Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402315.roa
File:                     AS402315.roa (raw, json)
Hash identifier:          MrZCTYKZq1xAPZOQmTS8mFuMfx0E+6GFWf7iOZXig3w=
Subject key identifier:   5E:EA:22:FE:36:37:45:22:CF:35:66:4C:82:AD:8A:52:FB:67:F1:73
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       57AED5510A1438A93AB6CDB0D53D80C1F5C3B393
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402315.roa
Signing time:             Wed 22 Jul 2026 03:13:51 +0000
ROA not before:           Wed 22 Jul 2026 03:08:51 +0000
ROA not after:            Wed 21 Jul 2027 03:13:51 +0000
asID:                     402315
IP address blocks:        164.37.218.0/24 maxlen: 24
                          164.37.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ae:d5:51:0a:14:38:a9:3a:b6:cd:b0:d5:3d:80:c1:f5:c3:b3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 22 03:08:51 2026 GMT
            Not After : Jul 21 03:13:51 2027 GMT
        Subject: CN=5EEA22FE36374522CF35664C82AD8A52FB67F173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:fc:6c:39:91:38:52:b5:a2:30:72:37:1d:
                    6e:de:8d:45:a1:7a:02:66:02:60:2b:82:b6:35:98:
                    cb:42:ee:b9:80:69:e6:4c:e3:a1:d0:9d:ae:d8:9b:
                    39:df:6f:81:e2:df:83:3c:39:54:ab:5b:42:b7:4f:
                    5f:55:73:d4:72:1d:82:07:7f:8b:8a:55:02:ed:36:
                    ac:3a:e9:66:54:32:95:7d:2e:20:c5:12:c4:99:5a:
                    a2:74:24:2b:99:fa:fb:cc:b8:aa:8b:9c:70:50:f7:
                    65:cc:77:ed:e3:9f:28:2c:5e:04:21:17:1c:40:fc:
                    00:e0:08:b7:44:d2:b9:02:32:95:c9:ab:9a:ca:1d:
                    83:0f:9b:a6:46:b5:94:14:df:96:d5:ce:4c:fb:98:
                    1a:9e:be:3f:af:5a:cf:84:a6:ee:38:cc:00:57:e2:
                    69:f2:db:f1:01:60:c5:49:d6:8f:e6:dc:1b:22:93:
                    f6:a9:cc:b1:08:33:f7:9e:dd:83:cd:a5:93:81:a4:
                    a1:3e:01:ae:1c:cc:95:e3:ac:b3:2a:a4:bb:14:de:
                    4d:bc:2a:d9:6a:4f:50:37:8a:79:45:02:12:98:5f:
                    9d:e6:30:e8:4c:1a:e5:68:03:6c:58:28:88:78:39:
                    f1:eb:86:89:9a:ee:f9:58:69:4f:b0:94:b5:09:e0:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:22:FE:36:37:45:22:CF:35:66:4C:82:AD:8A:52:FB:67:F1:73
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.218.0/24
                  164.37.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:20:d5:d7:aa:e4:8e:cb:e1:67:2a:05:6f:b2:ec:c0:6f:
         cc:e6:5d:11:9c:97:75:f4:b4:40:a4:ba:f0:04:7e:29:5a:3a:
         b0:a4:30:d2:0c:f4:e4:23:2a:5c:3e:ba:ec:58:42:ce:e8:14:
         e8:2b:be:11:de:1c:05:7d:fa:bb:97:a0:2e:95:d9:1a:19:1a:
         c5:19:0a:19:de:8e:ec:58:cb:ea:62:16:67:3d:f1:61:e2:51:
         56:58:d8:ce:f9:7d:d6:f5:30:76:f6:96:21:c4:b0:3d:72:0d:
         72:ed:de:dd:b9:66:00:9c:53:07:4e:08:01:91:18:80:42:f5:
         8f:78:ec:d9:a5:0f:0d:51:8f:7d:f8:47:1a:38:f8:b2:35:59:
         e8:90:d8:d5:84:99:8b:60:43:fc:af:0c:3f:34:86:47:06:81:
         f0:75:60:01:6d:cc:09:cb:96:c5:0c:29:8f:5f:f8:ac:2e:be:
         60:31:d4:d7:64:8a:6d:08:10:67:3c:d4:e9:ca:bc:be:42:5a:
         3c:e5:50:2d:24:bb:72:38:d2:24:89:10:58:69:39:70:e3:bd:
         7d:41:cc:e3:16:d3:8f:ce:43:56:d6:8c:6a:43:b6:ea:03:e0:
         77:ba:5f:25:24:a3:78:4b:2e:44:ca:9c:67:a6:77:34:16:23:
         f5:40:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:07 2026 by rpki-client