Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          MAC5MGGURgSvs0Pr/otzSaT9kXHKk2u4zm3CyS9j3QY=
Subject key identifier:   50:E5:18:4F:7B:46:BA:6B:FF:1F:53:15:24:84:23:72:7E:4F:EB:40
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       45A6E18FC30D250BA0974D6A3BB368098EAD0259
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152179.roa
Signing time:             Thu 17 Sep 2026 03:08:04 +0000
ROA not before:           Thu 17 Sep 2026 03:03:04 +0000
ROA not after:            Thu 16 Sep 2027 03:08:04 +0000
asID:                     152179
IP address blocks:        164.37.222.0/24 maxlen: 24
                          164.37.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a6:e1:8f:c3:0d:25:0b:a0:97:4d:6a:3b:b3:68:09:8e:ad:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 17 03:03:04 2026 GMT
            Not After : Sep 16 03:08:04 2027 GMT
        Subject: CN=50E5184F7B46BA6BFF1F5315248423727E4FEB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:d5:d6:45:89:17:0f:47:14:fc:8e:a5:41:
                    3c:05:6a:6f:0c:03:3f:c1:37:44:0e:bf:b4:ba:d4:
                    25:2b:19:40:20:f0:3b:4f:61:e6:43:67:a9:5d:8d:
                    0d:96:60:f6:b0:9a:05:ed:ec:f4:8d:0d:fe:98:94:
                    20:b0:15:56:06:ee:c7:4b:4b:1b:37:06:7c:20:f7:
                    df:7e:54:59:2f:96:61:e7:bb:c5:f1:38:81:70:45:
                    68:38:1a:28:48:c2:37:6b:84:38:08:29:81:81:42:
                    24:d2:f3:a1:d3:1d:04:0b:c9:21:d0:13:22:be:ff:
                    ae:e0:ab:86:69:b5:6f:dc:5b:95:b5:a6:4a:26:81:
                    18:50:38:a8:36:e4:79:54:47:1e:77:8a:e0:ae:1c:
                    19:da:4e:55:a7:18:a2:60:d0:db:78:71:38:c1:c7:
                    cd:00:84:dc:c1:63:cc:d2:f9:2a:d0:86:9a:0d:1c:
                    c2:80:b1:6d:1e:f8:73:1f:f5:df:c1:07:05:23:10:
                    d8:46:14:b3:32:27:3c:44:c6:47:db:5c:18:cf:80:
                    50:9e:c8:96:a0:22:6f:31:62:43:a6:c1:7b:24:a7:
                    d2:86:1e:af:5e:75:83:eb:75:1b:5d:0c:2b:2c:f2:
                    30:8f:ce:42:be:66:2a:e0:28:55:14:42:6b:7c:be:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:18:4F:7B:46:BA:6B:FF:1F:53:15:24:84:23:72:7E:4F:EB:40
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.222.0/24
                  164.37.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:c3:76:2a:f7:46:22:4c:49:82:4c:62:b4:1d:00:5f:a3:
         cc:74:54:ca:d4:83:ba:b3:43:d3:36:4d:ea:c2:47:a1:76:b2:
         2b:e9:1f:19:5e:b3:ed:5f:98:5c:88:25:5a:7a:3c:39:fc:3f:
         51:14:64:b7:8b:b2:32:5c:c1:21:4a:89:f4:86:b7:ef:57:6e:
         cd:e6:c5:7e:9b:c2:b6:c4:c7:db:26:31:a2:7f:a9:68:49:55:
         93:b3:42:27:ec:8f:7d:09:b0:cb:34:d8:e1:ce:a1:64:a5:db:
         c4:7e:d0:22:b1:d4:98:13:37:5c:e2:d7:ef:67:82:24:cc:be:
         92:ad:69:7f:c5:52:ca:e8:3b:78:23:2a:6d:7e:80:c3:be:52:
         31:37:11:78:ad:03:d5:17:1a:1f:fa:8d:ab:a5:7d:05:ac:1a:
         89:d0:a5:91:7c:e1:84:1b:e0:db:44:99:1a:bb:85:42:b2:2c:
         89:ec:29:03:a6:c4:0b:8e:b4:56:4d:2a:1d:2c:22:fc:89:f2:
         23:cc:df:a9:58:99:1a:f8:39:ca:66:e2:eb:96:e3:32:34:cb:
         bc:c6:3e:60:f3:d4:fd:8f:a4:fe:ae:4a:8a:6c:f7:50:b7:7d:
         e0:d4:bd:84:5e:14:b6:b2:87:68:98:22:32:fc:1b:54:2b:79:
         99:ab:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:53 2026 by rpki-client