Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa
File:                     37372e37352e3139372e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier:          mcXO+HfFOGXnTAUqP6MDTqByCSRjRbtr4LaBtK68V5Q=
Subject key identifier:   CD:DF:19:66:AC:C8:B2:21:CE:94:56:DB:AA:F6:6F:AE:D9:4F:43:C0
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       03C9ACE307E1CAFD82D1DDD2E78C430C98BDAEFB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa
Signing time:             Tue 28 Apr 2026 09:48:04 +0000
ROA not before:           Tue 28 Apr 2026 09:43:04 +0000
ROA not after:            Tue 27 Apr 2027 09:48:04 +0000
asID:                     3257
IP address blocks:        77.75.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 04:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:ac:e3:07:e1:ca:fd:82:d1:dd:d2:e7:8c:43:0c:98:bd:ae:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 28 09:43:04 2026 GMT
            Not After : Apr 27 09:48:04 2027 GMT
        Subject: CN=CDDF1966ACC8B221CE9456DBAAF66FAED94F43C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:72:60:97:f2:32:51:22:7c:dd:04:cc:3e:
                    df:a1:ea:ae:91:c7:51:3b:00:e0:2b:1b:da:a3:d4:
                    9c:ab:7c:ee:8c:9b:9d:31:fd:5f:6c:c2:2e:3c:f7:
                    df:86:23:9b:31:dc:14:75:51:20:92:53:0f:a9:d1:
                    2b:83:83:20:bb:e5:bf:6d:b7:b2:19:ef:de:a9:f4:
                    e4:8b:88:69:3a:a7:13:50:17:77:0b:0c:ab:e3:07:
                    e7:4f:96:38:01:50:ef:f0:94:da:93:43:a5:b4:38:
                    44:b4:55:3f:4b:3f:81:54:7b:67:c8:86:c8:10:6e:
                    5a:79:37:ea:b3:66:25:7c:cf:b8:c4:87:34:e4:68:
                    25:5a:1e:91:07:c4:63:d4:e2:8c:24:ba:f9:5d:0a:
                    e2:ef:52:e0:93:d9:9a:74:b1:d7:47:fd:2c:31:d5:
                    f3:4a:0e:93:e5:39:2c:08:7f:30:45:2f:06:3f:28:
                    67:3e:a5:21:56:8a:71:c0:90:00:91:92:55:48:c6:
                    b8:aa:aa:da:7a:7a:66:d7:4a:68:ed:d8:1a:f4:80:
                    00:b4:a2:70:b4:86:c1:a0:32:67:2b:59:a9:0b:c0:
                    83:69:35:d6:26:a4:1c:32:27:a2:65:b0:94:21:76:
                    5a:ed:c9:4c:da:cb:22:3e:ba:b8:80:eb:26:92:e2:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:19:66:AC:C8:B2:21:CE:94:56:DB:AA:F6:6F:AE:D9:4F:43:C0
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:dd:75:d4:8c:0f:1b:a4:92:3b:56:4d:e8:09:c0:6b:b9:
         44:c1:f1:8b:0b:6d:be:42:42:0c:88:80:a2:95:54:a6:9e:93:
         25:25:a7:0b:1c:bd:fe:c8:23:18:87:99:ec:34:ca:34:6e:2f:
         cb:7e:ef:d5:31:5b:cc:a7:88:db:db:9a:fa:30:35:ea:70:6c:
         34:b0:13:a4:ec:30:b1:b9:90:ee:61:a1:f3:3f:8c:da:ce:6e:
         84:69:60:9e:bb:31:84:e3:b5:eb:9d:6d:b1:85:a0:82:cc:58:
         47:69:88:5f:17:77:5e:4a:5d:65:cb:f1:3f:2e:76:6e:a7:5f:
         39:d4:97:50:8b:7e:c7:5e:cf:af:c2:59:09:30:20:5a:c6:94:
         a3:1d:a5:f6:18:27:6b:2b:cf:ee:ff:aa:7c:2e:15:db:0c:52:
         ab:19:7a:bb:1d:e4:3f:b3:4b:a0:40:d3:b4:85:d7:0a:c0:b9:
         2a:be:3b:3c:a3:5d:fc:07:f8:8b:2f:7e:3b:e6:6d:fe:48:ef:
         59:43:8e:2a:bb:7e:fc:a3:f6:b1:4d:bf:fe:40:f3:e6:6e:d8:
         14:34:55:a8:20:b5:7a:df:b2:a7:5d:41:74:4e:69:57:a5:14:
         da:51:96:e6:40:a2:b8:b5:3d:87:bf:13:76:f1:ef:19:3e:55:
         4a:ae:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:41 2026 by rpki-client