Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e2039333034.roa
File:                     33372e3233302e35302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          tPGgKY7Jlbm8mvvMXtlska1xHqXFl2pKwdfpcLz2m7c=
Subject key identifier:   0C:A9:DE:36:AA:CC:50:0A:C0:CD:93:64:28:9C:14:F7:73:6E:7E:C3
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       77BF6DBABCE91206B6B91BD8846686834EBC1500
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:20 +0000
ROA not before:           Tue 08 Sep 2026 06:20:20 +0000
ROA not after:            Tue 07 Sep 2027 06:25:20 +0000
asID:                     9304
IP address blocks:        37.230.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:6d:ba:bc:e9:12:06:b6:b9:1b:d8:84:66:86:83:4e:bc:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Sep  8 06:20:20 2026 GMT
            Not After : Sep  7 06:25:20 2027 GMT
        Subject: CN=0CA9DE36AACC500AC0CD9364289C14F7736E7EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8d:1a:58:9d:cc:0b:11:1e:5a:2b:49:86:e0:
                    4f:4f:c5:d2:de:9e:a9:c7:0d:77:50:ec:21:1b:e1:
                    97:71:9e:33:9f:26:0d:f9:f3:92:32:95:c4:9b:1f:
                    38:6b:bf:4f:e6:3d:ea:68:39:0b:a9:18:d4:75:a8:
                    3a:1f:2a:67:60:de:9c:9d:fc:0a:26:59:98:d0:6a:
                    9e:f1:cd:7c:36:fb:1c:19:7f:88:0b:0a:02:6d:42:
                    c3:1d:a5:65:7e:dd:43:81:35:c0:53:77:41:2a:7f:
                    25:da:bd:95:f2:34:a5:29:59:7f:c9:f5:bb:f7:dc:
                    ea:a1:43:cc:35:d2:f6:1c:d1:b5:d2:52:0c:d5:d5:
                    d3:41:c5:13:cf:69:70:f4:c2:17:da:f1:47:9b:e6:
                    77:c6:b2:e3:4f:6b:51:8b:fc:ce:58:4a:f4:7a:41:
                    13:b5:ea:de:29:44:15:0a:bf:4d:0e:2b:e5:5a:e0:
                    b3:bd:cf:c9:22:58:10:30:b2:9d:2d:52:f8:eb:1c:
                    14:db:0e:01:eb:1f:3e:59:6b:7a:81:71:d4:2f:56:
                    cd:ee:1d:ad:e3:06:af:40:d0:65:7f:b7:c4:5b:5e:
                    ac:e3:af:9d:ba:77:9d:94:f9:4b:db:a3:99:e8:cf:
                    fa:46:52:e1:5b:af:c8:46:d1:56:ed:13:bc:3f:36:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:DE:36:AA:CC:50:0A:C0:CD:93:64:28:9C:14:F7:73:6E:7E:C3
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:67:52:f7:6e:6b:97:4d:96:2c:7b:9b:4f:18:77:8d:d7:74:
         f7:40:2a:90:d2:c1:73:26:f2:74:3f:49:47:34:3c:4a:86:e7:
         59:09:7b:10:99:f2:01:b7:2d:26:e2:e9:22:13:dc:ab:31:b8:
         b3:74:4d:ac:f8:eb:fc:83:f5:2b:31:ab:d1:b0:7c:f5:68:3a:
         3a:7d:f1:5b:e2:24:06:60:03:da:20:72:46:d2:75:93:5e:24:
         8d:45:8e:df:14:12:9d:48:c3:e5:66:83:8b:b5:54:5c:30:f5:
         de:ed:11:7d:3e:3e:97:b7:12:c6:7a:8a:fc:04:fc:47:6b:53:
         05:ec:c6:e7:b8:b6:ae:79:20:8a:71:bb:0a:8a:ea:ea:f2:50:
         65:90:0d:9a:ab:7e:19:8a:12:a4:5b:18:b7:00:00:fb:82:d9:
         20:15:9b:92:24:56:d5:2d:bc:ed:b4:82:ad:22:22:33:da:65:
         40:1d:0c:b3:f9:46:2c:e5:11:ee:b8:98:89:f9:31:06:99:82:
         f6:ca:4b:2d:d3:a5:e1:b1:0d:47:0c:81:dc:80:dc:9d:f8:4b:
         5c:00:e6:c7:cc:a9:c2:55:5e:12:73:7a:17:86:63:68:b9:d8:
         b8:29:b1:08:1c:d9:d7:33:24:df:61:08:b2:f1:ee:3a:2b:8c:
         a6:21:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----