Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          vtwlTEXfEsoO2Ldra2LYdgf5kIuODGhmPdsE6e+GblQ=
Subject key identifier:   B6:90:28:64:78:38:1D:A1:81:1E:1F:30:E3:DB:96:A4:89:37:C5:59
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       6BB007F2989DADEE14CD517D82A1370460F2B018
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 17 Mar 2025 07:53:58 +0000
ROA not before:           Mon 17 Mar 2025 07:48:58 +0000
ROA not after:            Mon 16 Mar 2026 07:53:58 +0000
asID:                     834
IP address blocks:        77.75.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 04:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b0:07:f2:98:9d:ad:ee:14:cd:51:7d:82:a1:37:04:60:f2:b0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Mar 17 07:48:58 2025 GMT
            Not After : Mar 16 07:53:58 2026 GMT
        Subject: CN=B690286478381DA1811E1F30E3DB96A48937C559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:66:cc:73:87:b4:c3:38:5f:87:b7:c5:73:
                    a6:d3:f4:18:f4:b1:27:b0:3e:6f:80:67:43:f4:c5:
                    97:4b:05:6d:41:80:5c:bb:ba:a2:a4:bb:cc:9d:82:
                    96:b5:d5:26:1c:f6:88:f8:42:19:14:d1:04:f5:76:
                    25:15:2c:a4:bc:b1:a6:4d:89:2d:96:8b:23:ff:65:
                    d9:59:13:21:e0:a3:8c:46:3d:fa:ca:d8:20:05:d1:
                    5b:57:42:f0:83:4d:6a:56:c7:1e:5b:0d:fa:3e:1f:
                    d0:3c:75:d8:61:19:00:23:dc:a1:75:ed:a9:f6:b2:
                    47:01:2c:14:b2:07:a9:31:25:43:d2:30:39:2d:48:
                    fb:0e:36:df:f6:bb:94:47:95:49:41:6d:e9:5b:7e:
                    7e:98:cc:e3:73:30:8d:26:98:b2:00:3f:9e:75:e8:
                    cf:a9:64:3a:2b:f8:0b:0c:14:24:66:47:46:81:46:
                    32:6c:f8:ab:b9:2e:57:b8:bb:a1:1e:df:99:07:40:
                    df:61:37:68:44:10:e2:73:05:2b:07:75:70:19:21:
                    8f:95:84:5a:fb:c7:68:e8:86:c2:21:c7:c5:2d:d0:
                    55:e3:b2:dc:29:81:71:9b:be:a9:be:59:dd:71:ad:
                    f2:3c:ac:eb:4c:b3:7d:8e:b7:0e:47:16:d3:77:be:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:28:64:78:38:1D:A1:81:1E:1F:30:E3:DB:96:A4:89:37:C5:59
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:73:c6:76:a4:8e:11:c8:50:bf:4d:92:7f:e1:28:89:63:
         12:02:d3:3e:1c:60:cf:0f:20:89:33:77:88:b3:f5:20:20:9d:
         2e:ed:7b:4d:53:21:5c:07:22:d0:14:f2:b6:21:9a:0b:c0:10:
         95:c3:e0:9b:bb:60:81:a6:7b:cc:c2:24:d4:c0:ae:bc:e4:74:
         00:dd:af:c6:4b:90:17:a2:9e:d2:f3:a8:2c:f2:d6:d7:1a:e8:
         f1:6c:c7:9e:f1:41:28:da:89:b3:28:cc:41:5a:9e:b9:90:88:
         8f:e4:11:43:fa:6c:8f:b9:ad:4d:3d:1b:46:a1:ba:ea:af:1a:
         32:26:cc:32:8f:d8:46:ef:4a:d0:90:be:2b:c4:bf:a7:75:37:
         38:f2:8c:b3:d7:35:1a:f7:d5:02:9b:69:c5:bb:53:9e:6e:d7:
         09:c8:9b:61:e3:c3:3e:62:f0:0f:96:0f:20:ec:4f:ce:58:b5:
         a2:eb:35:29:81:31:ff:ed:e5:9d:2f:4d:6f:7a:66:74:ad:13:
         a2:ec:e5:ed:a6:ad:d0:03:ab:7e:39:3b:3e:e6:70:39:b0:b8:
         c0:e8:cd:7c:9d:cb:6c:af:4d:f3:f2:a3:b1:39:8a:a2:b9:9d:
         a2:00:32:28:7d:6d:e5:a1:ee:88:71:39:78:38:e0:ea:20:30:
         69:a6:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:33 2025 by rpki-client