Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa
File:                     AS33355.roa (raw, json)
Hash identifier:          WxUdt2xMYVDDwBsgC3g3eLX8QlvOARLv+PGbOSY19KM=
Subject key identifier:   3D:21:70:24:EE:32:F6:C4:3F:80:0B:E4:55:0E:3C:8A:2C:7B:FE:12
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       51957C02E6EB5B8E97A7EDE0DCDB73577ECF76D1
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa
Signing time:             Fri 10 Jul 2026 20:23:19 +0000
ROA not before:           Fri 10 Jul 2026 20:18:19 +0000
ROA not after:            Fri 09 Jul 2027 20:23:19 +0000
asID:                     33355
IP address blocks:        164.37.192.0/24 maxlen: 24
                          164.37.213.0/24 maxlen: 24
                          164.37.227.0/24 maxlen: 24
                          164.37.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:95:7c:02:e6:eb:5b:8e:97:a7:ed:e0:dc:db:73:57:7e:cf:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:19 2026 GMT
            Not After : Jul  9 20:23:19 2027 GMT
        Subject: CN=3D217024EE32F6C43F800BE4550E3C8A2C7BFE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:40:04:99:3a:61:c1:48:82:3a:2f:d6:8f:
                    5a:6b:8e:67:e5:4e:8f:5a:73:cf:c6:13:b9:99:0b:
                    e4:e4:8f:35:6b:84:01:a5:b0:99:4d:b4:1f:5a:ee:
                    f7:e7:82:ee:a1:5f:8a:45:86:79:d3:5b:02:34:b1:
                    4e:e3:aa:fe:53:12:b2:f3:93:0f:95:a0:44:82:73:
                    16:72:69:6a:03:35:49:84:66:77:3a:34:78:a4:86:
                    72:45:af:00:3c:b4:18:18:4d:43:1a:46:ad:0b:a6:
                    72:dd:cd:88:18:dd:0a:66:0f:db:92:40:de:d9:d0:
                    b1:74:20:51:5c:ad:e8:71:b3:0d:b2:b8:9c:19:32:
                    a9:cf:b0:8e:5c:c1:3d:a1:b2:ba:f0:b7:6b:f7:54:
                    9c:02:52:27:98:45:e1:18:60:e5:59:e9:65:18:82:
                    54:29:9c:6d:f3:d7:42:b2:77:ed:f7:68:85:f5:7b:
                    ad:f0:48:7b:29:25:73:32:97:6d:9a:ab:78:ea:aa:
                    9e:d5:d3:bc:d6:16:53:04:78:44:ea:6c:30:2b:a1:
                    61:87:60:01:a2:9e:47:8a:d2:90:b9:54:e5:11:d4:
                    76:33:e5:85:40:a6:20:70:b6:1f:75:d3:8e:14:ca:
                    87:4f:fb:c9:a8:49:33:48:34:17:32:3c:02:0c:8f:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:70:24:EE:32:F6:C4:3F:80:0B:E4:55:0E:3C:8A:2C:7B:FE:12
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.192.0/24
                  164.37.213.0/24
                  164.37.227.0/24
                  164.37.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:dc:c4:ed:aa:eb:7e:e8:5d:03:56:d1:e7:7d:a7:5a:83:
         39:01:80:e7:a5:2f:00:16:b3:73:92:8d:d8:1b:5a:30:86:b7:
         c6:8e:55:af:96:dd:cc:36:2b:c3:1f:7d:c8:09:ab:ea:4f:64:
         5b:5f:22:f6:0e:ee:45:3f:69:8d:99:0e:35:88:90:09:1c:32:
         aa:82:71:f9:30:20:f6:db:e0:d1:1f:41:86:82:29:63:b6:f1:
         ab:33:b9:0b:45:5d:2f:0a:85:50:ea:4c:5a:b0:84:2b:1c:2e:
         d2:2f:e9:6d:5a:03:61:02:cb:c1:32:fd:37:3b:28:f5:c5:b9:
         af:c9:5a:17:5f:21:67:01:ef:17:3a:c4:1a:0d:68:61:17:e7:
         cf:0b:ea:cd:79:a6:a3:68:7b:6e:4d:2c:04:26:d1:e7:17:ed:
         bd:74:91:35:e6:9b:ff:12:8a:9d:9b:63:52:44:3c:d7:42:34:
         58:52:53:5d:80:b4:9d:98:50:d7:ea:88:06:86:3c:34:7e:3b:
         d7:bf:44:a1:e2:82:b5:81:60:57:d3:20:32:38:86:45:f6:f3:
         bc:f3:68:ea:8b:dc:2f:d8:55:d4:51:4e:40:ee:b9:23:7d:97:
         60:6f:0e:6e:7a:0d:e1:e0:cb:b2:72:eb:76:fa:5b:20:4b:ba:
         01:92:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:22 2026 by rpki-client