Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e34382e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          T9TXvgTGz4UixvwR6bAJj7OVi1plTEqUxSl1/VhDOk4=
Subject key identifier:   24:FA:58:B3:05:80:7E:6F:46:36:87:1C:33:8E:92:25:C7:DB:E2:45
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7955C776D7F3BD6354A362AA96873A5A2DD1CE93
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     12083
IP address blocks:        62.144.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:c7:76:d7:f3:bd:63:54:a3:62:aa:96:87:3a:5a:2d:d1:ce:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=24FA58B305807E6F4636871C338E9225C7DBE245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:e4:84:3e:2f:60:fd:5c:b6:12:ad:d1:48:
                    81:df:06:8c:26:db:ff:3e:1c:04:d9:d0:88:44:a7:
                    16:49:88:92:e4:6b:a7:29:60:1b:be:35:56:8a:43:
                    ec:43:29:f1:19:e1:0b:12:3b:da:69:66:a5:73:2b:
                    fc:41:b3:7b:12:79:07:df:15:18:57:49:c4:5c:75:
                    9c:55:30:84:41:13:d8:68:2f:d3:a9:93:94:c7:de:
                    98:47:0a:f5:d6:e8:9c:4d:ca:ac:41:1d:43:9e:b2:
                    d1:0a:85:87:f5:31:33:13:32:e6:af:a8:22:45:03:
                    7a:53:35:39:89:9a:b9:0a:39:1e:17:6f:fc:12:f2:
                    66:40:bb:f6:7b:9f:6d:b3:09:4f:a0:30:24:fa:ca:
                    e8:74:cc:75:21:f3:1f:84:0f:b7:6d:f8:f3:bd:de:
                    4b:6a:a5:ee:02:7b:3b:86:69:bc:aa:45:fc:35:2c:
                    41:75:fa:bf:3e:7c:a5:47:1c:59:bd:2d:48:4c:fd:
                    41:33:3a:f5:14:bf:f6:4c:d6:13:55:d1:ce:f4:86:
                    0f:34:2f:6e:0f:b9:58:17:92:5a:4f:25:76:18:2c:
                    c5:66:ae:e0:64:58:a0:5f:a5:31:40:c9:f5:05:c1:
                    19:fd:9c:6f:42:94:79:bb:5a:c9:96:3f:3c:a5:92:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FA:58:B3:05:80:7E:6F:46:36:87:1C:33:8E:92:25:C7:DB:E2:45
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:90:24:b9:20:40:9c:b6:d3:75:f4:99:c7:ec:a6:33:d8:1f:
         46:14:8c:b4:6f:7d:ca:6e:76:47:dc:7a:af:e6:da:6b:9a:79:
         62:4f:c0:df:83:4a:16:30:3b:7b:2a:9a:ec:fb:4e:00:6c:f6:
         ad:4f:fb:1a:ae:9c:5e:ef:69:ed:6a:01:17:dd:1e:44:a8:b0:
         05:5f:c1:43:71:7b:0f:32:cd:60:1a:36:aa:d8:86:a6:fe:4d:
         63:64:07:19:6b:90:f5:8f:16:66:ce:9f:22:26:34:cd:a6:36:
         5c:a4:54:38:97:49:21:d3:78:c4:c0:57:3a:e3:be:cd:22:f3:
         6a:0c:50:41:94:2f:59:2a:af:1d:d0:98:18:20:89:1e:76:aa:
         ab:8c:e3:8e:a7:a1:6c:e0:92:45:d0:8e:9b:9a:83:1c:99:d6:
         32:df:2a:a0:fa:99:41:c2:29:9b:b5:92:f6:0a:fc:57:0d:71:
         ff:02:8b:14:8e:ab:03:69:5f:74:93:ad:ea:36:1c:09:19:9b:
         da:a5:c7:43:94:11:17:d7:3c:91:30:6d:54:1c:b5:8b:1b:cd:
         88:cf:d1:bb:1e:38:59:da:71:06:2f:80:80:74:41:d4:c6:5c:
         2d:31:29:1f:2b:7e:ff:58:86:ba:68:4f:d3:bb:3f:5c:c6:b8:
         dd:de:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:22 2026 by rpki-client