Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS979.roa
File:                     AS979.roa (raw, json)
Hash identifier:          kMNDRYkObyNqrQS7zUUJ4J1R948ldlUeIzuWN+xm5ds=
Subject key identifier:   EC:14:2B:B7:88:4C:13:D7:94:90:E9:AF:AC:07:91:C2:D9:48:02:2A
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       064BB2AC235E72F70226CBA7D8A230F27D75B629
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS979.roa
Signing time:             Thu 10 Sep 2026 08:49:21 +0000
ROA not before:           Thu 10 Sep 2026 08:44:21 +0000
ROA not after:            Thu 09 Sep 2027 08:49:21 +0000
asID:                     979
IP address blocks:        164.37.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:b2:ac:23:5e:72:f7:02:26:cb:a7:d8:a2:30:f2:7d:75:b6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:21 2026 GMT
            Not After : Sep  9 08:49:21 2027 GMT
        Subject: CN=EC142BB7884C13D79490E9AFAC0791C2D948022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:c2:ab:64:0f:42:4a:e8:d2:ea:8d:a3:55:
                    ee:de:e6:ee:81:5a:89:c8:43:c5:63:46:43:1c:d9:
                    bd:35:01:4f:62:63:02:10:9e:c8:b7:c2:11:39:cb:
                    23:5b:a9:06:f1:a3:4c:30:75:79:22:11:35:6e:cb:
                    47:fe:4e:34:7e:11:63:ff:a5:88:67:4a:3a:3a:0b:
                    73:c9:eb:eb:6d:1b:25:b4:41:3a:ad:93:12:e2:09:
                    5c:6b:53:20:f0:b7:8c:ca:1f:e9:05:4e:fe:4a:96:
                    ff:d9:e4:76:2f:14:f5:e0:37:bc:3d:3b:8c:a2:a9:
                    7b:df:9a:cc:f5:94:28:16:37:a0:1f:ee:54:46:c7:
                    8a:43:cf:4d:b6:55:30:4f:a7:99:12:6f:dd:2e:a0:
                    fd:d6:e9:80:ff:a8:d7:e6:27:2f:87:f2:f3:b7:41:
                    bb:be:67:cd:64:a4:b4:93:6a:e2:e1:72:9e:f1:58:
                    4f:be:62:9b:cc:0f:f5:41:e2:30:82:7c:d8:c0:39:
                    0f:42:43:67:78:8d:dd:f9:d6:d1:d1:18:28:11:02:
                    9b:da:00:59:d2:89:0c:16:fa:87:ce:30:c3:ce:5d:
                    cc:66:b8:8b:6f:db:db:e5:eb:4a:91:cd:76:67:f5:
                    5b:2e:76:94:fe:6a:cf:7d:36:be:dd:d8:c1:39:c6:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:2B:B7:88:4C:13:D7:94:90:E9:AF:AC:07:91:C2:D9:48:02:2A
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:35:19:2f:79:bb:8b:fb:61:5d:06:97:6e:7d:2c:eb:f8:
         4f:5d:d5:c9:4f:8f:32:fd:b5:53:e5:f3:89:05:c9:19:dc:53:
         44:15:c9:b6:b0:33:bd:49:dd:d3:a2:70:fa:d1:dd:21:e1:d8:
         6b:66:89:6d:73:d4:52:c5:85:08:c4:1c:8c:90:8a:48:e3:9a:
         c9:c6:38:74:b4:9d:1f:c5:5d:d6:11:56:4a:63:ed:ea:c3:8b:
         e4:68:b4:65:c8:38:d9:b9:b3:5c:26:be:c7:8d:84:fc:39:09:
         51:3a:97:49:ea:88:d5:68:24:ca:a8:91:94:b4:41:e9:6e:8d:
         78:f8:e8:3a:81:19:12:3c:e1:0c:6e:1e:a1:88:39:ca:49:73:
         0c:35:e7:77:21:f5:a5:96:52:43:03:0f:84:fd:f9:b0:df:a3:
         3d:fa:66:7b:cf:07:bb:e0:80:cd:10:59:5c:8e:3f:79:e2:30:
         bd:32:9d:a1:80:b8:aa:25:d9:6e:03:29:b2:d9:1d:27:c5:21:
         99:88:7e:b2:b7:c0:78:a0:f8:61:8f:b9:3a:82:5c:7c:44:25:
         69:eb:b9:5e:76:8d:9c:0b:db:cc:cc:b7:eb:df:cf:ba:4f:fe:
         30:49:27:f2:a6:39:ce:4c:af:1d:bb:c6:b8:60:17:ca:4a:98:
         02:8b:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:05 2026 by rpki-client