Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402487.roa
File:                     AS402487.roa (raw, json)
Hash identifier:          O2RN/lsU77elNxBaHyhyqoS2k1R9WEK2Pc3VC2kBHhQ=
Subject key identifier:   5B:CF:B7:53:21:DB:AB:53:0D:74:30:54:19:0F:B5:B7:F4:14:C9:95
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2CDFA06481276F194CDBFA9FD81CDE862967F34D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402487.roa
Signing time:             Fri 10 Jul 2026 20:23:19 +0000
ROA not before:           Fri 10 Jul 2026 20:18:19 +0000
ROA not after:            Fri 09 Jul 2027 20:23:19 +0000
asID:                     402487
IP address blocks:        164.37.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 15:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:a0:64:81:27:6f:19:4c:db:fa:9f:d8:1c:de:86:29:67:f3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 10 20:18:19 2026 GMT
            Not After : Jul  9 20:23:19 2027 GMT
        Subject: CN=5BCFB75321DBAB530D743054190FB5B7F414C995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:6c:de:f9:9d:ac:de:28:d8:32:ab:67:2d:
                    f5:7f:13:72:70:0d:c3:08:09:6c:aa:5d:b5:e8:bb:
                    98:cf:70:fa:34:f1:35:94:0d:c7:d4:3a:68:c6:cb:
                    be:53:79:da:0b:51:b3:6d:83:55:5a:9f:96:ec:a2:
                    30:76:06:88:5d:ee:81:5c:87:7c:fa:b6:5d:1b:a1:
                    b9:2f:81:c5:a3:2f:98:1a:0f:bd:d2:f1:15:de:58:
                    ad:71:c0:2a:b7:a8:46:b5:a6:9b:6b:a6:df:88:02:
                    30:ec:4c:29:c0:78:67:ab:68:0a:ab:f0:f5:38:aa:
                    01:1a:63:53:34:9c:af:dc:0c:96:c5:1c:31:d0:d7:
                    fb:71:ad:e2:c4:38:43:d3:02:61:af:89:28:d6:f4:
                    f2:a4:e6:31:74:7d:14:95:6d:a9:0e:b7:5c:b4:4e:
                    f9:0f:4f:53:45:2b:cc:79:af:51:5e:ef:39:aa:61:
                    ee:3c:30:7a:1e:fa:f3:ca:c5:ff:e7:49:b5:c3:3f:
                    72:50:43:e1:4a:8b:dc:b6:78:bb:d8:88:2d:7e:a0:
                    3f:4f:29:c2:08:fa:63:cf:f7:f5:81:6d:dd:25:b4:
                    8a:c9:dd:54:76:75:ee:c6:5c:06:2a:2f:c1:42:8a:
                    4d:27:17:12:f3:2c:ba:f6:72:ab:b5:b5:45:3a:ef:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CF:B7:53:21:DB:AB:53:0D:74:30:54:19:0F:B5:B7:F4:14:C9:95
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402487.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:98:8d:c3:a0:a7:d8:c3:f5:b6:e3:e0:15:5f:d8:20:a6:
         6c:8f:a4:39:22:04:e3:cc:e4:f9:c4:33:48:ee:a4:1b:00:21:
         ed:b4:9a:2f:9c:6b:bc:18:74:2a:b3:b0:8b:75:cc:db:ba:dc:
         ec:3d:65:51:37:4c:46:ec:c2:ea:11:ed:5a:a3:be:fb:5b:1b:
         34:bc:8f:f4:d5:e2:c2:3b:d8:f1:b4:70:1c:19:00:80:bb:a2:
         33:18:b8:36:49:0e:ba:17:61:73:8e:10:f9:fe:0d:54:c3:ba:
         3b:00:24:93:f8:6b:cd:7c:ab:e8:23:6c:10:bb:5c:2c:59:dc:
         68:21:ab:f2:f4:1c:cf:a0:47:6b:bf:be:f3:f8:4e:9f:77:f2:
         ed:4f:db:a2:e1:e2:5e:3d:b5:5c:f1:ee:91:27:8d:1b:8c:09:
         64:a1:85:eb:bb:be:08:6e:a3:c8:c3:1c:4a:48:48:3e:1b:af:
         fb:dc:94:4b:39:23:4a:29:68:ba:bd:c7:c8:60:bf:2a:98:45:
         8a:a0:6c:e5:3c:3d:bc:e4:62:c3:a2:b5:6f:fc:38:b4:43:4e:
         56:63:72:b6:d4:7f:9d:60:67:d6:54:c4:7e:33:f8:13:52:c2:
         e7:be:8a:fd:87:6d:77:25:49:a8:23:75:51:4d:65:28:a2:fe:
         f4:17:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:19 2026 by rpki-client