Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400308.roa
File:                     AS400308.roa (raw, json)
Hash identifier:          UlFgzk9llX+WA6E33oU/1Tu2/Vwu0sdUR7EdtktYsU8=
Subject key identifier:   EF:5E:44:05:25:BE:C9:54:35:26:F2:B9:1D:8A:5B:A6:BE:2E:0A:F5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7FA1CDB5121C4CDCC3A18993637D775BE3D2EF5C
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400308.roa
Signing time:             Fri 10 Jul 2026 20:23:20 +0000
ROA not before:           Fri 10 Jul 2026 20:18:20 +0000
ROA not after:            Fri 09 Jul 2027 20:23:20 +0000
asID:                     400308
IP address blocks:        164.37.215.0/24 maxlen: 24
                          164.37.230.0/24 maxlen: 24
                          164.37.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:cd:b5:12:1c:4c:dc:c3:a1:89:93:63:7d:77:5b:e3:d2:ef:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:20 2026 GMT
            Not After : Jul  9 20:23:20 2027 GMT
        Subject: CN=EF5E440525BEC9543526F2B91D8A5BA6BE2E0AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:83:37:51:25:33:76:b8:80:97:3b:dc:32:
                    cc:b2:8b:c9:7d:e4:e4:e3:8a:8d:3d:df:32:0c:55:
                    39:24:d8:3b:2b:ee:17:ce:83:9c:7f:d8:33:0c:14:
                    0d:43:85:18:bc:32:a3:de:2e:60:cd:aa:07:61:c7:
                    53:0f:4d:c9:6b:ea:06:f0:a6:85:eb:75:20:e1:f4:
                    10:6d:87:a6:6e:91:93:e2:1f:05:17:ef:01:5f:06:
                    e4:8c:bc:ea:27:cd:0c:45:0b:46:80:02:ee:f6:66:
                    e2:11:32:cb:76:06:16:ae:61:08:da:52:40:5a:b6:
                    87:7a:32:b5:1c:b2:d1:f4:bb:cc:fb:82:81:34:42:
                    ef:54:8b:15:33:3d:61:00:99:e0:d3:b9:be:07:63:
                    64:90:48:8a:89:c3:fc:e7:1c:62:99:ec:82:59:49:
                    18:d6:7e:99:c0:bb:73:b3:0d:65:89:a8:12:3b:0c:
                    fe:86:93:45:c4:1b:ba:43:99:05:dc:2d:ad:93:75:
                    0a:58:23:dc:23:4d:55:80:e8:62:2b:2e:3e:29:38:
                    77:f2:f5:14:4a:c6:e1:c6:69:d6:47:85:04:c2:70:
                    40:dc:2e:48:2f:90:fc:fd:17:f5:84:32:7e:d3:28:
                    6c:46:f7:dc:aa:99:59:e9:61:8a:95:fb:9b:fe:ef:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:44:05:25:BE:C9:54:35:26:F2:B9:1D:8A:5B:A6:BE:2E:0A:F5
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS400308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.215.0/24
                  164.37.230.0/24
                  164.37.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:74:7e:c2:49:11:ef:dc:27:c4:17:14:95:c6:d8:2d:b4:
         d6:62:74:62:09:97:7d:ed:58:92:05:d8:03:5b:ce:d1:a5:db:
         84:f3:f8:21:97:19:17:5e:ac:64:7e:53:78:13:46:d6:1d:27:
         cd:9f:62:29:48:a2:6b:39:87:60:cb:16:50:12:3f:e5:02:53:
         69:fb:3e:59:39:4d:4b:ec:77:02:a2:79:48:6d:84:2d:d1:44:
         e3:e2:77:dc:67:df:9c:56:e0:3a:5a:38:d4:ba:f6:6b:3b:f1:
         fe:92:1a:44:8b:04:26:27:ff:8f:72:5c:7b:a0:6c:4a:fd:3e:
         b2:00:8a:68:4f:53:de:d4:61:c6:28:b8:f4:c2:22:4b:69:dd:
         0b:ba:6e:25:59:12:62:8d:25:0f:9a:c5:ea:04:1c:b2:3c:e4:
         7e:74:7d:4a:4a:a1:dd:d4:fa:0c:47:84:f4:47:4a:55:0c:cf:
         b2:24:72:3d:8c:7a:8b:a5:40:af:92:2a:5a:0c:bd:69:95:21:
         3c:46:30:e0:a3:c9:f3:04:19:15:a1:7c:d0:a5:2f:22:83:3e:
         11:73:99:f7:81:91:2c:76:a6:df:f8:23:31:d6:84:de:a9:8f:
         c6:af:f4:c7:10:28:9c:e3:29:63:8a:6c:bf:38:77:96:e0:20:
         54:1c:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:20 2026 by rpki-client