Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa
File:                     352e38332e3231352e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          K/KZQ8bUOvDfGQvQxlU6ffNDb5PADhlK8cT+a8rOCxk=
Subject key identifier:   BB:04:F9:72:28:A7:6D:67:7C:72:07:71:F2:19:2C:6A:45:1F:EA:C1
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       047F8875C9004AB3F52FCB47A5BD8ED76CABC971
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 02 Jul 2026 14:48:52 +0000
ROA not before:           Thu 02 Jul 2026 14:43:52 +0000
ROA not after:            Thu 01 Jul 2027 14:48:52 +0000
asID:                     42831
IP address blocks:        5.83.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:88:75:c9:00:4a:b3:f5:2f:cb:47:a5:bd:8e:d7:6c:ab:c9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul  2 14:43:52 2026 GMT
            Not After : Jul  1 14:48:52 2027 GMT
        Subject: CN=BB04F97228A76D677C720771F2192C6A451FEAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:03:da:0d:d8:8e:68:0e:9f:ef:c9:ab:1a:
                    6e:ad:4f:3c:eb:00:84:b9:12:c8:a8:e2:9d:1e:e7:
                    96:ea:8d:e6:93:5f:b0:dc:e7:59:71:b7:72:eb:8b:
                    64:76:c9:26:30:6a:37:56:f2:54:46:0c:00:5f:d1:
                    b2:ba:05:97:9a:75:c4:3f:0e:57:c6:2d:59:04:ad:
                    4a:c9:34:ad:27:c9:47:0a:9d:df:f7:d2:de:61:39:
                    b7:ee:b6:e3:a5:9f:16:33:42:5c:76:d6:60:8b:8d:
                    30:54:64:91:d0:69:01:ef:f3:09:3e:c6:7b:96:67:
                    fe:3a:ef:15:42:b5:92:36:d6:50:a2:5d:36:db:61:
                    18:49:c7:a3:19:ee:ff:d4:c3:ee:cf:14:68:91:79:
                    87:bf:1b:f2:8b:51:e8:cc:f6:22:e2:7d:0a:cd:40:
                    7b:be:1d:be:24:f5:c1:4e:59:9d:8f:a3:dd:d5:ce:
                    f5:83:19:05:ef:32:f9:03:00:71:8d:04:56:e0:90:
                    2d:6d:09:e0:a7:d9:5e:80:3d:89:a8:79:18:f1:a1:
                    ae:86:6f:d8:44:56:ed:81:ab:2a:3d:93:c7:6e:9e:
                    94:cf:0b:eb:c7:97:35:9d:a4:dc:0b:65:3f:c1:a6:
                    6b:79:1e:a7:f7:68:d2:0b:84:d4:e1:e7:6a:74:b1:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:F9:72:28:A7:6D:67:7C:72:07:71:F2:19:2C:6A:45:1F:EA:C1
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231352e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:37:85:14:02:6a:da:f0:8c:45:cf:3f:a3:62:40:d3:4b:26:
         5d:83:2d:92:28:bf:c2:59:07:c1:66:a6:b6:7c:90:8d:1c:49:
         90:7b:29:e7:73:18:b6:2b:38:17:e1:4c:c8:df:e1:d1:e7:e9:
         0a:2b:4b:99:96:13:31:61:be:ee:39:10:b2:e1:42:26:40:4d:
         f8:7c:36:83:a9:9d:f3:1a:cc:3b:52:7d:e5:98:fe:65:87:c6:
         da:f7:4d:c1:c5:71:98:22:b2:12:96:50:43:e5:80:ae:ed:68:
         6f:ac:c4:40:59:d1:05:ea:d6:a1:f3:26:6d:fb:92:7e:33:4e:
         5a:44:35:00:46:a5:1b:35:cf:ef:42:6f:78:73:fa:7f:16:78:
         01:c4:75:d0:01:9f:63:41:0c:3d:8d:63:9f:d3:ba:17:3b:9b:
         b5:8c:93:dd:d1:8a:58:16:7a:b3:1b:ea:6c:71:c9:90:3e:55:
         c2:d2:e6:61:e7:28:f0:57:a8:4e:39:9b:02:fd:25:a7:04:f4:
         99:ba:90:3e:36:fc:40:cd:1f:29:f0:4a:4f:60:46:40:ce:ce:
         a7:04:17:12:e2:60:0c:3f:93:2c:87:09:a1:ac:0a:0f:a8:74:
         5b:ce:a9:aa:08:ea:f3:cb:9e:be:4f:29:23:20:0d:3d:ea:41:
         bb:d5:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:45:08 2026 by rpki-client