Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e2035353131.roa
File:                     37372e37352e3139332e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier:          WPbFqrIRepdYH+68l198OnXsfZUsRc1SS+IjVjCa0QM=
Subject key identifier:   7E:F8:F8:6C:AF:D4:22:D4:92:45:AA:8E:49:76:52:6B:41:5E:D3:FC
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7E34D5A981C174A6E1CA07FAB8702E5D33128056
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e2035353131.roa
Signing time:             Fri 05 Jun 2026 17:47:29 +0000
ROA not before:           Fri 05 Jun 2026 17:42:29 +0000
ROA not after:            Fri 04 Jun 2027 17:47:29 +0000
asID:                     5511
IP address blocks:        77.75.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:34:d5:a9:81:c1:74:a6:e1:ca:07:fa:b8:70:2e:5d:33:12:80:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jun  5 17:42:29 2026 GMT
            Not After : Jun  4 17:47:29 2027 GMT
        Subject: CN=7EF8F86CAFD422D49245AA8E4976526B415ED3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:e7:76:67:29:37:e3:15:9b:83:94:e0:43:
                    5b:7a:f1:50:31:92:1b:2f:ca:18:99:e1:65:e9:ba:
                    34:6c:97:2b:e1:6a:c3:e2:1e:dc:23:f0:70:46:0d:
                    f1:eb:b1:7a:50:34:4f:b2:77:90:73:70:0b:95:fa:
                    98:fc:99:ec:09:12:07:0b:a6:5e:32:97:d3:49:34:
                    e0:e7:39:e9:44:f9:10:39:e5:b8:2e:41:cf:8b:fa:
                    f9:50:4c:af:49:a1:8e:c9:aa:06:d1:67:6c:bf:d8:
                    75:f3:d8:63:fe:37:ab:a8:4a:0f:ae:29:58:13:7b:
                    ab:00:46:cc:a3:40:59:0d:06:a1:0c:d3:45:25:f2:
                    fb:30:28:46:ff:ec:aa:e9:cb:b6:3c:94:a8:93:4f:
                    09:c8:fd:14:3d:7d:99:8c:01:47:8a:07:83:50:52:
                    85:ab:91:75:45:dd:c6:e3:98:47:48:0a:c9:b2:14:
                    a0:02:a7:de:48:13:fb:70:60:a5:94:18:5f:e9:dd:
                    3c:93:49:b0:94:9f:f6:87:30:aa:1f:1b:f3:d9:ff:
                    62:59:0c:91:4b:a9:a4:e0:a7:8a:1f:94:bc:31:85:
                    a3:37:06:48:c2:86:f9:04:f0:23:a8:28:bc:90:f1:
                    17:6c:f4:71:11:86:2b:d1:8d:a9:d6:13:cc:f3:1d:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:F8:6C:AF:D4:22:D4:92:45:AA:8E:49:76:52:6B:41:5E:D3:FC
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139332e302f32342d3234203d3e2035353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:df:80:38:ff:b8:40:cd:2f:0a:38:66:1e:d3:22:ee:db:
         ad:2c:ef:fe:e1:80:82:ad:15:02:7c:05:84:95:2e:30:d8:82:
         fa:25:d8:01:f2:e4:a2:53:f9:fe:7d:0c:2e:88:68:ba:10:da:
         0f:99:7f:6b:fa:c2:1d:a0:48:fc:45:81:bd:58:55:77:f4:3a:
         aa:0e:9b:57:67:61:f0:b1:5b:89:5a:29:64:f4:0d:28:7a:ea:
         09:e3:11:ba:e2:e1:00:08:b8:ce:e5:e5:e2:ad:de:8f:9c:5c:
         b5:90:fc:ba:bf:6e:91:c7:0e:72:83:d1:cd:dd:69:65:ea:c5:
         d4:ac:ab:7f:dc:d2:0c:30:22:aa:4d:28:e5:d2:d3:7a:ed:a7:
         ed:70:16:09:03:28:78:f9:84:f9:dd:3a:9a:e2:c1:56:d4:75:
         1a:18:bb:47:7f:30:64:ba:1b:b8:65:f3:37:9e:c5:92:10:82:
         04:b0:4b:86:02:cb:de:00:76:23:ec:5b:52:7e:b0:ea:08:d5:
         74:d8:08:90:c8:c5:2b:b5:46:7e:2e:35:e7:e6:af:c2:77:ac:
         69:fd:4e:dc:aa:21:52:ab:99:c3:5a:17:f9:28:dc:93:0f:bd:
         1d:d2:42:47:f4:31:c9:5b:29:2e:58:30:d2:aa:e4:92:97:c4:
         d4:f0:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:12 2026 by rpki-client