Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20323135313532.roa
File:                     352e38332e3231312e302f32342d3234203d3e20323135313532.roa (raw, json)
Hash identifier:          cJWdv94Brm9gpAyq22w9tt2vysMHSHJ6Ae8KUxQXPo8=
Subject key identifier:   76:D7:33:28:D1:D3:0E:31:1E:80:12:C4:1E:49:2E:97:F9:82:15:DF
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       0889F72BDDCC0467C32129273FF10BF3D52DA24B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20323135313532.roa
Signing time:             Sun 26 Apr 2026 18:56:57 +0000
ROA not before:           Sun 26 Apr 2026 18:51:57 +0000
ROA not after:            Sun 25 Apr 2027 18:56:57 +0000
asID:                     215152
IP address blocks:        5.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 09:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:89:f7:2b:dd:cc:04:67:c3:21:29:27:3f:f1:0b:f3:d5:2d:a2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 26 18:51:57 2026 GMT
            Not After : Apr 25 18:56:57 2027 GMT
        Subject: CN=76D73328D1D30E311E8012C41E492E97F98215DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:66:8e:8f:08:30:de:30:f3:84:e5:26:d6:
                    15:6a:e7:d9:3b:57:ab:5b:cc:de:0d:14:a0:52:56:
                    c3:e5:8c:81:55:b9:a4:13:bb:fb:f5:93:68:0b:16:
                    b2:67:47:f3:40:f4:58:24:8b:45:83:50:a7:0a:99:
                    c9:e4:21:7a:b3:ca:5a:19:42:dc:29:c9:e1:6f:04:
                    3f:a5:43:ea:48:46:02:24:2d:f2:8e:90:b0:39:8d:
                    5c:96:d3:4a:b1:f4:b1:27:e2:3f:b4:f7:7c:1f:81:
                    95:6e:f5:8f:6b:5d:b6:83:b2:d9:e7:5c:ab:bd:e2:
                    83:01:91:53:ac:68:48:fc:71:fb:2a:5d:c2:e2:c9:
                    0a:17:ce:c1:0b:e5:b6:91:d7:21:9e:67:4c:e3:eb:
                    2d:7f:35:d6:64:6b:66:82:7a:1e:8d:71:bf:7c:f8:
                    5f:40:7c:1b:10:80:e2:5c:e9:db:28:f1:9c:ac:96:
                    5d:26:73:0b:02:bc:d8:96:bd:f1:33:77:aa:64:90:
                    e3:37:8a:44:f6:3f:b1:67:ec:e3:57:7d:d9:9d:68:
                    cc:81:04:71:1f:1a:a0:56:fb:27:c6:a2:7c:d3:e3:
                    1b:c7:1b:38:25:1f:f6:55:af:7d:0a:27:4e:85:15:
                    5f:6e:48:0a:5f:63:a0:68:48:47:b0:35:79:46:d1:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:33:28:D1:D3:0E:31:1E:80:12:C4:1E:49:2E:97:F9:82:15:DF
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20323135313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:51:d3:63:46:a5:47:88:1b:6e:ba:8a:a9:67:8e:d0:ee:ad:
         4a:ef:bc:6e:de:8a:12:51:18:d2:e3:ae:29:03:e1:13:fe:65:
         2c:fe:6b:ee:45:1c:49:5a:03:61:b5:62:f2:31:64:8f:d1:99:
         a8:c4:c9:84:18:f5:66:8c:93:9f:2d:bd:f2:3f:97:65:19:2e:
         d9:35:e7:54:21:85:16:9d:38:86:e7:90:27:35:3a:3e:50:08:
         ee:79:cc:35:eb:15:51:08:28:60:60:01:a3:d6:1d:e8:c3:2e:
         f5:8b:73:55:ee:60:ee:c5:7c:d1:1d:0f:32:cc:27:15:4b:67:
         ac:22:cd:d8:71:e6:bc:e3:df:f9:a7:85:a9:c0:83:5b:98:d6:
         5a:31:95:c9:1b:d9:f2:0f:d1:b0:e7:97:19:fd:b6:b6:d7:c0:
         07:28:04:2b:e2:5a:8a:0b:65:b0:1a:54:2c:3d:6a:67:28:71:
         57:8c:d2:7a:8d:ea:fc:5d:da:b9:78:b3:6f:89:21:b9:76:29:
         bc:90:f1:b3:58:1c:72:20:d4:ee:bf:0b:da:55:23:88:c8:91:
         5e:63:84:86:97:66:3b:c1:94:aa:ec:bd:bc:32:03:70:f0:12:
         45:6c:2e:c5:08:92:14:28:c8:49:92:00:40:ec:5d:d0:1d:83:
         77:ad:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:05 2026 by rpki-client