Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e2036323034.roa
File:                     37372e37352e3139322e302f32342d3234203d3e2036323034.roa (raw, json)
Hash identifier:          VnIQ2LLbX9NDNLgkNQbSghKVILqlOqnlrUXslmaIUt4=
Subject key identifier:   E4:8D:39:86:E2:9D:AA:09:75:99:71:3B:7C:8A:46:5E:CD:A6:C2:2D
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5874BDD98C2C85FC156039DCDEC152CCDBC6A82D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e2036323034.roa
Signing time:             Wed 26 Feb 2025 21:53:55 +0000
ROA not before:           Wed 26 Feb 2025 21:48:55 +0000
ROA not after:            Wed 25 Feb 2026 21:53:55 +0000
asID:                     6204
IP address blocks:        77.75.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 19:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:bd:d9:8c:2c:85:fc:15:60:39:dc:de:c1:52:cc:db:c6:a8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 26 21:48:55 2025 GMT
            Not After : Feb 25 21:53:55 2026 GMT
        Subject: CN=E48D3986E29DAA097599713B7C8A465ECDA6C22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:2a:1f:a4:dd:69:00:e6:e1:4d:1a:2d:1a:
                    9b:6c:71:2c:ff:a3:1b:29:5a:54:c7:41:b6:8d:94:
                    b6:8e:0a:56:08:fe:62:3a:22:b3:9a:8d:1d:ac:3d:
                    c5:41:40:e4:ee:d8:14:b1:7c:a2:87:8e:f4:e9:b6:
                    7f:b3:a2:38:50:a4:b5:60:14:32:12:c1:fb:bb:65:
                    9a:12:e7:5c:60:53:bf:71:1e:fe:ad:ba:2f:15:56:
                    d4:95:de:b2:82:0f:b0:92:ba:51:e7:ef:40:d1:b1:
                    01:b5:dc:6c:65:b4:74:f2:c8:6a:d7:c9:ef:f2:2e:
                    32:d5:7f:03:c5:bb:5e:00:c5:84:36:08:74:46:d3:
                    0c:51:a6:e7:f5:20:7b:8b:bd:ac:9a:4e:80:ac:40:
                    df:a8:ff:84:49:7f:79:c2:23:d0:d5:5f:62:04:16:
                    d0:c0:e2:64:0c:61:7e:b4:bb:6d:a3:88:4f:a2:65:
                    26:b8:20:47:b4:82:51:a6:04:e0:20:75:26:0b:fd:
                    f9:86:c1:2c:3d:90:1b:fe:6f:6e:b1:20:40:fd:23:
                    3c:0e:c8:24:13:2e:d4:cd:1d:c9:93:85:2d:cc:65:
                    63:84:76:f2:ee:24:b7:32:ea:e2:d6:d2:6c:b9:0c:
                    fe:a8:54:8b:3a:fe:f6:97:8e:2d:d2:e0:a7:42:28:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:39:86:E2:9D:AA:09:75:99:71:3B:7C:8A:46:5E:CD:A6:C2:2D
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139322e302f32342d3234203d3e2036323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:1d:6b:19:be:c5:85:74:64:c5:96:0f:e6:f2:fc:a5:af:
         c9:46:2a:b8:b4:0f:71:a6:38:72:65:e7:e6:85:c8:36:f8:3e:
         47:e8:a4:66:7a:ba:ff:83:ef:a7:bb:96:e8:af:51:25:42:2f:
         26:b4:df:b3:a4:84:08:4c:18:4a:bd:a2:55:f8:27:7c:1f:d5:
         5b:26:4d:1b:98:3c:bc:00:51:80:d0:b5:5d:aa:29:ef:54:4a:
         af:39:bd:b5:7d:c3:24:5c:45:bf:5b:f1:4a:d3:43:6d:51:84:
         77:26:c2:59:fd:af:db:0b:ea:8c:eb:c0:70:db:34:a5:8d:95:
         1a:2f:52:63:d2:7d:44:d7:8e:8e:cf:e5:bc:ab:7a:b3:b0:49:
         e1:ec:51:31:65:49:70:10:25:56:c7:e6:f2:d3:d3:9a:f1:0d:
         e0:16:e9:1d:dd:a2:fe:de:a8:72:5b:a4:c2:2d:98:da:a1:5c:
         54:4a:97:cd:69:8e:a2:08:e6:99:d8:da:95:ef:6d:e8:48:a6:
         dc:d0:7c:60:31:f3:42:72:74:06:df:df:51:53:e4:b5:be:47:
         f2:79:24:05:7a:ba:ce:a5:2c:c0:a7:16:6a:19:ae:3b:b8:a1:
         27:b4:4c:de:82:37:0d:e2:30:af:49:ee:6f:bb:d4:f1:13:fa:
         08:37:ff:fd
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUWHS92YwshfwVYDnc3sFSzNvGqC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNTAyMjYyMTQ4NTVaFw0yNjAyMjUyMTUzNTVaMDMxMTAvBgNV
BAMTKEU0OEQzOTg2RTI5REFBMDk3NTk5NzEzQjdDOEE0NjVFQ0RBNkMyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoyofpN1pAObhTRotGptscSz/
oxspWlTHQbaNlLaOClYI/mI6IrOajR2sPcVBQOTu2BSxfKKHjvTptn+zojhQpLVg
FDISwfu7ZZoS51xgU79xHv6tui8VVtSV3rKCD7CSulHn70DRsQG13GxltHTyyGrX
ye/yLjLVfwPFu14AxYQ2CHRG0wxRpuf1IHuLvayaToCsQN+o/4RJf3nCI9DVX2IE
FtDA4mQMYX60u22jiE+iZSa4IEe0glGmBOAgdSYL/fmGwSw9kBv+b26xIED9IzwO
yCQTLtTNHcmThS3MZWOEdvLuJLcy6uLW0my5DP6oVIs6/vaXji3S4KdCKAxFAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU5I05huKdqgl1mXE7fIpGXs2mwi0wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzIzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqxB1rGb7FhXRkxZYP5vL8pa/JRiq4tA9xpjhyZefmhcg2+D5H6KRm
err/g++nu5bor1ElQi8mtN+zpIQITBhKvaJV+Cd8H9VbJk0bmDy8AFGA0LVdqinv
VEqvOb21fcMkXEW/W/FK00NtUYR3JsJZ/a/bC+qM68Bw2zSljZUaL1Jj0n1E146O
z+W8q3qzsEnh7FExZUlwECVWx+by09Oa8Q3gFukd3aL+3qhyW6TCLZjaoVxUSpfN
aY6iCOaZ2NqV723oSKbc0HxgMfNCcnQG399RU+S1vkfyeSQFerrOpSzApxZqGa47
uKEntEzegjcN4jCvSe5vu9TxE/oIN//9
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:29 2025 by rpki-client