Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          eZiKl0jQNngQx8cgkml/jFKM+Ic/5BPJiV6wbhnP5f8=
Subject key identifier:   24:BF:42:0A:7C:A2:79:06:D3:74:FA:F6:20:7C:B5:3B:9F:C1:D1:3C
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       49AE6800BC5B5E64BBD20D785E41B124466B4A38
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa
Signing time:             Thu 10 Sep 2026 15:51:18 +0000
ROA not before:           Thu 10 Sep 2026 15:46:18 +0000
ROA not after:            Thu 09 Sep 2027 15:51:18 +0000
asID:                     212238
IP address blocks:        164.37.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 05:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ae:68:00:bc:5b:5e:64:bb:d2:0d:78:5e:41:b1:24:46:6b:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 15:46:18 2026 GMT
            Not After : Sep  9 15:51:18 2027 GMT
        Subject: CN=24BF420A7CA27906D374FAF6207CB53B9FC1D13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:3a:54:1f:8c:b5:99:f4:51:17:90:df:19:
                    68:ee:91:36:5e:70:d6:ae:2d:76:8d:17:b5:ed:b9:
                    5a:ba:c7:35:84:92:ee:f2:4b:3a:cf:1b:82:f7:14:
                    d4:eb:9e:bb:f9:c4:55:02:1a:d9:59:13:ef:fd:30:
                    b3:45:63:84:8d:90:4b:7d:a4:66:b2:84:a0:05:0a:
                    39:d8:84:a2:87:1b:0f:79:b7:3d:44:6f:f0:6a:6e:
                    51:e6:8d:00:9f:f4:5a:7d:72:c0:92:c0:e0:bc:f9:
                    28:61:4b:08:d0:a7:bc:e9:71:ee:41:7b:9e:62:9f:
                    ad:e5:bf:87:7b:34:dc:9f:ec:d5:cb:c1:2d:6f:2a:
                    1b:2a:aa:b6:91:6e:f6:c1:2b:07:69:8e:8a:c5:74:
                    ec:85:81:2d:72:c8:2e:c3:f5:f3:77:9c:b8:35:15:
                    a7:1f:77:24:72:f4:c6:2e:3b:f2:53:b2:19:85:ab:
                    9e:35:b6:6d:23:88:3c:a1:5a:76:6e:99:2a:48:24:
                    10:c8:41:ec:ad:d5:bf:a3:7b:7b:f7:33:95:70:0c:
                    6d:37:2c:4a:d6:39:f1:ca:64:e6:5a:ee:63:b3:70:
                    70:8f:f0:f7:d6:6c:d2:d8:00:66:78:ce:6d:63:b4:
                    11:c9:8e:3c:f3:3b:e7:35:b0:b0:ed:cd:46:0e:71:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BF:42:0A:7C:A2:79:06:D3:74:FA:F6:20:7C:B5:3B:9F:C1:D1:3C
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:bb:bd:b3:92:94:67:b0:e9:14:f4:59:e2:ca:b5:b3:35:
         58:86:4d:c7:2d:88:99:6b:1b:44:8d:fd:6b:cf:c3:36:5d:37:
         a8:7b:ee:61:08:e4:91:95:cd:ee:83:7b:e6:a6:ea:99:94:ce:
         15:15:a3:7b:84:f9:8e:0d:51:a1:31:0e:24:07:3d:22:5c:30:
         53:52:28:2c:c5:73:61:1a:35:a6:ef:eb:02:3a:54:8e:5c:40:
         b4:3f:e8:84:43:94:ee:f4:6a:29:09:75:e6:af:95:a8:7d:bb:
         ae:48:18:91:84:cc:9b:1c:07:48:ea:d5:0f:12:2e:08:ea:d9:
         58:e6:0d:2d:f7:7d:3e:3e:79:ef:0d:d0:d2:59:47:7a:7e:de:
         82:20:59:6a:2f:58:80:5a:fb:82:3b:5d:2c:28:de:e4:b3:29:
         83:87:1f:fd:51:37:27:c3:75:2d:7b:8c:50:ef:e9:44:1f:cb:
         89:cb:a4:8f:4f:2d:98:5f:52:4e:25:c4:c6:2f:5f:e3:3f:48:
         5c:29:9f:27:da:4f:38:ff:93:48:09:75:63:ac:68:14:0b:ec:
         22:77:f4:48:be:9b:ce:b3:5f:9a:4a:96:38:fb:9a:14:91:ee:
         74:ef:8e:c6:48:3c:10:01:13:6f:b1:57:83:7b:cb:39:70:f9:
         05:5a:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:06:45 2026 by rpki-client