Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203432383331.roa
File:                     37372e37352e3139382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          4DGih33yFUooXuNQh8ExFXyXbgVkib3ye4Hc0T7uobo=
Subject key identifier:   B1:FB:59:F1:83:F5:31:6A:EA:E7:82:DB:33:A9:8A:76:19:A4:69:4B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       03B8864D3093064E8994B6FB0EA780E9644E24BC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203432383331.roa
Signing time:             Fri 06 Feb 2026 13:55:37 +0000
ROA not before:           Fri 06 Feb 2026 13:50:37 +0000
ROA not after:            Fri 05 Feb 2027 13:55:37 +0000
asID:                     42831
IP address blocks:        77.75.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:86:4d:30:93:06:4e:89:94:b6:fb:0e:a7:80:e9:64:4e:24:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb  6 13:50:37 2026 GMT
            Not After : Feb  5 13:55:37 2027 GMT
        Subject: CN=B1FB59F183F5316AEAE782DB33A98A7619A4694B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:ff:0b:ed:d7:fc:93:b8:b2:4e:4e:ce:be:
                    f8:f5:00:d2:e4:88:5f:a0:97:f8:9a:0e:1b:d4:32:
                    eb:c7:e0:4a:71:fb:6e:fd:8f:21:df:d0:59:64:c4:
                    fd:4d:66:af:be:7c:1e:da:23:7c:6b:14:73:cc:51:
                    85:bb:1c:a2:8a:65:7a:35:46:5f:5a:b2:11:5b:14:
                    e7:c5:c2:b5:0a:5f:45:d5:af:9b:05:8b:fd:b0:82:
                    d0:a3:13:d7:fc:99:ab:1a:cd:cb:b4:2d:d1:8e:f9:
                    4f:ac:28:a9:ad:29:89:f0:c5:35:11:99:b7:d1:03:
                    04:a5:a3:55:4f:d5:b8:0d:90:69:01:b8:c0:6b:18:
                    c9:86:af:12:93:df:c0:4e:eb:19:f9:d2:3b:ca:ec:
                    33:8f:b0:cf:73:04:1e:76:72:5e:de:96:58:83:1d:
                    9c:cb:71:16:b8:59:95:5f:c0:1f:ff:d8:a2:ee:16:
                    df:11:8f:17:92:8b:45:88:b6:7e:b9:90:36:ff:fd:
                    2a:4b:d0:c9:bb:26:fd:3b:e2:14:1e:ef:52:f1:1e:
                    fe:75:37:a8:33:48:52:4e:93:00:50:00:34:de:35:
                    bc:fd:06:63:a3:20:74:a3:ea:0c:6e:a2:48:07:1b:
                    ec:a1:6a:1f:ed:25:5b:04:65:59:a9:4b:95:ee:fd:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:59:F1:83:F5:31:6A:EA:E7:82:DB:33:A9:8A:76:19:A4:69:4B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139382e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:92:9d:09:ae:d5:8a:b8:70:b0:54:d1:f1:5d:84:3b:c1:
         ee:fd:15:d0:fe:e4:cd:2a:18:8e:65:e1:e9:82:ea:0a:11:18:
         c0:fe:0e:87:95:69:b7:0b:ef:ef:5a:2b:23:13:36:4a:9f:92:
         bc:59:f8:5d:d5:96:5d:44:12:de:72:9c:29:bf:93:95:83:cb:
         82:96:a3:fd:25:ac:3c:d1:8d:76:b9:66:42:87:f7:71:90:d2:
         99:dd:be:37:53:5b:31:a6:e7:bf:ca:58:13:cf:77:a0:e9:c6:
         7f:ac:7a:2a:2c:2a:00:0d:48:4a:b1:77:22:cb:11:db:4d:08:
         80:45:b9:f2:5f:42:3c:5c:05:60:a3:bd:0c:98:0b:d5:35:ff:
         12:89:57:ee:c0:ce:e4:37:c8:cb:8c:5c:92:b1:90:0f:01:5d:
         d1:49:1c:36:17:05:9a:cd:6f:56:2a:fc:4e:99:a9:b1:e1:b0:
         5d:48:03:06:ab:79:39:f1:3f:f8:68:7c:92:82:73:92:8a:e2:
         5a:f7:53:1c:50:c3:aa:53:40:6e:8a:a1:00:9a:1b:f2:7e:65:
         7a:75:97:4b:00:c8:cc:c8:ae:76:0a:e0:bc:90:5c:c8:0f:06:
         23:fc:d5:d8:d2:5c:4c:f3:42:49:65:0e:77:58:75:93:9f:d8:
         21:df:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:36 2026 by rpki-client