Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
File:                     33372e3233302e35322e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          Nd2GAR7+0VX0TOYlS4Z1DWv/TMy8x0ssP7sMMsAdT98=
Subject key identifier:   E5:0E:1E:9A:E2:46:CE:ED:76:09:65:C5:D4:93:CF:DE:AF:8C:14:9F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       518B738A78BA94B26A1F83832100E586EDE17E2D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa
Signing time:             Tue 23 Sep 2025 15:55:07 +0000
ROA not before:           Tue 23 Sep 2025 15:50:07 +0000
ROA not after:            Tue 22 Sep 2026 15:55:07 +0000
asID:                     64267
IP address blocks:        37.230.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Oct 2025 18:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:73:8a:78:ba:94:b2:6a:1f:83:83:21:00:e5:86:ed:e1:7e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep 23 15:50:07 2025 GMT
            Not After : Sep 22 15:55:07 2026 GMT
        Subject: CN=E50E1E9AE246CEED760965C5D493CFDEAF8C149F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f7:0b:64:fd:4d:7c:34:63:b4:78:85:9d:d8:
                    7a:2e:64:c3:16:61:14:64:30:45:e1:86:1a:04:1e:
                    a5:66:df:e6:7c:f3:2d:6d:97:2a:e7:f8:a5:19:e5:
                    f3:f6:57:b6:c7:64:d4:c4:97:28:3a:85:d4:f8:07:
                    c8:f6:7d:4c:5f:6f:4f:e1:09:48:ad:d9:9f:75:78:
                    2d:3e:86:9a:84:a3:34:63:65:4b:23:dc:2e:32:8f:
                    2b:a8:43:04:c5:f1:27:22:e8:d3:d2:06:b5:c7:45:
                    42:51:5a:e4:b0:d1:8a:56:41:a4:f9:6f:e0:93:93:
                    c5:bf:8f:24:01:64:8e:8b:95:f8:a1:a3:66:fe:d9:
                    84:17:84:64:8a:68:59:3d:7b:fe:75:7a:7e:1c:c0:
                    9f:6e:5b:d0:9b:db:19:92:37:5e:ea:b1:e8:c5:78:
                    48:9a:3f:df:16:3d:df:7e:18:f2:31:ac:e7:c2:17:
                    a1:b8:7e:f1:b2:b6:a1:02:03:8f:b3:3f:dc:1f:40:
                    ec:5a:70:4a:7a:87:97:58:59:08:ef:b3:a7:17:d0:
                    b4:bf:ef:bb:8a:93:77:5a:d0:79:bc:a8:0f:eb:05:
                    fb:c8:62:17:b2:cb:5d:00:9f:5d:60:b9:45:4b:cb:
                    e5:f4:43:12:f8:5a:03:7f:76:7b:e8:16:ca:01:6c:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:1E:9A:E2:46:CE:ED:76:09:65:C5:D4:93:CF:DE:AF:8C:14:9F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:92:11:ef:03:3a:d6:c8:5f:02:4f:8f:7c:88:65:cb:e1:b1:
         62:a9:78:39:f2:d5:4c:f5:7e:e9:7f:75:cd:30:d7:8e:82:ea:
         1a:81:66:2c:7d:82:d8:b0:bf:27:c2:49:94:ee:58:03:f5:1a:
         1b:73:af:e0:77:28:df:ac:55:1d:60:7a:58:74:d0:50:d2:8a:
         c8:6b:a2:5c:b5:a1:ca:8e:71:c8:ea:29:82:32:9c:c0:a7:55:
         7e:7a:4b:75:84:66:30:64:f9:96:f3:95:21:80:00:a7:0a:4b:
         1e:42:6d:79:1f:ec:9b:b8:a1:dd:41:09:5c:7b:25:55:25:8e:
         30:cf:98:fd:08:e7:93:99:48:31:62:a4:f4:a1:5b:b3:70:08:
         a4:62:5f:90:5e:10:0c:5a:23:89:dc:fc:dd:11:2b:2c:a0:96:
         64:c6:b4:ca:03:de:7a:48:06:d1:eb:38:8e:8e:c6:64:fb:5b:
         6d:1b:66:c2:24:62:e6:ca:c1:0a:93:3a:b1:e3:d5:78:8f:dc:
         cf:64:e1:48:b3:02:d5:06:ff:df:f4:3f:de:86:7b:63:62:83:
         1a:98:3b:da:7d:86:6d:c0:21:62:03:14:74:a9:49:2a:e3:11:
         68:37:e3:aa:9a:96:1e:3d:8a:c3:22:94:99:00:56:7b:9d:a2:
         9e:3a:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 04:17:59 2025 by rpki-client