Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313339363432.roa
File:                     37372e37352e3139332e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier:          SMrHMtLjEpWid2R0MGk0vWZ2j8oiy0J00iXB8iKGJ1k=
Subject key identifier:   E8:B0:D2:6B:89:2D:C8:BD:10:5E:A1:B4:CE:13:7C:5C:69:0F:06:FD
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       04D655A46F0FEB18287BE63E581762B4EBFBB62F
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313339363432.roa
Signing time:             Sat 17 Oct 2026 06:14:21 +0000
ROA not before:           Sat 17 Oct 2026 06:09:21 +0000
ROA not after:            Sat 16 Oct 2027 06:14:21 +0000
asID:                     139642
IP address blocks:        77.75.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 15:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:55:a4:6f:0f:eb:18:28:7b:e6:3e:58:17:62:b4:eb:fb:b6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Oct 17 06:09:21 2026 GMT
            Not After : Oct 16 06:14:21 2027 GMT
        Subject: CN=E8B0D26B892DC8BD105EA1B4CE137C5C690F06FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:bf:eb:82:19:77:44:65:ea:fa:6b:03:e8:
                    a1:9e:2b:65:c1:d4:54:2c:54:ea:76:e0:a8:41:34:
                    7d:75:01:9b:5f:35:c5:99:a6:b9:07:60:97:25:ff:
                    22:93:ec:a5:42:9b:ae:7d:a8:68:7d:e7:8f:7d:7c:
                    8e:21:c7:9c:bd:d6:8d:88:a4:ae:8b:66:95:fe:c2:
                    ef:ca:73:c7:bd:b5:cc:ba:a4:84:da:fa:55:b4:29:
                    75:5b:5e:45:e5:23:f0:b3:59:90:f2:42:6a:55:95:
                    99:b4:dd:62:d7:a4:96:74:39:5a:dd:fa:8b:f6:8c:
                    1d:7e:67:23:c9:0e:10:7f:6c:a1:40:68:ef:23:83:
                    4f:16:f8:20:31:88:e3:0c:96:5f:5e:98:67:f3:87:
                    e4:ca:97:f2:ac:06:12:d6:29:82:9e:d3:36:a1:e1:
                    66:9b:9a:90:19:a2:3b:34:6e:b1:bf:f9:59:f5:bb:
                    53:85:89:24:c3:91:94:c9:f2:d1:a9:92:75:fe:41:
                    53:6d:82:6b:4e:0f:39:98:2f:f3:9d:ff:59:56:3c:
                    a8:96:56:ab:1d:7e:70:b1:e7:ab:f8:11:78:0e:f7:
                    4d:a3:0a:c4:43:e9:51:03:29:f8:2b:bd:72:3e:cc:
                    21:a0:b8:11:c1:4e:9b:dd:e1:83:a9:ba:28:52:4b:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:D2:6B:89:2D:C8:BD:10:5E:A1:B4:CE:13:7C:5C:69:0F:06:FD
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313339363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:ad:15:cf:af:7a:8a:60:cf:b5:d0:51:28:2f:65:f1:16:
         2f:b5:38:76:b5:a6:63:26:a9:77:dc:6b:65:35:f4:82:3a:f0:
         13:f5:1f:7d:c3:72:aa:6e:ea:27:d7:fc:01:5e:30:9c:be:17:
         08:e5:cd:e0:59:a4:29:d3:59:66:9e:78:48:00:69:f5:65:50:
         3a:81:77:7d:6a:45:c5:78:a8:67:04:ef:22:ec:93:b9:27:90:
         2e:f1:bd:b9:82:48:d1:d5:55:93:6f:17:86:5d:10:20:86:48:
         79:3e:dd:89:f6:0e:e9:0c:ca:ae:1a:a8:79:b5:d9:b6:2d:87:
         fb:80:61:a8:af:06:cf:8b:1b:0e:63:ff:55:15:4e:66:1f:e0:
         b2:b0:f9:a9:36:a0:ac:00:45:07:4f:85:07:94:2c:c9:77:ea:
         08:a8:3a:8d:30:9e:fc:ee:df:d8:ea:17:93:86:bb:2f:81:cb:
         3c:3f:24:9c:14:6c:f9:c2:3f:66:06:b2:70:07:b9:ef:d8:56:
         af:75:6d:95:95:d1:e3:5d:12:f7:5b:cf:b0:90:a8:7f:08:72:
         8c:6d:81:83:da:44:fb:d6:08:30:95:14:3f:ba:21:bc:ed:47:
         da:d4:7d:ca:bc:3c:63:b9:4e:0c:e5:f4:e6:9b:ae:71:03:f9:
         cc:8c:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----