Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36312e302f32342d3234203d3e20333935373933.roa
File:                     3130392e3130372e36312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          OTpUsexhW3QMMSRBuYGyeSSyLt37hjZp79f3QEdUy9Q=
Subject key identifier:   FF:6D:92:18:61:A7:AB:3F:61:2A:04:B9:8C:1C:E3:FA:B6:F3:2D:E0
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       77E6B5C8CFF8450DDBB9EEEECE87414A4221EB70
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36312e302f32342d3234203d3e20333935373933.roa
Signing time:             Thu 18 Jun 2026 10:47:44 +0000
ROA not before:           Thu 18 Jun 2026 10:42:44 +0000
ROA not after:            Thu 17 Jun 2027 10:47:44 +0000
asID:                     395793
IP address blocks:        109.107.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e6:b5:c8:cf:f8:45:0d:db:b9:ee:ee:ce:87:41:4a:42:21:eb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun 18 10:42:44 2026 GMT
            Not After : Jun 17 10:47:44 2027 GMT
        Subject: CN=FF6D921861A7AB3F612A04B98C1CE3FAB6F32DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:be:93:02:a9:0a:72:e4:dd:a5:c5:98:93:
                    16:5b:0c:84:04:f6:57:47:0d:7d:2f:ac:94:cd:00:
                    52:31:6b:5f:ab:fd:b2:84:14:33:37:f1:32:4d:ed:
                    04:3f:a1:e8:7b:75:27:04:8f:94:ce:22:e2:01:46:
                    9e:e1:f1:e8:d5:9c:3e:bf:68:10:89:91:06:c1:51:
                    b1:bc:8c:1f:0c:42:f7:7b:6c:51:2d:30:aa:de:2c:
                    53:b3:41:d0:71:bb:68:f1:af:7f:93:ec:26:be:8a:
                    49:88:f4:7e:b8:d7:fe:e5:ef:cf:13:e9:37:14:c2:
                    90:4b:88:57:45:a6:a7:0a:be:63:81:be:d8:8d:b0:
                    9e:30:5c:4d:a3:74:c8:1a:22:ea:a0:8e:d5:2e:cd:
                    e6:69:4d:aa:c1:4d:84:bf:05:0a:4a:f1:1b:c7:cf:
                    63:45:88:a1:80:7e:c8:6d:cd:11:1e:e2:d3:d8:b2:
                    23:0e:c9:64:98:7c:e8:76:4b:ff:f0:45:66:a2:6b:
                    70:e3:cc:2e:4f:63:c3:3d:4c:f8:1d:64:49:f8:e9:
                    f5:52:7d:f8:3a:f8:89:ba:a0:91:a3:5e:e2:fb:e0:
                    6d:d4:2f:0f:2f:e6:63:11:1b:bd:ce:f4:cf:da:6a:
                    c7:06:b0:46:62:5d:f5:9c:0f:56:b0:a7:f4:2e:a5:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:92:18:61:A7:AB:3F:61:2A:04:B9:8C:1C:E3:FA:B6:F3:2D:E0
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36312e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:3d:dc:6c:e0:a9:91:96:b0:2a:05:49:f6:50:b6:03:81:
         13:56:36:3c:07:3e:c8:8b:12:36:0a:b7:06:cf:2c:41:0f:76:
         93:7e:f3:8f:23:97:66:c3:ff:7f:ba:71:3f:ba:25:47:b7:a3:
         39:41:1d:7a:55:f5:5a:dd:b9:44:9e:a1:96:8f:a3:b7:6e:49:
         17:d9:9e:4a:cb:3e:7a:fd:d3:31:c6:2e:7e:3a:46:ad:1f:97:
         ed:22:ca:cf:f6:2b:5e:e9:34:93:e1:f0:9d:3f:ab:75:8b:02:
         33:14:87:2f:16:30:92:23:33:7c:e3:a8:34:44:60:2b:39:63:
         33:9a:81:dd:54:60:3b:bc:b0:06:1f:c1:ab:d9:22:b8:85:4f:
         ba:42:8f:e5:c7:75:57:73:9e:80:de:a3:0e:70:d9:90:e9:a3:
         f0:b8:c7:96:dc:cb:3e:2e:73:76:be:af:51:18:de:ec:ce:19:
         3e:50:a0:1a:17:f5:fc:6d:30:08:65:e3:ce:c6:01:f0:a4:ed:
         9d:fd:b3:e5:75:f3:c5:0d:0f:7d:4b:5e:4e:09:12:1e:03:d6:
         5d:81:3e:82:37:88:70:6a:73:08:1f:09:73:be:b1:54:57:97:
         eb:ff:be:d1:ae:5c:cd:ee:7e:2c:05:19:18:81:cd:70:dd:55:
         c1:0f:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:00 2026 by rpki-client