Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          zOzAu9dMvTer4xzn0/IWvFnTLRA6gVVTcMrhSMVppdg=
Subject key identifier:   2D:20:EC:B8:BC:7F:32:90:67:9C:9B:9E:CB:15:01:74:E2:0B:51:9B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       104AE7B0A2A7AF5E2E02958DD0E0BEE4D71FCD13
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa
Signing time:             Wed 23 Sep 2026 13:01:37 +0000
ROA not before:           Wed 23 Sep 2026 12:56:37 +0000
ROA not after:            Wed 22 Sep 2027 13:01:37 +0000
asID:                     834
IP address blocks:        62.144.58.0/24 maxlen: 24
                          164.37.207.0/24 maxlen: 24
                          164.37.232.0/23 maxlen: 24
                          164.37.236.0/24 maxlen: 24
                          164.37.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4a:e7:b0:a2:a7:af:5e:2e:02:95:8d:d0:e0:be:e4:d7:1f:cd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 23 12:56:37 2026 GMT
            Not After : Sep 22 13:01:37 2027 GMT
        Subject: CN=2D20ECB8BC7F3290679C9B9ECB150174E20B519B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:4d:83:12:f4:23:66:b1:7e:6f:e4:32:b2:
                    cc:36:ff:a7:5b:c7:b9:9d:bc:c8:5c:7f:a0:c6:92:
                    83:8a:72:e2:55:6a:e6:4d:85:d5:70:b0:c1:b6:b9:
                    bc:b0:f7:f8:11:10:4b:60:c7:36:2b:1c:92:66:32:
                    92:6b:2a:0d:0a:8e:18:3d:89:21:d0:ec:5a:dd:f6:
                    45:21:70:5f:23:9c:01:95:bb:db:c4:3f:6d:4d:4b:
                    8b:2e:ff:c6:6f:29:e3:ca:7a:cf:e0:67:33:f4:fc:
                    23:b2:51:60:5e:73:6f:a9:f4:8b:75:bf:89:ff:56:
                    18:fe:c6:3e:2d:b9:04:51:49:4a:32:46:0a:43:74:
                    a9:8a:ef:fc:b1:43:3d:c8:dd:21:14:87:1c:f9:f5:
                    d2:18:7b:be:b1:b4:de:d1:58:85:d3:cd:d3:0e:ae:
                    f9:f7:c1:e2:cd:f1:b9:75:2d:13:a2:21:7d:0f:11:
                    b8:a2:14:c9:ee:3b:33:8c:bb:e0:74:8b:2c:fe:bf:
                    8d:85:47:3a:fe:13:8f:54:e0:c9:9e:29:ee:0b:c8:
                    6e:d7:0c:f0:39:7f:b5:da:36:07:7f:38:18:b1:1d:
                    48:f1:ac:aa:2e:dc:6a:d7:b8:45:33:a4:f1:62:39:
                    06:7e:ae:bf:20:f5:c9:8c:5c:81:c9:d1:8d:5d:d6:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:EC:B8:BC:7F:32:90:67:9C:9B:9E:CB:15:01:74:E2:0B:51:9B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.58.0/24
                  164.37.207.0/24
                  164.37.232.0/23
                  164.37.236.0/24
                  164.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:07:12:67:9c:a5:e7:f6:bb:09:69:06:89:ad:0b:e0:2a:a2:
         9f:83:00:27:b0:55:15:b6:d1:2d:b6:00:14:1b:1f:78:db:f2:
         1b:2f:7b:d9:0e:d1:fc:5b:f4:b5:b5:ea:04:41:35:a2:6d:02:
         ea:1b:31:e1:c5:91:39:89:01:7b:03:93:03:bc:a1:4a:e9:27:
         15:ae:49:ae:b5:df:ea:06:bc:7c:7f:04:67:74:98:32:fd:da:
         75:a4:5f:6c:4f:f8:98:34:ef:3d:3b:ca:79:a8:ba:fb:71:b1:
         43:ef:ea:0e:ed:4b:cf:89:80:0a:79:a8:6f:0f:8b:06:e2:bb:
         1c:e7:99:17:eb:5b:a5:de:69:13:44:b3:17:a2:42:16:ec:7a:
         45:78:cb:49:dc:6d:49:77:0b:71:9d:a3:7d:5c:3a:a6:36:e2:
         68:a4:0b:f4:bc:b8:17:a9:a5:1f:16:85:97:d7:fd:9f:45:dd:
         83:43:a7:c1:f0:dd:d3:44:d9:85:ff:ca:63:0c:1e:4c:70:59:
         fb:7c:a7:83:0d:f4:e2:b8:f8:29:0a:93:91:c6:7f:cc:1a:fe:
         90:0e:cf:86:88:23:62:ed:56:ff:78:d0:a9:59:df:2f:a0:52:
         b4:ff:0e:31:df:23:48:96:4f:03:40:ce:c3:4d:e2:2c:89:3e:
         26:72:bb:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:55 2026 by rpki-client