Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e203231383539.roa
File:                     37372e37352e3139342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          RaNZ0487QFqndVUHVnjolXUkk0DAlDkzPXA8BkFj+eo=
Subject key identifier:   4C:FE:55:FD:9F:75:38:F2:8E:9B:F8:9A:52:8C:E6:F4:EE:7B:4A:81
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       1CD53AC3DA712C51096DACED5A29C3EFE16E8412
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e203231383539.roa
Signing time:             Mon 02 Jun 2025 06:33:01 +0000
ROA not before:           Mon 02 Jun 2025 06:28:01 +0000
ROA not after:            Mon 01 Jun 2026 06:33:01 +0000
asID:                     21859
IP address blocks:        77.75.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 05:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:3a:c3:da:71:2c:51:09:6d:ac:ed:5a:29:c3:ef:e1:6e:84:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun  2 06:28:01 2025 GMT
            Not After : Jun  1 06:33:01 2026 GMT
        Subject: CN=4CFE55FD9F7538F28E9BF89A528CE6F4EE7B4A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:e4:78:33:57:5f:9a:96:c0:75:5b:78:5b:
                    ee:6f:4e:88:0f:e4:b0:9b:a9:d5:35:2e:27:b5:14:
                    9c:ab:a1:01:d8:d7:43:09:96:7f:17:10:89:c7:06:
                    a8:0f:98:a4:56:4e:11:79:24:e0:05:d8:e7:e6:76:
                    89:b6:1f:76:f6:cc:81:73:4b:43:fc:e1:46:a6:c5:
                    01:1f:93:64:55:a7:a1:74:28:79:4d:69:04:74:8a:
                    3c:d7:23:13:41:4c:28:0b:22:62:b8:76:53:22:cd:
                    5f:fc:e9:24:c3:60:e1:12:67:56:79:10:5f:ec:36:
                    03:d3:61:81:d2:eb:ea:4a:79:86:0e:e7:ca:7e:2a:
                    0d:a7:23:47:10:3e:91:3f:db:75:99:1e:1f:5c:7c:
                    27:89:a0:8d:35:f4:a7:8b:bd:20:d2:75:05:4c:9d:
                    29:94:42:39:88:92:a3:15:2b:68:bf:5d:d0:5b:61:
                    1c:43:0d:65:2f:94:41:10:94:c6:69:8d:db:6f:4b:
                    4b:7f:55:10:68:2c:50:e8:0c:f3:29:63:4b:45:54:
                    9d:84:9b:ab:85:10:39:69:60:b9:fa:f2:dd:6c:27:
                    23:cb:5f:f4:27:be:ed:fc:f5:39:62:92:0a:ff:6d:
                    5b:40:c7:6b:b7:3b:12:4d:2e:a5:61:e6:e5:49:93:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:55:FD:9F:75:38:F2:8E:9B:F8:9A:52:8C:E6:F4:EE:7B:4A:81
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139342e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:73:2c:1a:1c:d9:45:16:52:d3:3d:cf:0b:60:e4:e9:b7:00:
         6a:0e:87:e0:86:1b:a2:16:b5:e5:dd:54:9f:17:05:d0:ba:2c:
         c3:6b:28:ed:16:2f:20:dd:d9:da:76:a0:74:9f:19:71:22:cf:
         51:73:65:34:80:05:e9:2f:da:ef:fb:6e:55:c0:bc:7f:37:15:
         d3:4c:7e:6a:23:33:42:ca:e9:3a:55:21:08:49:a5:66:aa:68:
         1e:a2:11:29:b0:fe:0d:07:b9:b0:2b:85:43:a2:1a:8c:f9:8f:
         4f:57:b1:d6:d9:5b:9b:ae:64:c9:8c:1c:95:36:3c:a1:40:60:
         9e:7e:16:ce:a4:5a:0e:78:49:dc:75:b0:d1:90:02:56:59:70:
         4b:39:7e:4b:42:c4:05:7d:64:3d:eb:6f:41:8e:3f:39:3f:b4:
         33:a6:d0:00:c1:54:1a:81:be:4b:52:e2:3c:d9:19:09:60:fb:
         9b:18:6d:7d:fa:dc:ae:a8:0e:34:e3:26:fc:3e:30:13:ee:d5:
         f4:cc:b6:05:ae:2b:6d:33:1f:72:f9:70:8f:95:0d:be:f4:4a:
         05:b2:1a:e1:8c:df:86:dd:2f:64:db:2a:4d:2a:f3:34:7b:a1:
         68:45:dd:0d:8f:f9:67:71:46:0c:8f:bf:e5:32:8b:26:75:18:
         b1:6f:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:18:45 2025 by rpki-client