Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323134343332.roa
File:                     352e38332e3230392e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier:          GRigwHE7NwiF0Yl6asVyB5iALXJqbR1S+otSh0seNFw=
Subject key identifier:   27:98:C6:9B:31:48:83:21:A7:E9:98:8F:7D:73:D3:16:CE:7E:61:4F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       5E60BAB3D73346E21B9CC6BF6AE308101534AFD9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323134343332.roa
Signing time:             Sun 22 Jun 2025 09:36:22 +0000
ROA not before:           Sun 22 Jun 2025 09:31:22 +0000
ROA not after:            Sun 21 Jun 2026 09:36:22 +0000
asID:                     214432
IP address blocks:        5.83.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 10:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:60:ba:b3:d7:33:46:e2:1b:9c:c6:bf:6a:e3:08:10:15:34:af:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun 22 09:31:22 2025 GMT
            Not After : Jun 21 09:36:22 2026 GMT
        Subject: CN=2798C69B31488321A7E9988F7D73D316CE7E614F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:23:7d:2b:3d:a8:d8:04:cc:c1:f9:60:44:
                    11:8d:8c:b3:c3:97:ae:4d:46:39:0c:3e:ae:94:07:
                    17:13:cd:a8:e0:ae:e4:21:28:a5:f7:7e:80:6f:82:
                    3d:70:4d:96:a6:d1:8a:97:d1:15:c6:8f:66:ab:02:
                    e9:9f:7f:e6:15:bd:47:02:01:58:29:52:93:4f:af:
                    7b:dc:2c:43:50:9e:58:18:73:2e:1c:cc:37:6a:08:
                    f4:3a:fd:56:cb:9c:af:bc:ce:7c:b6:09:7f:61:a9:
                    0f:a5:cd:54:46:3d:05:f1:58:36:f8:16:71:68:5e:
                    be:10:5d:b1:33:5a:99:f0:fa:f9:58:e2:f1:b9:8b:
                    bd:5f:5c:f1:5c:43:da:31:91:d8:12:b1:c3:15:62:
                    28:b3:a1:eb:5e:ca:c7:2a:6e:d9:81:9b:91:fb:fb:
                    5c:e5:b3:d7:ae:94:bf:c9:6b:cd:70:2f:5b:78:6a:
                    fd:9f:92:ac:63:41:54:9b:37:cf:15:89:b5:dc:e7:
                    09:f9:5e:28:81:68:e7:80:25:8b:a2:c6:1e:19:f6:
                    2c:4d:0b:aa:28:d4:6b:d2:1d:9c:75:70:19:42:9e:
                    69:24:07:31:01:24:06:1a:84:d1:7f:a8:8d:15:f2:
                    f1:b3:8e:31:c0:49:b0:76:b5:8c:8d:8d:18:4d:e7:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:C6:9B:31:48:83:21:A7:E9:98:8F:7D:73:D3:16:CE:7E:61:4F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323134343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:c8:48:1b:1f:43:45:97:05:9e:c6:4b:d8:e5:fe:ab:76:
         ef:3b:f1:16:57:20:6b:ed:f7:d4:eb:05:32:bd:6a:e1:d0:bb:
         a1:4a:92:fe:a0:d7:19:ca:2b:1c:a5:d1:52:19:0c:ec:19:c1:
         f9:3a:c6:f7:96:2f:cb:3e:e0:1e:8f:c1:0f:5d:21:dc:79:3f:
         17:6f:5a:e1:3a:0a:ca:8a:fc:bc:64:9c:b7:ce:26:fb:4e:c1:
         fb:19:43:5f:31:45:1a:01:cc:b8:e4:b4:b4:6b:ca:7c:aa:dc:
         d7:a5:6e:9a:0e:f9:ba:b9:19:b1:14:67:57:9d:50:31:06:b0:
         4c:d8:d4:23:4e:34:95:40:c3:69:64:24:c2:c1:8b:e1:7f:de:
         ea:89:11:2d:ad:ef:aa:d0:1e:1e:15:87:40:e6:a8:b2:21:23:
         5c:ad:53:0c:14:55:8b:0b:71:35:56:b5:fa:4e:76:e7:d2:11:
         66:36:0e:51:0e:ed:e8:b8:6c:64:a5:51:2a:6e:95:fe:9c:f3:
         47:ad:4b:2a:85:38:d5:02:58:a6:35:7f:ce:6a:f8:ee:bd:b6:
         7d:dd:21:19:b3:50:f4:69:a3:ff:d0:62:be:64:cb:42:d9:5c:
         78:9b:0f:67:30:72:67:16:d6:73:be:08:07:01:c2:e1:a3:e1:
         fa:7c:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:02:19 2025 by rpki-client