Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa
File:                     33372e3233302e36312e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          ac0VlTJBP3BokaRvEMypRtw2WabdubkZ7/j8lfJKEks=
Subject key identifier:   FA:15:C4:55:30:10:E8:26:4E:8B:FA:1A:A1:18:92:01:81:2A:D6:AE
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       68846FA0B4D95A2F5722B6C90F9047D90A806857
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa
Signing time:             Tue 28 Jul 2026 04:49:16 +0000
ROA not before:           Tue 28 Jul 2026 04:44:16 +0000
ROA not after:            Tue 27 Jul 2027 04:49:16 +0000
asID:                     3320
IP address blocks:        37.230.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:84:6f:a0:b4:d9:5a:2f:57:22:b6:c9:0f:90:47:d9:0a:80:68:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jul 28 04:44:16 2026 GMT
            Not After : Jul 27 04:49:16 2027 GMT
        Subject: CN=FA15C4553010E8264E8BFA1AA1189201812AD6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:34:73:f8:ac:f5:6f:1f:05:fb:7c:15:24:
                    eb:3f:f6:92:a5:b1:70:04:4e:5c:0e:a1:14:65:41:
                    de:7d:da:27:ce:2c:fd:82:1e:18:c8:07:95:52:d4:
                    23:3b:0e:10:57:b8:3e:93:c7:38:90:24:f1:f0:07:
                    fe:d5:e4:1e:48:cd:2d:b5:0a:43:d5:38:55:79:d6:
                    e4:95:ad:97:e2:06:9b:e9:cc:58:e3:e2:5e:f0:3d:
                    44:fb:f9:94:94:2b:a7:1d:7f:cf:fb:3f:ed:22:85:
                    ea:36:cf:31:a5:4e:90:6e:d5:2e:53:31:02:03:89:
                    54:0d:75:84:58:1c:75:99:7a:60:4b:c4:05:2c:08:
                    bd:2b:7c:bd:34:bc:9d:93:70:8d:9c:22:4b:e4:ba:
                    1b:4f:6b:19:17:88:57:2b:f6:b2:99:a6:04:0b:c4:
                    6d:aa:77:33:0e:43:fc:4e:c6:7a:c4:86:c1:21:a1:
                    54:22:ab:d5:40:96:2c:ed:4c:ac:0a:ce:57:d6:41:
                    2c:e2:f5:e3:23:9e:49:c8:79:96:98:75:cd:b2:fb:
                    5e:75:1d:d8:a1:0c:e1:52:d7:63:73:c9:6f:9d:e8:
                    85:88:1e:c9:50:e1:0e:94:74:04:98:de:f6:41:0e:
                    15:fa:ac:fe:9d:3f:ac:02:49:f5:fe:f2:6c:90:d8:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:C4:55:30:10:E8:26:4E:8B:FA:1A:A1:18:92:01:81:2A:D6:AE
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:b9:00:36:09:a1:e1:80:89:04:d0:77:b5:f1:a9:60:d0:
         48:20:78:28:ad:f0:9d:96:bc:a1:b9:ee:cf:0b:b0:fe:8d:88:
         2c:d0:58:69:94:3f:45:8e:8e:45:ab:76:27:dd:26:7b:bd:ef:
         a4:d7:42:83:bc:77:14:2f:67:47:87:ff:9d:9a:5c:50:2b:9a:
         90:fb:cc:97:35:bb:f2:2f:b9:1c:05:fc:cb:a0:8e:a7:08:c8:
         15:39:4e:52:04:fb:39:b4:f6:98:70:1a:d6:45:63:eb:df:cb:
         f0:52:15:c1:70:ff:56:52:ba:f9:37:89:ce:d2:ac:b7:cf:89:
         5d:03:bc:ce:d4:69:43:60:27:a4:60:55:50:b1:13:88:6f:c9:
         30:b9:49:97:1d:88:f5:82:e6:19:fd:e9:db:dd:b3:b6:3c:2b:
         e8:d7:32:16:d9:ac:fc:a1:1f:11:37:17:b8:78:f6:1a:b4:12:
         2c:29:80:3a:a6:9d:11:13:5e:e9:4d:5e:18:1c:90:ea:9d:cf:
         f6:7b:d3:5f:d1:24:b6:49:a7:81:2b:72:af:7f:da:21:70:f7:
         7f:d6:ea:01:f5:9d:8c:ea:18:65:8d:92:a7:32:fe:06:fc:79:
         9c:83:a7:bd:52:98:6b:b5:d3:46:c9:03:1e:d6:d7:cf:b5:3d:
         b5:9c:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:35:38 2026 by rpki-client