Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Cv10zI3bdMvLjekbcJyz/h/8Plr80EGov6PMGbGBYw8=
Subject key identifier:   54:78:26:0F:8F:E9:EE:54:FC:C7:3D:91:BD:AA:20:6D:6E:57:B3:27
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       30E559DE686ED3CB069CA4E0AFA3F3F26092D70E
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 18 Feb 2026 14:36:50 +0000
ROA not before:           Wed 18 Feb 2026 14:31:50 +0000
ROA not after:            Wed 17 Feb 2027 14:36:50 +0000
asID:                     834
IP address blocks:        77.75.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:59:de:68:6e:d3:cb:06:9c:a4:e0:af:a3:f3:f2:60:92:d7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 18 14:31:50 2026 GMT
            Not After : Feb 17 14:36:50 2027 GMT
        Subject: CN=5478260F8FE9EE54FCC73D91BDAA206D6E57B327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:b8:cd:f4:30:9a:de:d3:f6:d9:ec:87:46:
                    aa:ad:2f:32:13:f9:60:c4:72:a1:b7:9b:3b:37:3a:
                    1b:4e:57:d2:b7:65:53:20:6b:50:00:58:b6:bc:5d:
                    6c:b2:79:3a:9f:cd:df:4c:0d:1f:1a:85:4f:46:6d:
                    f8:a3:df:2b:dd:4f:34:a8:de:eb:77:42:0d:dd:c3:
                    52:17:76:38:8a:79:ef:0e:8a:0e:06:1c:7b:47:c4:
                    d3:a0:42:cc:6b:c5:ff:65:ac:1a:47:ef:f5:26:39:
                    d5:f7:76:b1:a2:ca:68:8e:d6:fe:36:7e:63:34:71:
                    10:88:18:d7:a2:3c:30:5d:14:52:2a:ae:4b:53:42:
                    03:e0:41:4d:84:92:ea:02:a5:a8:bf:9b:c1:c1:ee:
                    5e:d9:61:88:9d:1a:d1:0c:f2:90:a8:66:86:aa:b1:
                    f5:cc:57:12:34:df:de:3b:4e:39:41:03:01:00:c9:
                    c4:60:60:71:9b:69:d9:b0:d6:51:ac:3d:d8:b2:d4:
                    84:39:05:55:d2:b4:a3:8f:e1:84:4a:24:cb:a8:38:
                    2a:fc:28:86:e6:bc:69:aa:af:99:6a:10:61:08:f6:
                    b8:e4:cf:bc:2a:1c:13:26:b7:97:13:8e:20:a5:cd:
                    33:c0:12:07:50:99:f2:f8:35:0e:fd:8e:ce:68:7f:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:26:0F:8F:E9:EE:54:FC:C7:3D:91:BD:AA:20:6D:6E:57:B3:27
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:42:cb:a7:9c:ac:97:5c:d5:ce:fe:0f:b5:7c:cf:27:71:11:
         cb:0f:5c:7c:0d:fd:72:98:7a:f2:c8:e3:e7:c4:69:a5:fe:2a:
         98:58:8f:1d:34:45:90:5e:4d:2e:57:c9:f3:d1:23:2e:b5:d5:
         38:44:d6:57:e4:c6:a1:2f:ba:de:a7:91:ea:9a:6b:4c:be:56:
         4f:37:a7:21:77:a1:ac:c9:f6:e7:12:36:3e:94:a5:92:f0:97:
         55:43:4f:53:1c:9d:3a:12:72:d6:b1:d7:f5:8d:86:d4:60:3c:
         42:8b:1c:0d:4c:18:c4:f2:3a:ba:ae:a6:e2:fa:f6:96:8b:1a:
         ac:eb:78:1c:a7:a1:3d:03:50:1b:5c:a9:d0:74:89:2a:1e:81:
         b3:0f:fb:da:1d:76:d1:dc:e0:2b:9b:1c:e1:50:41:b3:08:a0:
         0b:67:21:76:f6:a0:00:2f:6e:73:c9:66:16:ad:db:b9:b2:7e:
         16:89:0b:12:19:6a:ab:2a:df:66:85:d0:73:90:2a:31:b3:62:
         6d:6c:ed:80:23:a6:41:ff:1d:40:c1:2e:9d:1a:dc:ea:7a:2f:
         a7:e9:3f:5d:8a:a9:a1:cc:20:6f:0f:d3:eb:80:2f:ac:12:74:
         16:73:b9:05:b0:4e:bd:f3:7b:0d:f6:81:51:a0:61:57:f0:5d:
         8e:31:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:52 2026 by rpki-client