Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323037393934.roa
File:                     33372e312e3232362e302f32342d3234203d3e20323037393934.roa (raw, json)
Hash identifier:          7/ibdluUSISMsHkf9GffDTrc39/najXg8CiImV6tdKs=
Subject key identifier:   CD:84:72:88:AE:E2:AC:73:EF:5D:87:85:6F:4F:9A:AC:6A:84:31:06
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7D54C52B012792AD9518FA975EE2EE5ED6E0B1A3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323037393934.roa
Signing time:             Tue 01 Jul 2025 17:49:03 +0000
ROA not before:           Tue 01 Jul 2025 17:44:03 +0000
ROA not after:            Tue 30 Jun 2026 17:49:03 +0000
asID:                     207994
IP address blocks:        37.1.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:c5:2b:01:27:92:ad:95:18:fa:97:5e:e2:ee:5e:d6:e0:b1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul  1 17:44:03 2025 GMT
            Not After : Jun 30 17:49:03 2026 GMT
        Subject: CN=CD847288AEE2AC73EF5D87856F4F9AAC6A843106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:66:2e:8d:a2:f7:54:3b:6e:3b:6b:71:b9:
                    f2:3a:be:49:9a:f8:77:6c:6b:71:02:4c:24:c8:81:
                    af:51:c2:30:fd:8b:ef:7c:58:05:a6:02:7c:87:46:
                    5e:fc:02:b3:27:07:c8:d1:70:9a:21:f9:ab:be:ab:
                    e4:50:c1:5c:a7:6b:ae:b0:ee:a6:1e:09:e8:0b:52:
                    2e:dd:e5:1b:9f:fa:11:0b:b5:80:95:52:16:84:f3:
                    12:d9:86:88:ff:df:68:bc:b1:76:e2:ed:f9:3d:30:
                    a2:3c:39:aa:b6:6f:f6:22:a8:62:b6:2d:45:57:91:
                    9e:c6:8c:74:f4:1f:09:4a:d0:48:33:c6:07:42:ab:
                    48:d1:a4:2b:fd:20:da:48:ef:f9:af:88:28:ab:59:
                    32:c3:3a:11:b0:de:82:f2:ba:b9:93:8d:9c:e5:0d:
                    34:a0:25:05:68:14:a9:48:88:70:10:b5:a7:da:cb:
                    2a:76:0b:09:36:22:6a:cc:80:96:fb:2f:5d:3a:35:
                    1a:7a:a5:3b:56:36:24:0a:7b:3b:f5:b4:22:00:8e:
                    e5:51:c5:f2:66:88:e3:f4:42:a6:7a:7a:66:f8:c5:
                    c9:5f:04:72:be:e4:1c:1e:39:6d:17:3c:09:68:3a:
                    49:bb:b1:11:17:e6:ff:fc:95:20:b8:33:5c:b5:5d:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:84:72:88:AE:E2:AC:73:EF:5D:87:85:6F:4F:9A:AC:6A:84:31:06
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20323037393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:f8:c3:d6:a2:b7:b0:03:f1:8f:07:b1:a0:94:ad:17:b0:
         93:64:0c:b9:ff:7a:91:43:5a:3f:b6:db:a8:63:a8:35:4c:55:
         33:a4:f2:a0:a9:9b:ab:73:71:38:4c:0a:aa:bd:85:42:b0:6e:
         97:41:6a:26:e2:56:6f:83:a8:b7:de:de:3b:dc:3b:f4:8c:58:
         cc:b5:fb:46:a9:b5:5b:9c:69:d0:3e:8c:53:52:f3:15:85:87:
         6a:42:20:6a:a6:8f:59:48:32:66:24:1d:d4:ff:0d:a3:af:bf:
         c7:6f:94:5a:e7:8c:5b:78:21:76:ab:43:9b:b0:ac:17:4b:08:
         0a:e8:84:cb:7d:7e:87:a0:6b:6d:fe:83:b0:f5:bd:07:7b:c2:
         36:ed:da:e0:e8:64:87:a2:ad:9e:9d:54:c7:b1:9e:69:69:2d:
         db:ad:dc:ec:63:f8:7d:1d:bd:c4:49:41:f4:b3:40:72:0f:51:
         4a:c6:e8:68:f7:7e:fa:0f:b2:76:45:16:f0:f8:b7:4e:ff:a7:
         40:97:23:f2:37:83:2b:af:91:c9:eb:c1:0a:4d:a7:68:0f:3b:
         0a:6d:16:fb:0c:a9:c0:16:dd:01:85:91:61:31:bf:c5:2d:c5:
         21:69:2a:27:89:b6:42:c9:57:e5:f8:7a:36:78:43:b9:26:f6:
         13:91:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:04:51 2025 by rpki-client