Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS64096.roa
File:                     AS64096.roa (raw, json)
Hash identifier:          RzrmlVAvJWZbYuUba5fh0yyCHGRBtLqFZtDa2nJylIc=
Subject key identifier:   91:9D:CC:DF:BB:FB:79:43:2C:14:21:96:F7:2F:61:5A:0A:24:FD:03
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5D32595A64974B60C360AD41C323FB45EA4E6115
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS64096.roa
Signing time:             Thu 24 Sep 2026 02:53:43 +0000
ROA not before:           Thu 24 Sep 2026 02:48:43 +0000
ROA not after:            Thu 23 Sep 2027 02:53:43 +0000
asID:                     64096
IP address blocks:        164.37.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:32:59:5a:64:97:4b:60:c3:60:ad:41:c3:23:fb:45:ea:4e:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 24 02:48:43 2026 GMT
            Not After : Sep 23 02:53:43 2027 GMT
        Subject: CN=919DCCDFBBFB79432C142196F72F615A0A24FD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:e2:1f:49:e2:a4:e2:c8:da:21:b9:50:7b:
                    6f:83:8b:41:c2:89:e4:f7:ff:ea:85:ce:29:40:3a:
                    56:c0:c7:5f:2e:6c:db:bf:c9:77:6d:59:28:ad:5d:
                    0c:2c:f5:0e:e0:44:13:8c:84:ec:55:d3:b1:d0:3c:
                    35:eb:0b:06:88:d4:54:6f:bc:5a:08:f3:1f:24:0c:
                    6f:55:a4:de:1c:d5:95:6a:4e:d8:d0:db:58:1d:48:
                    76:a5:19:0e:30:4b:be:6e:5f:d0:f0:07:06:cc:d0:
                    62:d1:61:37:7f:e6:01:88:67:17:29:92:33:bd:c8:
                    12:d8:19:d5:6d:b5:b2:1c:2c:1d:50:54:95:9d:0f:
                    20:35:73:a6:3e:fc:42:3e:55:21:e5:ae:bb:8d:18:
                    14:66:f6:d1:d7:7b:02:6e:f5:94:f6:dc:29:09:00:
                    8d:b1:ec:d6:56:9a:70:d2:5e:b6:1c:df:5a:3a:5c:
                    9e:90:33:8c:18:cc:93:9c:52:db:cd:92:95:c6:af:
                    c8:5e:8e:96:95:cb:0d:f4:f0:1b:44:6c:d5:de:38:
                    2c:de:8d:b6:f3:1e:71:e3:7e:84:87:2a:33:76:7e:
                    80:ce:5c:21:23:03:60:e6:89:71:3b:a0:54:4c:c7:
                    7a:e9:b0:7a:b0:a1:83:c3:27:22:d8:18:a3:64:e9:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:CC:DF:BB:FB:79:43:2C:14:21:96:F7:2F:61:5A:0A:24:FD:03
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS64096.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:cd:d3:5a:22:af:6e:36:3b:e8:f7:01:b4:d5:95:1a:34:
         80:9b:2e:e1:68:06:60:44:e4:b9:51:e0:da:a4:3f:31:54:22:
         4f:f5:f2:81:41:b4:21:68:db:40:7b:a8:45:85:90:a5:21:a2:
         55:9c:8c:a8:b9:3b:a7:50:fc:7d:60:9e:6b:b8:dd:2a:35:bd:
         da:dd:41:3f:41:6c:50:ea:f1:ee:2e:bd:28:79:d4:b9:7d:69:
         40:9e:ee:d4:3d:1b:7b:b2:2c:24:c3:54:d0:e9:51:76:a9:36:
         67:a0:9f:41:68:fb:25:9a:8c:46:b8:e8:46:21:83:eb:4a:78:
         79:01:b3:ec:be:9a:0f:fc:29:af:08:af:2d:2a:12:db:31:3f:
         c8:d5:61:bf:de:0c:ef:af:3a:1e:33:b8:41:9b:8d:af:72:f7:
         c0:28:2c:ac:7f:79:4a:56:6c:c4:44:38:da:02:e6:d8:db:1a:
         64:96:e9:b7:fa:6b:7b:91:1f:16:01:25:d3:f4:84:40:0a:9f:
         8b:cd:12:92:67:26:9d:58:54:b6:22:43:af:17:f1:fa:37:f9:
         92:0c:f1:44:38:45:19:e4:94:5b:0e:9c:79:e2:c8:74:6f:93:
         2d:ff:35:31:c0:e2:95:8f:0a:c2:a8:2d:64:15:d9:6d:8b:94:
         e9:c9:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:00 2026 by rpki-client