Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS199779.roa
File:                     AS199779.roa (raw, json)
Hash identifier:          +n/mBqyQxwmzua9vxHehHyg0IpbY8RdDscnCYbJU7M8=
Subject key identifier:   88:FF:5E:E8:E7:9A:E4:7E:E5:94:56:D1:54:CD:EB:38:1C:4D:86:DF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5EB5D1509A02283D0505D8E113BB04FA34D87787
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS199779.roa
Signing time:             Thu 10 Sep 2026 08:49:22 +0000
ROA not before:           Thu 10 Sep 2026 08:44:22 +0000
ROA not after:            Thu 09 Sep 2027 08:49:22 +0000
asID:                     199779
IP address blocks:        164.37.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b5:d1:50:9a:02:28:3d:05:05:d8:e1:13:bb:04:fa:34:d8:77:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:22 2026 GMT
            Not After : Sep  9 08:49:22 2027 GMT
        Subject: CN=88FF5EE8E79AE47EE59456D154CDEB381C4D86DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:9a:06:b1:12:40:63:91:1e:fd:05:a8:4c:
                    6d:a4:08:b2:35:fd:0f:10:1d:c5:19:55:ab:22:e0:
                    ab:44:7d:a8:1c:ac:e1:70:b3:98:2b:2f:35:08:35:
                    53:5c:f7:f0:9f:9c:49:53:63:51:9e:cf:f2:36:1c:
                    c2:19:82:c5:1c:5d:05:d3:93:40:32:39:4d:35:80:
                    b4:64:74:61:65:b8:6d:aa:cd:c2:c5:45:cd:3d:e2:
                    a2:2f:51:16:b8:c3:b0:eb:84:78:ef:16:51:ae:03:
                    53:a9:c3:c3:ce:10:49:a0:3e:25:b9:01:e2:6c:38:
                    cf:bf:bb:a8:0c:15:b5:dd:4e:18:93:c4:81:e3:0d:
                    f1:ff:1f:6f:f5:d6:59:04:6f:3d:83:4c:83:01:a1:
                    d4:bf:85:95:6e:bc:f3:ef:ef:83:d3:a3:0d:a1:ac:
                    5e:f9:2e:0a:43:63:3c:56:6a:36:6f:2c:ed:d7:cd:
                    89:6e:37:c5:b3:32:d7:91:df:c5:47:0a:aa:57:15:
                    5d:b4:e6:51:9f:ff:2d:6a:1b:77:dd:07:ad:09:55:
                    25:d4:78:7f:02:df:2e:ef:38:9c:de:ba:91:a2:30:
                    f1:e3:ef:41:b3:d6:55:01:54:ab:1d:11:d9:5a:b2:
                    57:3a:d3:80:ce:29:b9:1b:6e:6e:01:39:2e:c3:16:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:5E:E8:E7:9A:E4:7E:E5:94:56:D1:54:CD:EB:38:1C:4D:86:DF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS199779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:f1:73:5a:e8:2d:fe:10:4c:6c:d9:31:e4:14:82:de:07:
         4e:b1:ec:70:ab:d3:cc:a0:76:7a:24:c7:bf:dc:df:62:61:56:
         de:6b:31:e5:1a:83:f0:f0:03:5f:9c:67:c6:c4:92:7f:59:35:
         e3:59:93:99:ca:eb:9b:b5:85:9b:e3:ff:17:0d:66:87:07:ec:
         86:25:9c:9b:fc:e6:29:c9:68:ca:a5:a7:83:20:c1:d4:ed:fa:
         c9:61:b5:7c:36:dc:27:ab:b6:12:5f:ce:c5:fb:b2:0d:f8:83:
         a3:d1:8b:63:64:36:aa:20:4a:56:dc:81:70:b2:e1:62:b8:89:
         ed:6e:b9:9f:23:16:76:fd:e8:8b:c7:56:81:5b:b0:46:ba:6f:
         b0:7c:75:f5:41:f2:b8:17:c9:e8:6e:28:1c:d5:84:c7:45:05:
         bf:82:9f:ea:8d:fd:a2:98:46:70:e6:01:9b:d3:9a:85:4c:8e:
         00:f1:0d:41:f6:0b:9f:3e:8b:2c:6f:85:48:0b:7f:b1:ce:be:
         36:ce:04:1e:90:53:de:46:c1:64:ea:73:61:86:28:28:65:e4:
         fe:70:3d:34:1b:d2:32:72:d5:16:8e:63:8d:1a:76:cb:30:d7:
         8f:ef:f5:c5:aa:69:15:4c:6b:d3:2c:9a:46:b1:05:6f:47:85:
         5d:e5:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:48 2026 by rpki-client