Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203239383032.roa
File:                     352e38332e3232322e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          bAixBfC8lpvHrFo0z3tH4NifbAVZsW8fKEMlbakAaEQ=
Subject key identifier:   73:10:01:89:79:5D:27:D7:E1:C8:DE:CB:5A:E2:19:D6:CD:DA:AC:69
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       50AE03EB90C7E4BD1AF68B86E3C23C9815674A10
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 06 May 2026 22:47:11 +0000
ROA not before:           Wed 06 May 2026 22:42:11 +0000
ROA not after:            Wed 05 May 2027 22:47:11 +0000
asID:                     29802
IP address blocks:        5.83.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 04:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:03:eb:90:c7:e4:bd:1a:f6:8b:86:e3:c2:3c:98:15:67:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: May  6 22:42:11 2026 GMT
            Not After : May  5 22:47:11 2027 GMT
        Subject: CN=73100189795D27D7E1C8DECB5AE219D6CDDAAC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:3f:27:83:d0:be:17:99:51:5a:14:e4:c8:
                    e7:28:61:8e:07:5e:3f:b7:ac:dd:82:32:17:3c:59:
                    7f:b4:ed:94:da:98:c9:af:0c:98:2a:be:02:db:59:
                    86:c5:0f:41:3d:98:80:40:ca:b7:f8:fa:af:72:d3:
                    f8:80:b9:77:1a:9a:8c:8f:83:a0:0f:82:fc:c4:e3:
                    25:ad:41:93:04:ca:27:93:63:f1:55:6b:07:55:48:
                    4b:8c:7a:6b:dc:d6:c3:71:97:30:28:ba:66:51:cb:
                    a6:40:23:e4:4a:52:7e:3f:a7:1f:2f:ef:54:b7:f5:
                    d1:6f:a0:cb:5e:24:82:24:93:6a:df:1b:db:92:26:
                    a0:2d:48:c2:ce:a4:10:22:8a:74:09:d6:e1:bc:01:
                    23:1e:e1:a4:64:31:4b:e7:5a:6d:4e:c8:dc:d7:6a:
                    ea:a0:ed:03:ba:26:c7:d5:72:4a:64:d2:0b:8b:de:
                    47:ae:80:8b:d9:60:11:09:05:fe:a9:f4:a0:ec:7e:
                    0a:42:fb:2f:40:48:45:59:d1:3d:72:5e:07:4f:11:
                    94:9a:bc:ff:18:fd:ad:a8:00:26:23:c1:e4:3a:7a:
                    ec:20:30:2f:46:71:85:cc:6d:67:81:ed:06:ad:d7:
                    9d:19:c2:24:26:13:61:28:f2:77:4b:5c:10:d7:18:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:01:89:79:5D:27:D7:E1:C8:DE:CB:5A:E2:19:D6:CD:DA:AC:69
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232322e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:39:7f:02:64:3c:7d:aa:a9:1d:68:0d:97:8e:99:16:b2:
         fa:60:00:53:8e:72:bf:a0:46:d6:6d:c5:91:50:a6:9b:2f:b5:
         2d:77:d9:81:8a:c4:ba:1a:f2:4b:b1:a8:ff:99:a1:00:8f:f5:
         5f:76:92:51:8f:d4:34:8c:5f:03:7c:cc:5e:0b:56:f3:5a:e5:
         b6:28:bd:59:b6:11:fd:18:43:0e:be:2f:22:91:ba:f6:d4:f4:
         27:d8:ab:57:32:95:25:48:dc:4a:fc:15:d3:6a:41:90:ca:92:
         3e:3e:6c:41:c1:21:ff:02:41:69:d9:43:4a:14:eb:85:8c:6a:
         11:c5:46:c2:20:b1:7d:f4:e9:6e:57:fb:7b:51:bc:11:91:67:
         ab:e5:03:cd:4f:54:68:d9:a1:d1:d9:77:d9:1f:72:91:2e:48:
         7b:06:09:09:bd:61:b8:8a:07:82:38:20:7e:a6:25:fb:fc:85:
         9d:18:93:05:e3:d1:ca:d8:b3:c7:00:ae:36:54:84:b6:7a:2c:
         59:db:cb:88:a4:07:81:a8:c9:75:57:25:e2:90:8d:cd:97:d2:
         9b:d5:13:39:09:9c:6e:53:4c:c1:02:f7:21:87:cb:b5:7d:9d:
         ed:ae:87:ea:39:72:e2:2f:ab:50:23:c3:d2:72:b0:fb:48:7f:
         b4:d2:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:30 2026 by rpki-client