Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2032383536.roa
File:                     352e38332e3231322e302f32342d3234203d3e2032383536.roa (raw, json)
Hash identifier:          aVJ9NtuuCBBl8Z58F/SDFydRgg4oBCbCLaOdCswwL/8=
Subject key identifier:   D4:9B:B3:27:A3:68:4B:0D:A1:08:92:49:7C:2E:2C:E2:18:6B:B0:D8
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4A1CFBD8985F1B609AACB27C6B45CF32183E6644
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2032383536.roa
Signing time:             Tue 27 May 2025 08:25:34 +0000
ROA not before:           Tue 27 May 2025 08:20:34 +0000
ROA not after:            Tue 26 May 2026 08:25:34 +0000
asID:                     2856
IP address blocks:        5.83.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 13:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1c:fb:d8:98:5f:1b:60:9a:ac:b2:7c:6b:45:cf:32:18:3e:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 27 08:20:34 2025 GMT
            Not After : May 26 08:25:34 2026 GMT
        Subject: CN=D49BB327A3684B0DA10892497C2E2CE2186BB0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:c7:52:d3:a8:90:7c:31:be:a2:89:42:83:
                    65:b6:c4:82:7b:25:2e:69:3e:39:b3:17:18:78:b0:
                    e3:2e:55:f0:43:36:ec:88:b3:92:4e:07:57:45:33:
                    1f:79:9b:21:c1:da:42:34:fc:73:fe:ac:f1:db:13:
                    60:ce:b7:3f:57:04:66:a1:a4:d4:4d:dc:64:6b:a8:
                    9e:09:2e:a2:b3:4c:ad:f9:31:2e:46:0c:61:4a:9f:
                    59:4b:b5:e3:4a:be:9d:b7:d8:72:5a:0b:d6:33:83:
                    c2:bf:af:cd:12:98:f1:3a:3b:63:57:d2:c1:20:bf:
                    9f:b7:74:07:6c:0b:ab:0a:84:87:18:32:ad:12:6b:
                    db:cb:d1:58:32:9d:10:c1:41:fa:08:71:1a:1a:09:
                    67:9e:be:c1:cf:12:06:bb:d3:f8:bc:d9:cb:ad:5a:
                    53:4e:f4:0c:10:b8:aa:f5:5f:24:4e:e2:f5:b3:03:
                    b2:ce:26:d2:1c:ea:9e:51:af:6b:c1:d1:1c:0d:c0:
                    75:f6:c6:7e:ad:f3:e7:c5:50:b7:4a:77:8f:1b:8d:
                    2c:79:ab:9f:62:53:29:96:65:92:23:d0:26:03:77:
                    f1:f6:e7:4d:be:b4:57:13:e7:39:9c:ab:96:8d:b7:
                    d8:d9:dc:22:ba:b2:3f:00:f7:8a:bd:db:07:69:29:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9B:B3:27:A3:68:4B:0D:A1:08:92:49:7C:2E:2C:E2:18:6B:B0:D8
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e2032383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:57:ab:9c:4b:72:85:d3:f8:fd:b6:6d:e0:64:fa:52:a0:a8:
         9e:c6:d8:0e:07:6e:08:bf:a2:95:1a:d2:7c:8e:09:b1:3d:05:
         14:08:c3:23:fc:03:b5:84:93:1c:7f:2c:ad:42:65:e5:4d:d0:
         2d:0d:89:4c:30:55:6f:9d:de:1e:99:e0:d2:7e:d2:7b:90:f7:
         1c:04:8b:c8:80:d1:e4:93:9c:61:d7:f8:5a:0f:71:b2:4c:a6:
         08:dd:75:46:9d:eb:41:32:49:43:d0:24:68:b0:0b:e5:00:52:
         45:cb:58:3d:64:d1:b1:00:f6:c6:ed:d7:38:50:b5:5b:3c:2c:
         7d:a5:a7:90:fa:19:a7:76:bb:cf:3e:39:66:b9:8b:bf:65:9f:
         54:cf:13:74:76:62:92:0c:e4:8e:83:39:aa:84:06:54:13:f8:
         72:d9:09:fd:dc:ed:73:51:fa:2b:b6:6f:bd:c8:57:67:70:25:
         25:4e:1b:ef:d8:87:43:7e:e2:61:19:cf:30:ac:af:e8:72:5e:
         90:95:db:14:a6:ec:ea:40:a6:b4:31:ea:d7:21:8f:28:87:b9:
         c3:f2:61:93:aa:2f:9e:78:1b:07:e4:f1:ca:14:8b:17:4c:09:
         2f:d7:bc:81:db:dd:94:d3:7e:f8:aa:0a:87:54:8e:db:c4:9b:
         7c:7a:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:54 2025 by rpki-client