Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203132303833.roa
File:                     36322e3134342e34302e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier:          bSuv7kbnyRs2FX9AwgA9RVZRr330LukzikuF1yJqZ5s=
Subject key identifier:   43:8F:52:3E:2A:2B:81:48:0A:85:85:C3:D0:96:3E:31:23:B2:97:74
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       64A43CB760FE72DD561983A558DED15C1A83ABF7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     12083
IP address blocks:        62.144.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:3c:b7:60:fe:72:dd:56:19:83:a5:58:de:d1:5c:1a:83:ab:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=438F523E2A2B81480A8585C3D0963E3123B29774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:70:93:ff:46:a4:65:ae:58:93:1b:99:c6:
                    ee:52:c2:f5:a9:02:b8:67:cc:76:a0:9f:fd:88:6d:
                    ab:3d:c6:0c:de:a5:ac:a8:14:70:44:ea:ba:8d:85:
                    56:20:79:1e:11:df:28:77:74:76:21:b1:79:47:a2:
                    a2:82:e4:31:b2:dd:f0:84:5c:0d:5d:99:6b:78:44:
                    53:2c:53:57:27:ea:60:94:6a:0c:24:ad:7e:aa:06:
                    eb:f8:db:73:f5:2a:94:01:13:62:97:cf:da:2b:42:
                    53:53:95:21:2f:be:63:3a:7d:3d:27:e7:14:d0:82:
                    b4:f2:cc:96:df:c3:c4:d3:e4:b2:74:74:9a:2e:ec:
                    97:de:6f:2e:c3:0f:01:27:d6:c5:e0:7d:d5:a2:80:
                    e4:59:0b:9b:f0:11:c8:d6:e3:23:a6:a1:ce:08:f0:
                    ee:bc:b8:cc:55:e7:f0:3d:70:5a:e3:87:ef:67:6b:
                    e8:e7:56:66:aa:68:91:b2:5b:64:69:54:59:de:0f:
                    e2:e9:fc:5e:a8:57:c7:10:88:be:dc:68:79:ad:f8:
                    e8:ff:f7:63:54:80:19:8c:8b:51:d3:04:4e:bb:96:
                    f7:b6:18:7b:79:67:03:af:ae:32:80:5c:e4:2d:41:
                    68:a3:6c:90:74:98:89:22:da:bc:bc:6d:64:cf:48:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8F:52:3E:2A:2B:81:48:0A:85:85:C3:D0:96:3E:31:23:B2:97:74
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:1e:b2:25:57:ef:5f:f6:d5:a0:ee:81:c3:fc:51:1c:b5:
         9b:9b:74:88:5d:25:04:24:f5:d8:c8:f3:67:79:0d:08:8c:13:
         af:6b:ed:17:66:df:23:c5:6a:b4:1c:9b:82:32:52:8b:81:77:
         62:7a:ca:64:91:39:4b:03:d0:66:d0:95:35:22:0f:a1:16:a4:
         e2:97:25:29:44:82:7f:2a:20:65:f1:56:53:d7:84:3f:3c:be:
         63:33:e4:ad:91:57:93:c6:f1:4c:fb:4e:e9:c2:90:1b:71:11:
         99:92:ce:ad:88:f9:19:aa:80:50:d3:f5:44:9e:1e:b8:23:ac:
         05:37:46:3d:cb:31:53:e6:78:89:7b:76:3b:46:bd:1e:fe:31:
         7f:e9:b3:de:ff:b3:da:b7:12:e8:5e:7e:f9:49:af:3e:55:1d:
         8d:c5:c9:85:88:b4:e8:9e:89:81:2d:01:01:49:26:98:44:ae:
         10:b5:23:63:fd:1f:76:f0:ac:22:bb:c8:12:93:b3:cb:5d:21:
         de:fc:43:7a:ba:f6:05:19:15:25:dd:47:3c:da:5b:ea:de:4b:
         bf:ab:18:4d:36:53:7a:16:4b:52:da:77:4c:ec:1c:24:06:11:
         43:a4:26:74:45:4d:b2:49:33:5f:f7:3f:db:d2:f8:d2:f7:98:
         ed:92:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:11:32 2026 by rpki-client