Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa
File:                     33372e3233302e35342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          9UxTVEBSh14OlbqhGgNHnuKlgV5wZKU8WNxguuheQUA=
Subject key identifier:   03:CB:E9:00:36:39:65:61:AE:6F:0D:B9:E0:FE:3C:AB:A7:9A:E2:D7
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       143D66355961BBF92DB304830F6F5CA1F2B5E2C0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa
Signing time:             Thu 02 Jul 2026 16:23:08 +0000
ROA not before:           Thu 02 Jul 2026 16:18:08 +0000
ROA not after:            Thu 01 Jul 2027 16:23:08 +0000
asID:                     834
IP address blocks:        37.230.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3d:66:35:59:61:bb:f9:2d:b3:04:83:0f:6f:5c:a1:f2:b5:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul  2 16:18:08 2026 GMT
            Not After : Jul  1 16:23:08 2027 GMT
        Subject: CN=03CBE90036396561AE6F0DB9E0FE3CABA79AE2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:e5:36:ae:af:01:58:de:97:0b:ff:29:c3:
                    5b:43:2c:86:ab:40:c3:cd:98:75:4e:a9:c3:cb:eb:
                    a9:8e:6c:53:9d:ce:cf:5b:7a:e9:87:8c:48:25:ac:
                    87:4c:4a:cf:50:bc:05:bd:94:5b:63:e3:06:c5:fb:
                    6a:d0:d1:15:99:9e:3c:d3:e2:a2:16:be:a0:f9:73:
                    68:47:2c:85:96:50:2b:10:c5:f6:f5:00:72:9c:de:
                    2e:8f:99:cd:5b:84:4f:5c:b7:2b:ee:13:6c:78:b5:
                    5f:2d:d8:64:59:e9:30:60:d9:ed:e4:75:6f:ae:c5:
                    78:df:ad:4d:49:fe:31:bf:3e:ca:2a:ab:d7:20:31:
                    5f:ea:9b:68:60:ce:13:ee:47:31:36:16:9f:37:ff:
                    be:cf:92:c0:91:22:77:1b:1f:b4:0b:33:48:6c:a0:
                    5f:1d:a3:5c:06:0a:3f:3b:ac:44:78:12:51:90:e9:
                    78:f1:28:28:16:f6:bf:f8:19:f3:a2:a2:d9:a0:29:
                    53:87:00:88:c8:70:8d:9c:76:d5:77:f1:67:9d:5d:
                    cf:03:86:f7:a4:df:10:3d:58:09:64:a5:17:7e:b0:
                    81:a5:a1:08:ed:a4:14:70:2a:d9:b4:02:fa:a2:d4:
                    9b:67:ba:d8:80:24:69:37:b4:31:9c:81:80:b2:73:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:E9:00:36:39:65:61:AE:6F:0D:B9:E0:FE:3C:AB:A7:9A:E2:D7
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:dd:75:14:c2:db:dd:f9:45:6c:f2:69:4a:60:48:ec:a7:
         d2:fe:3a:55:9f:e0:ce:5a:9e:06:f5:18:85:64:68:b6:b0:90:
         dd:78:84:12:c4:85:56:29:a4:cc:fc:7f:03:1d:bc:2e:48:50:
         4b:f5:98:bf:24:eb:9a:fd:58:e0:30:61:25:0c:12:30:14:7f:
         d3:79:67:d0:d2:e5:0b:b3:0f:3d:34:d1:63:47:ea:5a:6e:70:
         f0:8a:0a:f3:b7:ca:35:b3:e2:48:49:3d:f5:c3:9d:3f:00:01:
         be:fc:54:07:d1:12:5f:50:ba:41:d8:b7:44:a4:99:57:51:f3:
         2a:79:49:8d:ae:85:fe:af:4b:f5:71:45:17:c7:7b:86:81:4e:
         de:e6:a3:42:87:59:6d:be:0a:dd:0c:2e:41:ce:29:d5:eb:ef:
         c0:91:38:bf:bf:22:90:9a:b2:b1:05:99:d9:60:36:de:8c:39:
         4c:04:c1:a0:d4:88:fd:69:56:4a:4e:4b:1d:9e:ec:ef:96:e2:
         b9:32:0c:db:88:63:17:be:7f:be:24:64:1e:47:94:ac:cc:62:
         2c:dd:00:ad:51:f1:5e:3a:b5:e8:fe:32:9d:ee:a5:55:52:6c:
         6a:57:30:aa:f1:f0:8a:84:f0:38:46:6e:ff:33:68:72:bb:40:
         b6:e1:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:43:38 2026 by rpki-client