Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e35352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          77i6zgfnqj31tFuh2MTKPKNSSObZ7sc4ONqnip+OSvQ=
Subject key identifier:   6C:04:75:2A:95:FA:F5:32:E8:7E:26:34:FA:19:1F:5E:32:7E:F7:AC
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       37386FA0FE276566A0717819E44D5867AA3911A3
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e20383334.roa
Signing time:             Tue 17 Feb 2026 04:53:18 +0000
ROA not before:           Tue 17 Feb 2026 04:48:18 +0000
ROA not after:            Tue 16 Feb 2027 04:53:18 +0000
asID:                     834
IP address blocks:        37.230.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:38:6f:a0:fe:27:65:66:a0:71:78:19:e4:4d:58:67:aa:39:11:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 17 04:48:18 2026 GMT
            Not After : Feb 16 04:53:18 2027 GMT
        Subject: CN=6C04752A95FAF532E87E2634FA191F5E327EF7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:ed:94:1f:ee:eb:f8:84:14:c3:fc:95:47:
                    6f:db:1b:05:0b:0b:26:d7:f8:61:0a:f1:9f:5c:d1:
                    62:78:6d:e5:b3:64:ec:2f:3c:88:00:7a:de:31:79:
                    93:a8:ba:a2:29:59:12:51:63:d5:21:cc:59:6c:8e:
                    67:94:fc:00:8c:e3:94:a7:48:e8:f5:a3:65:ac:ef:
                    79:5a:10:1a:a1:27:0c:6c:e8:36:b1:3c:f1:3c:52:
                    ab:31:00:d5:cf:59:ac:08:ab:33:79:4f:a9:8e:d8:
                    63:e7:d3:b2:4f:d6:f9:27:53:3d:84:53:c0:48:ef:
                    8b:1f:60:33:11:c2:27:6a:2d:1b:1a:d6:b3:2f:3f:
                    0c:21:d2:fe:a0:b6:e6:64:43:4b:74:65:c4:0a:ac:
                    26:0a:b0:11:8a:5c:4d:5a:c4:94:17:99:06:4b:24:
                    ba:8d:ca:05:5b:82:bd:e4:ad:87:4d:4f:08:86:2c:
                    27:4f:09:ad:e0:bc:6b:65:ef:71:31:b2:d9:4d:dd:
                    7a:97:92:a0:ec:51:b1:bf:1a:97:ce:2c:af:08:ac:
                    a6:ab:c0:e6:f9:3e:bc:3e:84:01:98:fb:dd:f2:78:
                    9f:75:f6:6e:ef:98:bd:f0:f4:18:02:57:57:de:42:
                    02:b8:6e:c5:5d:cf:78:8d:29:ef:6c:81:b0:9b:4b:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:75:2A:95:FA:F5:32:E8:7E:26:34:FA:19:1F:5E:32:7E:F7:AC
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:60:27:a1:d3:3d:26:37:ad:4c:ba:74:58:04:27:92:96:
         08:9c:32:08:87:b6:2d:ec:10:73:7f:44:c4:9e:2b:96:05:9c:
         36:02:ff:ee:86:69:7a:d2:d9:5f:e0:00:9b:a1:23:86:94:e4:
         51:79:20:ff:6e:db:2e:fe:96:b9:27:ec:0d:17:56:37:49:89:
         38:d6:96:fd:e7:bd:fd:9d:d5:eb:1b:c8:87:07:e9:82:4e:20:
         02:86:25:b6:89:ac:2f:91:81:4e:3b:53:70:00:a6:26:cc:4b:
         59:4e:67:78:7c:c3:5b:af:af:6d:18:34:35:3a:59:a3:c6:f4:
         29:28:02:09:04:4a:bf:42:06:a3:2a:af:8f:b5:b6:e2:ae:38:
         f8:c7:ac:74:b4:cf:15:3d:94:94:0b:95:39:6e:52:3e:ce:bb:
         04:eb:a6:23:35:35:c0:ea:f3:f2:72:bb:d3:51:5a:f3:58:a5:
         2b:c0:f5:ad:cf:61:3c:13:05:10:c2:f1:e9:17:a7:24:e8:fe:
         09:cd:68:8b:46:5c:0d:bb:44:2f:06:c4:76:b6:ca:5c:42:29:
         c0:31:a4:8f:52:97:f3:9a:2f:ac:8c:62:86:48:49:64:ef:88:
         bc:81:e4:ef:63:3a:04:2c:c1:f1:35:61:58:31:ca:ee:f1:98:
         b6:c3:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:51 2026 by rpki-client