Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9svIf7FHJhs7GeNJjZc0yvlLSVpjAmopaLwoWe7QpnI=
Subject key identifier:   BD:E8:FC:03:B8:48:24:40:E4:66:85:4A:43:F5:2E:43:75:5B:51:E4
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       37A1007BBB9B1B7C4972CE40BF50C8042AA6F4A9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 08 Nov 2026 00:09:03 +0000
ROA not before:           Sun 08 Nov 2026 00:04:03 +0000
ROA not after:            Sun 07 Nov 2027 00:09:03 +0000
asID:                     834
IP address blocks:        37.230.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Nov 2026 04:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:00:7b:bb:9b:1b:7c:49:72:ce:40:bf:50:c8:04:2a:a6:f4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  8 00:04:03 2026 GMT
            Not After : Nov  7 00:09:03 2027 GMT
        Subject: CN=BDE8FC03B8482440E466854A43F52E43755B51E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:30:80:53:3f:70:b3:48:ec:03:3a:04:b4:
                    55:e5:ef:0f:16:33:32:22:cb:8d:68:9f:8c:89:30:
                    f2:79:74:90:38:98:e7:83:1c:a3:06:fc:fb:54:d4:
                    28:f6:ca:93:d1:3c:4b:48:d7:9b:0a:fb:df:a3:25:
                    6e:74:9a:b0:96:66:7b:e6:1b:dc:a3:80:98:99:ff:
                    55:97:8d:14:99:db:86:76:ff:8c:d9:62:6b:80:ec:
                    67:82:d4:97:38:1c:c4:61:81:73:d3:d6:2b:4b:2d:
                    51:f4:78:42:65:7d:51:ec:d3:a2:b8:ec:ae:e7:48:
                    ec:83:bd:d3:54:f7:40:7d:fa:55:34:23:2b:b1:ce:
                    67:82:37:e9:8e:6f:1d:25:2f:2d:fa:91:39:18:7b:
                    e3:1e:6c:71:6c:7d:98:fa:12:42:8d:be:24:c0:c3:
                    c0:62:3d:1c:5a:d8:8b:65:d1:af:b9:41:11:9e:be:
                    13:49:08:be:d7:4d:03:82:89:fa:8d:2c:80:22:f3:
                    7e:02:8b:93:ec:5d:e4:3c:f6:1b:37:5b:e6:e9:d1:
                    2a:24:97:fa:1a:39:9b:ce:76:9c:28:b4:47:44:9f:
                    55:e5:6d:c2:1b:a1:75:b3:d6:59:22:af:40:39:13:
                    91:a0:d6:48:59:57:65:e2:38:cc:71:50:82:a5:3e:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:FC:03:B8:48:24:40:E4:66:85:4A:43:F5:2E:43:75:5B:51:E4
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:7e:05:e7:a4:1f:e5:14:6c:d1:4a:7b:47:b6:58:d0:4a:
         c5:8e:8e:3c:9d:75:bc:db:49:01:ef:d2:21:8a:50:e8:62:0b:
         ea:5f:28:41:4b:ad:13:06:5e:ac:53:47:8c:c3:f3:2b:af:29:
         f8:f7:28:73:53:3b:b9:cc:2e:5e:2d:46:39:fe:c0:34:39:cf:
         fe:13:df:e5:40:c9:a7:8a:d9:6b:73:60:2a:2a:45:1a:f2:c5:
         6d:92:b8:0a:a9:fa:dd:2d:d7:f4:68:79:b7:5e:cd:d0:e8:5f:
         e5:84:1f:43:14:97:57:15:d2:f9:b7:18:8b:14:77:e4:64:37:
         7a:9d:25:ed:13:0c:12:1e:2e:55:9f:69:a7:91:f5:d5:66:61:
         e8:e3:5b:5c:72:53:2d:6d:d1:95:3d:b3:d9:11:93:4d:5f:4d:
         27:e9:7c:1b:f7:47:cb:a4:84:c5:71:66:b8:33:4a:ee:50:27:
         f9:46:69:6a:47:94:63:20:bc:77:e1:56:9a:57:31:16:9d:b9:
         72:71:85:16:92:70:0a:43:5c:61:d7:16:50:27:d8:d1:3c:ea:
         3f:06:39:41:a3:e3:43:8e:76:5c:19:a0:3c:c6:b3:40:13:d7:
         f1:b8:f1:b5:8d:14:5e:ab:f4:45:cf:ad:c9:4c:fd:75:93:e5:
         04:9c:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----