Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e34382e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          s4E5j+enLpftDnwDEJcokLeBFcec8m7DCvJBrcGVfaE=
Subject key identifier:   88:80:19:9D:65:6A:63:FC:FF:81:34:E2:C9:79:86:5F:7B:94:0C:E6
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       012255858C72EDF82400E933F1AB581B9D684A4F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     13347
IP address blocks:        62.144.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:55:85:8c:72:ed:f8:24:00:e9:33:f1:ab:58:1b:9d:68:4a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=8880199D656A63FCFF8134E2C979865F7B940CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:83:b4:c7:de:44:2c:95:82:84:78:bd:71:
                    e8:dd:1e:b5:fd:58:93:22:64:11:5c:41:a6:b8:0b:
                    8f:ad:70:38:b4:4c:95:0d:21:e4:93:4a:7e:2c:8e:
                    22:1f:e6:d1:be:da:ce:1e:3d:13:3a:32:a4:fa:01:
                    51:2c:4f:14:25:2f:22:48:4b:f5:0a:48:04:47:f3:
                    b8:9b:4f:ff:f5:fe:45:ff:7b:85:6c:96:c4:e2:95:
                    9c:86:aa:62:5e:77:b3:01:d4:bd:4d:e5:7e:53:24:
                    25:9f:90:f3:e3:07:40:fe:cf:21:73:14:7f:20:15:
                    d5:3c:13:d4:4e:92:3f:21:16:31:af:72:db:f3:82:
                    51:c2:ea:ab:df:af:d8:dd:bf:f9:58:34:2f:19:1b:
                    33:41:e8:d3:69:bd:b0:c2:09:39:ce:e1:12:bb:00:
                    76:31:21:3a:94:32:a5:d4:7d:8f:c6:59:52:0f:70:
                    6b:35:55:a9:d7:76:6e:81:ba:7f:c2:61:8e:fd:de:
                    91:98:38:92:b4:7a:ec:fc:83:5c:21:13:0b:86:43:
                    f8:61:1d:da:21:64:9b:5f:dc:cc:02:e9:a6:f9:c4:
                    de:40:d6:65:19:cd:06:13:6f:5a:fd:41:d8:d0:f4:
                    1a:b9:ad:28:bc:8a:81:d3:e2:61:d7:9b:60:2a:65:
                    dd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:19:9D:65:6A:63:FC:FF:81:34:E2:C9:79:86:5F:7B:94:0C:E6
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:0c:48:ac:ca:48:ab:41:26:7b:9c:ca:38:6a:ec:e9:cd:
         fa:cc:db:c2:6d:2f:e3:de:07:2a:b3:47:c7:7f:43:d9:2d:98:
         78:6d:cf:d7:81:fd:85:3f:39:75:be:3f:ef:3e:b2:1a:df:f0:
         02:f1:0d:e6:82:02:d2:4a:f2:d2:94:f1:6e:16:45:40:09:f3:
         1a:58:96:cf:76:38:2e:5d:84:c1:7d:f3:7d:32:47:22:e5:11:
         79:5e:e6:45:1e:b3:f5:38:3f:62:4f:b7:70:44:c0:2b:1a:14:
         cb:a2:5c:1d:dd:b1:6f:76:3f:0d:5b:74:aa:7d:d7:33:24:75:
         d3:dc:96:28:9d:50:36:1d:6e:f6:76:9c:07:dc:c5:1a:3c:e6:
         5c:92:ae:c8:36:34:53:82:e1:47:ad:5a:0c:9f:4a:76:ca:6c:
         42:d5:3e:4f:14:a6:a7:63:e8:86:68:c9:60:ab:d9:16:13:8d:
         a7:dc:4c:6a:c9:8a:41:f2:9d:42:4f:e3:24:9f:cb:1c:42:57:
         e2:23:aa:9f:80:c0:44:71:f1:0a:6f:4f:e9:f6:2b:ce:54:b3:
         c9:83:85:6f:e8:8b:e0:41:09:1e:31:3d:40:b0:a7:ed:3c:85:
         b1:e7:e0:17:fc:69:a4:50:b4:01:3a:9e:e4:80:c2:b7:51:01:
         b7:11:07:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:50 2026 by rpki-client