Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313534333833.roa
File:                     33372e3233302e34382e302f32342d3234203d3e20313534333833.roa (raw, json)
Hash identifier:          vwu0gErgO1KWa6ryoG0jvBH25ZIse0GaT26G9fUThAw=
Subject key identifier:   B0:7B:72:6F:C7:68:3D:DC:4F:1D:77:E5:94:69:AF:78:25:B3:96:FA
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       70A7584A25E0D8701FF4AEE2055D3B45AB8270D9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313534333833.roa
Signing time:             Sat 08 Aug 2026 03:39:42 +0000
ROA not before:           Sat 08 Aug 2026 03:34:42 +0000
ROA not after:            Sat 07 Aug 2027 03:39:42 +0000
asID:                     154383
IP address blocks:        37.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:58:4a:25:e0:d8:70:1f:f4:ae:e2:05:5d:3b:45:ab:82:70:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Aug  8 03:34:42 2026 GMT
            Not After : Aug  7 03:39:42 2027 GMT
        Subject: CN=B07B726FC7683DDC4F1D77E59469AF7825B396FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:8b:5b:dd:c5:48:41:d3:e0:67:94:23:07:
                    c9:eb:45:72:45:20:f6:b5:cb:e6:e1:d1:28:b0:ec:
                    b8:34:3b:77:61:79:b4:ff:27:61:61:56:da:62:1e:
                    36:98:41:b9:60:b8:fc:bb:6b:86:56:a1:2e:60:51:
                    6a:0d:7d:10:73:63:26:75:f4:f4:08:07:89:2f:6a:
                    27:f8:1a:5a:fb:4e:eb:d1:a5:0b:5e:61:dd:0b:b3:
                    7e:7f:14:42:cb:38:82:bb:fb:9d:e7:c0:f0:6b:80:
                    f8:88:c5:47:fc:4b:bf:39:d0:b7:d2:84:7b:0e:c0:
                    9e:09:a3:3d:2a:08:14:63:10:24:7f:b9:07:77:aa:
                    df:3b:32:e8:ed:b6:4c:5a:3d:42:25:3a:28:73:44:
                    2f:9b:c1:74:59:90:7c:ae:45:e4:27:88:70:c7:f9:
                    79:4f:d0:0a:21:c4:0c:71:4b:0e:d3:57:8e:55:09:
                    9c:8c:81:85:a0:80:37:2b:f1:1b:05:6c:57:21:fd:
                    30:45:2a:96:14:09:07:0d:45:23:c4:d9:79:8c:1b:
                    64:52:5c:82:9c:ba:ac:e7:14:4f:b0:04:af:30:bb:
                    d1:4e:54:5b:53:b1:aa:c2:47:d3:eb:66:b9:42:91:
                    de:36:ca:dd:c4:3d:84:59:d7:81:fa:80:c7:f8:30:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7B:72:6F:C7:68:3D:DC:4F:1D:77:E5:94:69:AF:78:25:B3:96:FA
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313534333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:78:46:05:e2:b4:5c:be:ce:f3:25:16:6d:34:ce:1c:d6:09:
         84:dc:b5:25:19:f4:0d:7f:1e:03:89:af:73:e9:f4:33:58:78:
         28:b2:37:e4:30:f7:3e:3d:9a:f3:27:e9:c6:a2:b2:0a:26:00:
         ae:00:30:da:f7:07:01:ae:14:d8:f5:ad:58:32:74:d8:c0:19:
         4e:61:f2:50:5c:64:c4:63:1d:4e:c4:84:9e:5e:19:51:82:07:
         ef:b4:71:06:fc:19:bb:d1:d3:09:d8:e2:4b:d3:7e:98:82:43:
         67:eb:6f:63:3e:bf:96:c0:f8:15:0a:47:ff:18:cd:1b:fd:19:
         b8:5c:5d:2d:7a:0f:49:92:80:75:fe:36:e0:27:2b:2f:8e:0d:
         b2:19:04:23:9b:99:24:c4:6f:3e:ea:bc:48:04:5b:2c:ed:8f:
         c5:2c:68:12:65:ce:0e:e5:26:e3:53:89:d9:fe:50:eb:a8:77:
         77:3d:22:f7:f0:e4:be:3c:4b:9f:48:de:ff:78:c7:c4:c2:ca:
         c3:e8:33:f5:e6:a7:1d:3e:f8:dc:85:4c:38:c6:48:28:04:66:
         04:12:d3:dc:5b:19:6c:d3:5f:c3:5b:95:e8:62:d5:db:d0:b7:
         63:10:63:4f:eb:a7:13:fe:1d:f2:0e:c9:98:f2:ba:3c:c1:e6:
         86:42:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:30 2026 by rpki-client