Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313532373236.roa
File:                     37372e37352e3139332e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier:          sh6zO8q7ufHw1w7vVdjGEirVyGVVnhRahZdFU5Hh7to=
Subject key identifier:   8F:94:16:2B:E7:55:05:63:28:6F:EF:93:93:FE:78:CA:A1:49:9E:2B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2288879BBCA4822BC6FAE68858A7D3B986C95906
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313532373236.roa
Signing time:             Fri 06 Nov 2026 09:49:45 +0000
ROA not before:           Fri 06 Nov 2026 09:44:45 +0000
ROA not after:            Fri 05 Nov 2027 09:49:45 +0000
asID:                     152726
IP address blocks:        77.75.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:88:87:9b:bc:a4:82:2b:c6:fa:e6:88:58:a7:d3:b9:86:c9:59:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov  6 09:44:45 2026 GMT
            Not After : Nov  5 09:49:45 2027 GMT
        Subject: CN=8F94162BE7550563286FEF9393FE78CAA1499E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:7c:e0:05:c0:fd:52:f7:70:8b:b4:6e:6d:
                    4f:42:49:04:a2:84:69:fd:5e:25:30:55:44:db:6e:
                    a0:40:9f:d4:e5:76:bc:23:b5:6e:5a:c1:a7:87:e2:
                    f4:2e:9b:6f:47:3d:77:4a:b1:9a:b7:87:10:4a:2e:
                    49:64:fd:84:7b:87:a7:ca:c5:6e:c6:ba:93:78:11:
                    1d:2b:fa:4a:38:93:4c:81:fa:05:c5:72:ed:38:34:
                    4c:05:a2:6d:5b:c3:db:52:8f:f4:50:69:d1:0c:58:
                    84:eb:0e:57:5f:01:33:bd:df:30:81:ca:3e:0e:6c:
                    ed:f8:61:7f:73:c9:ea:bd:7c:75:58:62:99:bc:32:
                    1a:e7:79:88:5d:4c:9d:20:5a:63:86:36:5a:68:7a:
                    68:f4:3c:46:f4:6f:13:83:e7:4b:69:a9:36:6a:e7:
                    63:91:5c:48:b0:5b:90:cb:ac:5e:a1:44:0e:1d:dc:
                    83:7c:7e:03:67:75:01:e3:ef:8a:a1:96:31:01:5e:
                    75:58:97:bd:8d:e7:20:86:04:f8:fb:48:0c:44:ad:
                    cd:bb:3b:b6:e6:fb:aa:60:c7:10:0b:38:96:f9:ee:
                    9f:6f:3e:8a:d5:fc:63:a8:70:12:6a:0a:d0:93:67:
                    2c:af:bf:23:a8:c0:8d:51:b0:60:1c:34:ea:5e:fa:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:16:2B:E7:55:05:63:28:6F:EF:93:93:FE:78:CA:A1:49:9E:2B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e20313532373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:0a:da:b3:c6:f8:45:bc:a8:1f:96:a3:55:cf:17:02:02:
         3d:3e:d0:18:b4:cf:c6:c6:7e:17:b5:d0:f7:9d:81:bd:28:45:
         5a:56:8e:2a:0d:af:07:d1:58:b1:0b:ea:97:6d:f5:55:63:b5:
         ea:47:a8:96:d6:9a:91:f1:ae:a5:b4:87:72:75:07:60:c2:29:
         c0:05:94:5d:48:03:f4:f0:65:d0:96:5d:ad:bc:ec:0a:51:41:
         66:c5:37:93:92:7f:32:a1:e7:ff:e2:03:e8:a9:0c:fe:0d:51:
         88:ce:58:e8:c2:08:7f:4c:21:9b:2e:d9:9c:4b:f1:c2:15:4e:
         4e:12:d0:7c:46:c7:ec:a8:51:df:c2:c4:38:fd:2b:e5:31:74:
         83:7c:98:8b:b3:3f:10:c0:4b:52:11:63:12:a7:3d:ea:e1:a1:
         af:a3:aa:23:1e:66:73:e1:e5:f5:7e:8b:46:74:d8:e5:18:9e:
         b1:1e:73:bd:79:d4:68:99:3b:3a:69:04:07:ab:f3:17:64:fe:
         fe:74:ad:98:38:87:ac:2a:f2:6c:91:b2:e4:27:72:e5:0a:a6:
         a0:d7:c5:f2:c3:7b:80:ae:29:e8:88:1d:4b:fc:3e:7d:c4:9b:
         de:f4:97:c4:55:e0:d0:a9:a4:8c:82:94:9e:b7:df:15:c6:54:
         f4:ac:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----