Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e203132303833.roa
File:                     36322e3134342e34342e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier:          WxWfRlFL6pc9YZHHR4uhA90mLAW+WK1MtKa+nI0zJh8=
Subject key identifier:   A5:0A:9A:62:9E:6E:C7:81:6A:A6:8F:7E:38:B5:0B:44:E3:62:D2:1B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       52D1704E90F80286E40CB1E6A38507DCD68E000F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     12083
IP address blocks:        62.144.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d1:70:4e:90:f8:02:86:e4:0c:b1:e6:a3:85:07:dc:d6:8e:00:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=A50A9A629E6EC7816AA68F7E38B50B44E362D21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:e9:2f:93:a2:28:ab:ea:7b:63:37:14:5c:
                    5f:e7:a2:05:be:5f:88:c4:15:49:13:f7:19:45:8c:
                    ba:b6:d1:6e:21:9f:01:83:bd:fe:26:c4:8a:dd:3c:
                    c8:c4:27:3c:d6:5d:b2:a5:98:36:e2:2c:06:66:0e:
                    6b:ca:e1:6e:b7:c7:d9:99:d0:30:38:17:b9:0f:aa:
                    c3:22:f6:bc:1c:9f:ed:49:ad:53:a3:54:75:dd:93:
                    63:fd:da:c6:17:eb:02:db:0c:0e:e4:1d:bb:c2:97:
                    29:81:93:26:5f:f8:f8:48:d6:3e:e2:d9:16:15:3a:
                    74:99:e4:34:b5:71:68:98:5e:37:c7:72:fe:d0:ea:
                    aa:82:f6:62:35:26:d8:ce:e7:42:fc:e6:d2:00:4f:
                    43:3e:df:32:ac:48:b9:60:2f:47:73:4d:d1:52:c8:
                    33:03:5b:d0:57:7e:84:3f:14:45:8e:32:83:62:7e:
                    64:ed:20:92:e8:d5:c6:68:79:8a:b9:08:61:fe:e9:
                    4b:9c:bb:26:30:83:46:7a:7d:a7:85:8e:51:fe:fe:
                    ef:d2:11:aa:8e:03:4e:e3:cd:6a:38:e6:d7:85:92:
                    27:cc:4f:40:43:ce:ee:e3:96:90:8d:cd:ef:c0:3e:
                    00:25:4c:f8:8c:90:af:34:7b:b1:20:10:6d:f0:9a:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0A:9A:62:9E:6E:C7:81:6A:A6:8F:7E:38:B5:0B:44:E3:62:D2:1B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:b9:38:16:cc:45:bc:8e:df:3f:d0:b8:d0:33:3a:75:b2:
         5b:9c:f3:f9:54:f7:b3:a8:eb:c8:97:c5:95:ba:07:ca:5f:37:
         44:82:d3:53:93:31:4b:0b:b2:d3:2b:a8:54:7c:00:67:5e:bb:
         2f:5b:b9:b9:a6:89:32:48:79:e2:f8:4b:bd:9d:ab:ae:d3:92:
         91:c0:35:47:7c:88:68:f4:65:e3:6e:49:89:19:c4:19:b0:ac:
         dd:d0:a2:a2:fd:d8:3b:a9:07:31:f2:98:29:e7:bc:af:39:c2:
         35:3f:a2:fd:bc:6c:0f:23:00:0b:a8:a8:04:69:aa:3d:ab:11:
         95:21:08:a2:01:81:9c:10:41:92:48:03:ae:12:ae:b7:1e:f3:
         77:1f:f7:b1:d8:15:c8:1c:3c:b9:2b:da:5a:4f:96:c7:8a:32:
         18:bf:5e:8d:eb:9a:f3:60:4b:30:a8:dc:1e:dd:bd:b5:41:b3:
         06:68:61:3e:13:4d:f2:d4:c5:60:99:9c:11:33:fb:42:02:19:
         f6:81:bc:81:1f:a7:0a:18:76:a2:9b:ad:a5:90:42:fd:16:a2:
         2f:e3:da:a9:5b:21:5d:bf:c9:18:86:f7:6e:c5:26:8a:e6:4c:
         c7:eb:e8:be:86:64:c1:dc:1d:20:fd:63:22:b1:1a:6d:b1:f4:
         03:3c:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:34 2026 by rpki-client