222.255

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:ec:f8:a8:c1:cb:06:2a:e4:70:a9:69:79:02:14:3c:a7:
         03:82:41:3c:2a:a3:7c:ea:6f:d6:5b:99:12:3a:c7:a1:0f:39:
         c1:03:24:3b:f5:50:fc:42:3b:df:11:e2:07:0c:ff:26:a9:eb:
         ad:8d:fc:d4:85:79:2b:4d:f2:46:60:a5:2a:55:82:ed:10:4f:
         3a:75:18:dd:8b:6f:39:30:62:c3:73:fa:3e:3d:9d:1d:c4:2c:
         9d:ef:f2:fd:7a:96:a0:de:58:b6:0a:48:7f:9f:b1:b6:4e:d8:
         8a:6f:c6:c1:e7:f7:3d:d4:22:4b:42:03:a5:ff:c6:43:41:5d:
         01:33:b5:cf:a1:ee:4a:cc:76:6f:26:57:57:17:6f:56:4c:e5:
         b7:e9:80:e9:b8:9b:fb:1d:09:d4:29:9a:3e:b1:a4:a8:bc:f2:
         d7:ea:58:b1:41:20:66:19:cf:df:2c:d3:c3:1a:bc:7e:6d:9f:
         e6:47:9d:af:4b:43:8d:12:75:45:a2:54:47:f2:9f:c3:70:83:
         ca:e5:e2:3d:cf:b3:e0:34:6e:45:59:d0:55:96:68:b8:32:e4:
         52:37:86:88:6a:ea:92:56:d5:6c:01:d9:42:9d:49:34:c5:3c:
         24:92:43:1a:96:8d:f9:f3:3e:e9:41:70:a4:33:bc:bd:f3:f3:
         53:47:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:20 2026 by rpki-client