Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219023.roa
File:                     AS219023.roa (raw, json)
Hash identifier:          mepioREf8Dzo5L8h2/OEO5TPQA6474TWn65w197HPx4=
Subject key identifier:   C6:ED:9E:1C:FB:EF:EC:AE:55:84:FC:9A:0E:21:5E:38:12:D9:0A:20
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6AC97F87F068F497DA00E959F47C856AE1D2CB73
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219023.roa
Signing time:             Thu 10 Sep 2026 08:49:21 +0000
ROA not before:           Thu 10 Sep 2026 08:44:21 +0000
ROA not after:            Thu 09 Sep 2027 08:49:21 +0000
asID:                     219023
IP address blocks:        164.37.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c9:7f:87:f0:68:f4:97:da:00:e9:59:f4:7c:85:6a:e1:d2:cb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:21 2026 GMT
            Not After : Sep  9 08:49:21 2027 GMT
        Subject: CN=C6ED9E1CFBEFECAE5584FC9A0E215E3812D90A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:31:e7:d0:39:30:d7:6e:3b:1e:7e:4b:56:
                    4c:1f:08:2b:f9:aa:9a:a7:65:12:b2:08:26:ce:65:
                    03:db:5b:a9:fc:cd:ba:c7:64:e4:73:e9:e1:27:85:
                    80:e6:49:43:13:f8:c5:d1:55:f9:03:b6:91:c7:0a:
                    e9:36:e1:8e:9a:08:bb:97:51:6b:27:2a:10:93:7b:
                    29:86:07:7d:72:89:3f:8b:65:22:da:f6:03:e4:56:
                    09:44:95:ce:f2:77:45:9e:18:f0:c5:16:5c:bd:45:
                    eb:be:e4:82:80:ab:a2:77:a8:9d:11:4c:a1:d8:a7:
                    ac:23:76:6c:9f:60:a6:11:73:fb:eb:76:7f:4c:ad:
                    6a:0d:04:1f:b1:68:69:6b:2d:d6:15:d3:ba:14:90:
                    8d:3f:8a:95:c5:b3:b3:49:f1:b7:41:d9:17:d5:78:
                    8c:a3:af:de:9f:e5:d2:55:b9:8a:0c:f9:73:9e:6a:
                    55:d8:0f:7e:14:f7:8b:49:8d:6e:e5:12:c1:66:b5:
                    2e:4c:d6:6b:d2:14:96:3e:f4:67:2f:3c:82:04:b0:
                    f0:6c:d0:75:33:65:80:14:e9:cd:81:ca:57:01:4d:
                    9e:b8:7c:73:6a:30:fd:c6:94:b1:e8:0c:13:f0:f6:
                    cc:2c:1a:65:97:9e:e2:a6:9e:e0:ba:4a:5d:4b:5d:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:9E:1C:FB:EF:EC:AE:55:84:FC:9A:0E:21:5E:38:12:D9:0A:20
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:0b:86:ea:fa:42:c1:63:b2:a0:4a:4d:a2:71:11:ae:dc:
         6b:40:33:24:e3:0a:be:99:57:b2:53:88:a4:fa:d4:ab:ec:0f:
         24:73:44:de:90:d5:f3:27:cb:e3:b1:93:be:2e:00:e6:ed:06:
         04:d4:62:ed:90:2d:ab:8f:d5:af:24:d0:96:de:a4:73:c8:38:
         df:79:8a:a7:a6:7e:5b:1b:0a:cc:d3:d2:ac:7b:57:cc:d7:a2:
         7f:05:0b:29:76:3d:d1:fe:34:0f:0a:88:eb:61:1f:f5:ed:ee:
         ea:5e:3f:f5:26:ff:5c:09:7b:45:e3:bb:a4:e6:69:67:7b:b2:
         ee:51:f8:d0:9b:de:16:93:7a:33:9f:8a:f7:a1:e1:06:ab:e3:
         6a:43:4a:c8:b7:14:bb:88:99:91:2a:98:21:58:06:3f:bb:4b:
         72:45:5d:31:f5:70:49:40:62:3c:67:8f:f5:de:15:a1:0b:a1:
         8b:80:68:e4:88:4b:d8:d5:f3:ad:72:eb:9e:fc:5a:f6:94:f5:
         51:f0:a7:2e:69:87:b2:c7:13:e1:df:02:a5:34:cc:83:04:0c:
         d5:10:ec:c2:68:8a:c5:0d:27:c1:24:c8:87:57:da:01:6c:79:
         be:94:bd:74:fc:e9:17:3d:25:ba:3b:1f:b5:d1:a3:1a:8d:15:
         4c:5a:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:42 2026 by rpki-client