Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938303837.roa
File:                     352e38332e3232332e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier:          D5Kg2jtbcEMytjmfEir5qFYTGlE35L1b06eYWB2c/Sk=
Subject key identifier:   FB:A7:78:EC:EF:2A:4E:68:1C:5E:55:00:61:0C:EE:4D:71:C0:7A:F0
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       3782607E4324AE6D738FC7E0F63E8DF047BDFFB5
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938303837.roa
Signing time:             Thu 02 Apr 2026 08:41:54 +0000
ROA not before:           Thu 02 Apr 2026 08:36:54 +0000
ROA not after:            Thu 01 Apr 2027 08:41:54 +0000
asID:                     198087
IP address blocks:        5.83.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:82:60:7e:43:24:ae:6d:73:8f:c7:e0:f6:3e:8d:f0:47:bd:ff:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr  2 08:36:54 2026 GMT
            Not After : Apr  1 08:41:54 2027 GMT
        Subject: CN=FBA778ECEF2A4E681C5E5500610CEE4D71C07AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:96:28:0c:dc:fd:8f:e0:cb:e4:59:c5:28:
                    90:78:50:1d:69:33:fe:c3:5b:c2:ca:5d:b1:d2:d9:
                    bd:74:f3:b7:7b:12:19:62:3b:14:28:16:3c:b2:51:
                    d5:99:8a:0f:d6:0e:81:47:49:a1:d1:76:c1:27:67:
                    52:a2:e2:4f:27:26:79:97:91:d6:8f:9a:c8:95:fa:
                    d4:0a:b1:5e:d6:3a:44:79:b6:1e:2e:91:d6:15:81:
                    14:74:c5:51:81:07:c8:ca:2c:5d:b2:f1:d5:82:d3:
                    07:7c:d8:3d:78:10:f5:78:63:cd:91:e6:96:aa:c3:
                    4b:a7:5f:01:15:84:a4:32:77:0d:5f:cb:f9:39:53:
                    09:c6:c6:4b:d6:78:1e:52:ac:2b:b9:95:55:d7:1e:
                    61:ea:88:8a:c3:20:ae:33:05:4b:ac:0b:40:1a:96:
                    82:bf:db:38:66:b5:dd:f2:85:e2:25:0e:21:86:36:
                    a1:86:a5:3a:de:63:39:01:73:1b:d0:aa:61:83:9b:
                    5d:83:f1:26:4f:c1:26:a3:aa:2b:66:5c:66:15:67:
                    f7:ef:a4:af:c7:42:57:ea:e7:2d:a0:c8:93:1e:9f:
                    ae:02:bf:ff:42:a0:11:98:31:eb:d1:73:db:66:21:
                    e3:4a:ba:1e:b9:f5:fa:91:f3:90:db:72:5d:f2:52:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:78:EC:EF:2A:4E:68:1C:5E:55:00:61:0C:EE:4D:71:C0:7A:F0
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:c2:a4:3d:ab:64:e8:01:1a:99:2d:7f:cb:e1:3c:7e:75:
         3d:bd:3a:df:b8:d3:92:e0:79:80:d8:bd:6a:a4:78:af:49:e3:
         85:80:b5:0e:b0:b4:a4:37:f4:84:35:d8:fa:2e:d2:89:b2:73:
         4c:73:4b:9f:8b:b2:46:5c:e3:9f:ab:45:76:bc:07:84:96:7b:
         0a:fd:b5:0a:44:c1:6e:be:59:d7:dd:28:b4:3b:e0:ec:4c:c3:
         6c:01:9f:07:84:09:31:c9:7c:fd:47:d5:30:2a:44:4b:78:5b:
         10:41:02:9d:59:8c:cf:03:f8:24:cf:c4:c4:84:1b:0c:af:c7:
         8b:08:16:58:a6:b0:36:5c:ef:08:c6:8b:27:b2:28:15:67:c6:
         7e:4a:d0:fe:81:d3:09:ea:79:71:47:8b:33:73:c9:6b:d2:9d:
         23:0f:d1:10:6a:da:97:26:bc:6d:13:a2:54:12:fd:67:54:fb:
         58:14:88:c7:4b:8f:06:38:21:1e:e6:11:3c:91:54:32:f5:08:
         b2:2f:2d:19:fa:59:3e:1f:46:cb:4c:13:d9:94:f1:76:0c:f7:
         62:e9:67:e4:27:f3:52:65:6f:44:5a:08:11:af:bc:03:3b:0b:
         df:71:af:a9:23:67:b5:49:bc:b6:8b:b3:56:99:4c:64:13:8c:
         98:17:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:25 2026 by rpki-client