Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323134383438.roa
File:                     352e38332e3232312e302f32342d3234203d3e20323134383438.roa (raw, json)
Hash identifier:          T4LPRWrFJwT1PKGfiyUJO5G/s0e9mGBG9fLRXWpUMI8=
Subject key identifier:   6B:95:5A:6A:53:3A:1D:CF:75:82:B0:83:13:95:B1:B3:84:DC:60:0C
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       280BA706AB463546D9BB7E21F02FDDFBC7C557CF
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323134383438.roa
Signing time:             Wed 20 May 2026 03:21:24 +0000
ROA not before:           Wed 20 May 2026 03:16:24 +0000
ROA not after:            Wed 19 May 2027 03:21:24 +0000
asID:                     214848
IP address blocks:        5.83.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 23:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:a7:06:ab:46:35:46:d9:bb:7e:21:f0:2f:dd:fb:c7:c5:57:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 20 03:16:24 2026 GMT
            Not After : May 19 03:21:24 2027 GMT
        Subject: CN=6B955A6A533A1DCF7582B0831395B1B384DC600C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:85:67:70:3e:2c:e6:1e:0d:bd:7b:51:f6:
                    5a:a7:ae:08:ff:49:e2:17:5c:5e:8e:a9:6f:ee:bf:
                    d9:a8:05:c7:4a:fa:9f:af:1e:72:eb:a5:26:00:8f:
                    67:50:2e:e2:c0:95:1c:b6:86:36:a8:99:28:d4:06:
                    b2:7c:01:06:96:11:08:1a:24:66:04:ec:9c:2d:e2:
                    2b:c3:4d:6e:13:57:9d:7b:b4:34:38:76:67:c1:f7:
                    2f:ee:c6:6c:f0:0f:80:41:5c:b7:15:0e:fa:39:cd:
                    97:76:bc:06:9e:c7:86:65:cb:6d:20:3d:9d:79:59:
                    59:f8:aa:ca:07:29:cc:ad:2c:21:01:d0:95:4e:fc:
                    d7:88:7b:dd:62:8b:1f:2d:7d:b7:e9:58:1a:02:3a:
                    dc:0a:da:48:59:68:37:d4:f2:26:16:52:23:3b:23:
                    9e:b8:f2:2d:cb:8e:4a:42:24:7f:32:9b:f3:ea:c0:
                    23:e8:57:65:3b:1b:3e:4c:d0:39:fb:ad:c4:10:0b:
                    4d:e2:05:47:1b:4e:52:b1:af:3a:12:8a:46:22:f1:
                    6d:c9:de:a4:c8:83:1d:cf:51:ec:73:a6:d0:21:0e:
                    fe:3e:ab:b9:ff:6e:b4:cf:fb:a6:22:71:61:a8:c3:
                    41:71:44:55:c2:29:0d:e3:94:fe:ca:8c:59:2d:f7:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:5A:6A:53:3A:1D:CF:75:82:B0:83:13:95:B1:B3:84:DC:60:0C
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323134383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:a0:7e:52:33:98:01:0c:d6:28:8b:10:e1:da:e9:5b:0d:
         9a:29:3d:bb:d8:b0:f7:de:9a:95:ed:cb:41:f0:b1:46:e8:af:
         0c:a6:72:dd:86:57:d8:db:8b:4d:3b:e0:99:16:81:b5:1e:fb:
         6c:af:99:4e:b0:7c:1c:bf:b5:70:1d:6c:55:bd:5a:da:bc:6b:
         3a:3c:b7:5b:76:aa:6d:06:b7:fc:40:55:ee:6e:b9:fd:6e:35:
         39:db:f4:1a:58:99:27:d1:77:87:cc:54:12:ff:56:ff:32:29:
         e7:52:c1:d8:af:21:cf:ee:9b:91:22:fb:cf:85:00:b3:a8:77:
         ef:e1:9e:67:a5:fa:d8:90:9e:24:fd:54:9e:22:a5:90:8c:6f:
         f7:ee:45:de:71:57:0c:d7:93:da:52:2b:6b:83:e0:17:86:26:
         86:76:ec:dd:03:e9:42:b0:e0:a5:e1:2a:af:a8:a7:39:6b:c3:
         2e:81:74:9c:17:fa:5e:f0:f7:f8:0e:d7:77:23:d2:52:57:27:
         c8:bd:7e:b4:31:2b:60:d9:3c:cf:13:7e:8a:54:f1:85:7a:9e:
         2f:6f:33:43:1a:18:ea:18:73:cf:4a:52:ca:47:3a:ca:a6:f2:
         52:f5:d8:72:17:31:82:0f:15:b4:40:33:07:c6:1b:65:52:32:
         ec:15:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 16:27:54 2026 by rpki-client