Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e34382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          on2tP0l1tTD5R8p/ftwlUFw1PRsOnhsZQGicYm4p0X0=
Subject key identifier:   E8:54:F4:C2:B6:D0:58:F0:A2:3F:DA:B3:CD:28:CD:BE:1A:A0:60:16
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       04EF1ABE889F857D9C223CDECE596BE6ACAEA012
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:46 +0000
ROA not before:           Wed 25 Feb 2026 12:35:46 +0000
ROA not after:            Wed 24 Feb 2027 12:40:46 +0000
asID:                     7029
IP address blocks:        62.144.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ef:1a:be:88:9f:85:7d:9c:22:3c:de:ce:59:6b:e6:ac:ae:a0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:46 2026 GMT
            Not After : Feb 24 12:40:46 2027 GMT
        Subject: CN=E854F4C2B6D058F0A23FDAB3CD28CDBE1AA06016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:65:62:76:b7:14:68:bb:3e:b4:3b:76:0c:
                    67:d2:0a:72:2b:84:d8:c9:0c:8b:28:33:14:4f:fe:
                    b5:14:6c:71:51:d9:da:11:d9:a3:5c:d2:a9:a5:eb:
                    f1:e2:56:4a:39:38:f2:d9:7b:da:13:3d:f9:14:8e:
                    14:09:6a:9f:ea:2a:c8:1b:e8:c4:c8:94:d1:15:e2:
                    49:35:6f:96:f3:58:bc:a4:33:65:24:ed:54:e0:34:
                    8a:83:bb:9b:f9:87:64:bb:52:49:8f:68:c2:04:16:
                    03:53:75:0e:12:dd:9d:02:c2:7f:b3:7d:7a:c2:f7:
                    1d:a1:23:2e:c8:7c:c2:d9:19:5c:67:1f:fe:cc:6f:
                    9c:b5:94:ca:bb:94:61:49:e0:85:6d:57:25:a4:8f:
                    5b:3a:6f:10:11:fc:7f:50:66:70:6e:5b:ad:f7:d5:
                    4d:eb:98:a8:3f:1d:40:01:88:e8:b4:97:01:2e:26:
                    14:5b:8b:9e:c3:5c:d5:e7:f2:70:46:57:4d:d8:07:
                    bd:f5:4f:03:36:30:86:20:fe:69:47:a4:29:52:6a:
                    81:b5:c5:8b:d7:97:a8:10:bf:7d:6d:41:66:f5:48:
                    40:fe:82:4b:f1:39:ec:b9:6f:3e:80:3a:47:ef:8a:
                    7d:3f:3a:79:50:fa:6c:95:59:82:87:30:64:b9:73:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:F4:C2:B6:D0:58:F0:A2:3F:DA:B3:CD:28:CD:BE:1A:A0:60:16
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:20:ed:ff:34:b7:71:14:04:8d:00:b6:4e:44:09:0f:ac:ea:
         8b:7f:2b:91:87:10:14:25:98:a2:1b:8d:e3:38:07:65:45:5b:
         fc:52:df:cb:67:fd:91:fd:93:f0:11:1f:96:0a:58:ab:2c:98:
         5d:ab:4e:60:50:51:20:5a:f5:41:c1:fb:77:fe:c4:75:0f:3d:
         d0:27:b8:9d:8c:78:8e:0b:ba:72:e1:48:7a:b8:b4:42:07:ab:
         54:22:f6:89:6b:3c:b0:4c:e1:8f:8a:90:fa:d0:47:96:f4:fc:
         e8:17:40:12:89:3d:a1:94:62:2f:37:7c:d3:c3:85:e8:49:90:
         27:72:15:17:66:74:29:25:4d:8a:77:27:71:a6:27:22:b3:eb:
         de:34:0b:c0:3d:42:7b:77:84:a3:a5:b9:9d:3f:4a:da:83:9d:
         d9:f0:8e:f5:41:30:93:35:fc:76:f8:b1:7c:cf:a3:53:a1:18:
         fe:93:33:fa:2e:11:c8:db:1f:1e:58:bc:aa:40:db:2f:39:b5:
         30:a2:0c:f2:86:0d:59:b2:af:0b:37:ed:cb:ce:e6:56:1c:7c:
         37:8d:b4:2c:99:8f:00:95:46:6d:cb:53:2f:1c:7a:30:66:74:
         f5:b5:4b:40:e6:6a:a2:e1:7d:d6:19:f3:c0:da:fb:b9:3c:87:
         0e:a4:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:37 2026 by rpki-client