Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20323134343332.roa
File:                     37372e37352e3139352e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier:          uMPNvSsEyVpnchtzqVRCQV5bpmE9PhF6zK554S14njY=
Subject key identifier:   E2:2E:DB:B1:A9:B8:13:AB:C4:7A:C9:B0:BD:91:25:26:85:6C:0F:4B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5231DA6007CC7FD8A45A2B984ED69A7200737606
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20323134343332.roa
Signing time:             Sun 24 May 2026 16:24:09 +0000
ROA not before:           Sun 24 May 2026 16:19:09 +0000
ROA not after:            Sun 23 May 2027 16:24:09 +0000
asID:                     214432
IP address blocks:        77.75.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:da:60:07:cc:7f:d8:a4:5a:2b:98:4e:d6:9a:72:00:73:76:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May 24 16:19:09 2026 GMT
            Not After : May 23 16:24:09 2027 GMT
        Subject: CN=E22EDBB1A9B813ABC47AC9B0BD912526856C0F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:9e:5e:3c:c3:51:9b:16:a6:fe:dc:29:93:
                    34:0e:58:61:fb:1f:11:63:2b:58:a0:d6:6f:89:dd:
                    d9:b2:5c:50:1b:54:d1:03:b1:37:22:88:de:b9:5a:
                    cd:a8:f7:1f:12:09:dc:42:ae:b1:aa:fe:69:96:86:
                    c8:dd:b2:24:3f:ac:03:b3:69:d6:82:ee:36:3e:c8:
                    e1:f7:ec:96:2a:f2:56:e0:58:51:b0:b3:8a:61:02:
                    cf:81:58:89:00:49:31:63:35:1e:71:1b:76:98:94:
                    9f:1a:a8:f2:31:6a:d4:c8:66:33:32:59:31:8a:89:
                    df:82:9a:c0:2b:66:63:ef:41:58:85:df:18:21:8a:
                    62:71:63:90:8f:9c:12:04:9f:54:0f:4c:2b:03:b9:
                    1e:b7:de:00:08:e3:cf:69:6f:e6:ab:12:72:bb:e2:
                    5e:9a:5a:d6:1c:22:e8:09:d0:59:5a:a7:b0:04:91:
                    c5:32:af:e0:ba:be:1b:e6:5f:dd:20:b1:61:3a:34:
                    f0:a4:1e:8c:5f:35:f3:67:23:c8:6f:40:ca:68:c7:
                    b2:0f:fd:39:fa:11:9d:0e:e3:3f:e7:97:62:9f:43:
                    09:c5:fe:d8:60:af:12:45:6e:8f:d3:97:16:e8:31:
                    3c:56:59:74:c1:50:e8:91:dc:07:9e:20:78:09:c4:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:DB:B1:A9:B8:13:AB:C4:7A:C9:B0:BD:91:25:26:85:6C:0F:4B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20323134343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:10:31:90:42:94:72:19:22:b2:ec:90:78:ab:ed:ae:b3:
         15:95:9e:e7:ea:4a:8f:a4:56:87:78:d1:6a:c4:63:84:21:45:
         8f:0f:7c:52:d7:2e:58:3e:2c:89:49:f7:9a:b8:6c:27:fd:45:
         cd:8d:eb:92:62:46:dc:2a:76:c2:cb:e3:cc:99:1a:43:9b:2e:
         75:b5:00:67:b3:e1:c2:90:85:d2:d9:f2:15:fa:7a:22:bb:9a:
         8e:c3:7c:02:81:9b:05:d2:3b:9e:51:8f:1b:db:16:cc:9e:be:
         2c:d1:0f:19:6c:7e:a4:79:41:94:f1:ad:f9:67:aa:02:d7:98:
         ee:9b:d2:eb:0c:bf:2e:50:3e:ff:28:72:5f:9e:49:15:ea:98:
         58:c9:84:66:e5:12:e2:85:55:90:0d:01:80:12:bd:91:ee:73:
         7b:5a:48:b6:8d:74:67:8d:c2:9e:53:03:79:36:e8:89:4d:81:
         78:9a:89:1a:fd:7f:18:d4:9a:c7:98:5e:39:7f:e3:ca:a5:9d:
         b2:10:ec:4a:82:5f:f1:77:76:63:09:f7:6b:41:5e:82:b3:26:
         17:e2:f8:c9:b0:e2:5f:2d:3f:7b:50:46:87:e2:af:f2:f5:9b:
         bb:e1:70:85:21:0a:e9:19:7a:86:00:ca:bc:77:25:00:83:76:
         1f:19:e4:f2
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUUjHaYAfMf9ikWiuYTtaacgBzdgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA1MjQxNjE5MDlaFw0yNzA1MjMxNjI0MDlaMDMxMTAvBgNV
BAMTKEUyMkVEQkIxQTlCODEzQUJDNDdBQzlCMEJEOTEyNTI2ODU2QzBGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyJ5ePMNRmxam/twpkzQOWGH7
HxFjK1ig1m+J3dmyXFAbVNEDsTciiN65Ws2o9x8SCdxCrrGq/mmWhsjdsiQ/rAOz
adaC7jY+yOH37JYq8lbgWFGws4phAs+BWIkASTFjNR5xG3aYlJ8aqPIxatTIZjMy
WTGKid+CmsArZmPvQViF3xghimJxY5CPnBIEn1QPTCsDuR633gAI489pb+arEnK7
4l6aWtYcIugJ0Flap7AEkcUyr+C6vhvmX90gsWE6NPCkHoxfNfNnI8hvQMpox7IP
/Tn6EZ0O4z/nl2KfQwnF/thgrxJFbo/TlxboMTxWWXTBUOiR3AeeIHgJxOlxAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU4i7bsam4E6vEesmwvZElJoVsD0swHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1LwzANBgkqhkiG
9w0BAQsFAAOCAQEAJecQMZBClHIZIrLskHir7a6zFZWe5+pKj6RWh3jRasRjhCFF
jw98UtcuWD4siUn3mrhsJ/1FzY3rkmJG3Cp2wsvjzJkaQ5sudbUAZ7PhwpCF0tny
Ffp6IruajsN8AoGbBdI7nlGPG9sWzJ6+LNEPGWx+pHlBlPGt+WeqAteY7pvS6wy/
LlA+/yhyX55JFeqYWMmEZuUS4oVVkA0BgBK9ke5ze1pIto10Z43CnlMDeTboiU2B
eJqJGv1/GNSax5heOX/jyqWdshDsSoJf8Xd2Ywn3a0FegrMmF+L4ybDiXy0/e1BG
h+Kv8vWbu+FwhSEK6Rl6hgDKvHclAIN2Hxnk8g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:11:21 2026 by rpki-client