Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e34382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          wgLwStru6E+WiPKISGGy9BxOYjDR0/4ExVF+5XHMC8c=
Subject key identifier:   7E:84:73:BA:AB:B4:E7:E7:FF:D9:3A:3E:C2:7B:DF:B7:F2:C2:06:01
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7E0E288BCD92D5EB59AED33A983195DCF07679FB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     5650
IP address blocks:        62.144.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0e:28:8b:cd:92:d5:eb:59:ae:d3:3a:98:31:95:dc:f0:76:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=7E8473BAABB4E7E7FFD93A3EC27BDFB7F2C20601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:99:a7:9c:33:50:cd:84:d0:c3:fa:e6:4a:
                    fc:2b:d0:28:7c:85:4f:8e:d0:db:ea:07:20:09:b8:
                    3a:f7:f5:01:0f:9a:fc:46:51:e8:f8:5d:1f:4e:72:
                    96:ee:77:53:aa:14:2f:65:47:b9:3c:be:98:8c:62:
                    3a:16:b1:be:77:f3:e3:fd:4e:89:98:0d:8d:05:78:
                    14:f6:f5:74:0e:a6:84:24:a3:69:df:d0:51:c1:0d:
                    2f:69:c8:3d:ea:d1:c6:df:e7:ab:b0:e2:c3:fb:70:
                    f8:16:e1:07:64:e9:3a:87:54:1d:bf:54:fc:24:6c:
                    8a:fb:3f:44:5e:7d:96:e8:2d:7d:e4:38:7e:f6:3c:
                    b4:55:d8:ec:3b:21:01:cf:10:60:4e:14:d1:ee:d3:
                    31:bf:99:af:d2:05:b6:10:a0:1d:fb:47:be:a7:a4:
                    b7:2f:f7:12:ff:ad:ce:04:0d:54:c5:d3:27:a5:33:
                    e9:5d:8a:21:4c:0b:ef:a0:d6:80:72:9e:5e:91:d9:
                    d8:5a:8a:c9:f8:4c:07:d9:1f:ca:fa:10:0c:71:f6:
                    b0:27:94:bb:e3:dc:42:e9:ea:4c:f1:85:e4:32:f0:
                    d8:06:4a:41:6a:90:c8:1f:1e:b4:41:f1:5a:ee:c6:
                    87:45:c1:5a:e7:6f:ac:c2:4f:05:95:7f:b9:91:05:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:73:BA:AB:B4:E7:E7:FF:D9:3A:3E:C2:7B:DF:B7:F2:C2:06:01
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:d8:a5:c6:4b:3e:40:66:7c:83:56:9e:1a:ad:5d:09:e8:
         92:91:ae:3c:8a:48:ab:28:c7:8c:16:ef:eb:91:ba:d1:ab:0c:
         81:86:a7:11:d4:b8:57:a7:26:b5:5c:59:89:71:a2:64:78:39:
         2c:bc:ee:7e:92:0f:b6:e7:10:0a:9d:67:6a:70:fb:fb:f4:36:
         cc:1d:69:4d:5f:f6:59:c3:fa:73:ee:43:c1:f5:fc:29:0a:71:
         f1:3d:8e:da:1f:b3:2b:a7:d7:08:cb:de:1a:70:5a:13:cc:1c:
         db:bf:65:27:67:c6:22:2b:8f:65:ea:38:8c:8d:61:96:76:54:
         b7:c3:08:ec:ba:58:0d:67:0b:2c:74:ad:32:ff:4c:e4:9a:09:
         8d:d8:07:1b:74:50:d7:8e:87:54:05:48:d8:8f:43:77:99:3e:
         d6:1b:5a:0f:b7:b2:49:73:80:a6:67:43:ad:10:fa:91:66:d2:
         59:87:86:91:ae:97:32:7e:ee:7f:2a:40:15:be:b1:37:59:7e:
         fd:94:34:b3:4f:29:c1:90:4c:d7:77:d1:d0:be:3f:15:5b:fe:
         cf:4f:2f:47:eb:71:fa:fe:37:bb:dd:d7:b2:70:da:c5:3a:37:
         e0:34:b4:43:8c:22:22:7f:5b:6f:1a:f3:3e:29:ab:b5:88:91:
         7d:48:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:19:00 2026 by rpki-client