Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e34392e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          i6hG3Kvco+WidJ1l3xwwN8MxIhLvKtctwY7kM7XMADM=
Subject key identifier:   20:07:47:41:6B:9C:E3:29:06:C9:BF:E7:CA:5C:15:7F:2D:F4:DD:79
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       76DB6AAF6CA0B537C0138ED60EDB4743E2B4492D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     12083
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:db:6a:af:6c:a0:b5:37:c0:13:8e:d6:0e:db:47:43:e2:b4:49:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=200747416B9CE32906C9BFE7CA5C157F2DF4DD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:e7:f4:d8:c8:e9:69:3d:d5:94:e6:9c:b1:
                    33:70:a4:77:10:40:e7:60:38:56:7d:13:7d:31:5e:
                    f5:81:99:9e:77:b4:3f:4d:24:3d:3a:21:a2:d3:28:
                    a9:6d:7b:7f:00:53:ad:f4:aa:c9:2e:01:6d:91:05:
                    cf:89:10:f1:f3:70:07:18:a2:61:e7:98:31:46:3c:
                    37:3b:c7:11:a7:e7:c6:3e:d6:6d:32:b3:8a:00:c9:
                    bc:bf:c6:f0:4d:0a:78:26:eb:8b:a8:38:ea:c0:5c:
                    ba:f3:cc:c3:99:2f:05:31:73:d8:59:44:fe:e2:3d:
                    0e:83:a3:72:13:d1:d3:57:c5:50:23:80:6a:65:da:
                    46:72:9a:4d:59:98:0b:73:6b:a6:e7:d1:dc:6e:f5:
                    f1:9e:14:3c:82:0e:69:97:70:de:77:60:0a:95:be:
                    d3:1b:c9:53:9d:c1:fa:76:00:29:7b:99:5e:94:1b:
                    5b:71:0d:85:ea:69:03:0c:70:4f:06:c2:78:f6:ec:
                    ca:ec:96:96:b2:43:19:8d:9f:d2:95:ca:88:f3:ae:
                    91:c2:f1:78:b1:f7:77:4b:46:ee:ac:37:d9:92:a5:
                    6e:f6:a0:88:76:1f:f1:d2:43:67:fe:65:63:23:c3:
                    5c:1b:4e:81:fd:91:d9:7e:c7:4f:f0:0d:6d:51:13:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:07:47:41:6B:9C:E3:29:06:C9:BF:E7:CA:5C:15:7F:2D:F4:DD:79
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:8f:58:25:70:f6:9f:5c:99:53:59:89:93:bf:59:01:8f:
         78:4b:00:6d:14:fa:b8:ae:67:13:59:2b:f6:72:b4:2d:a8:7f:
         dd:65:20:b6:d3:cd:fc:63:3a:9a:7d:4e:14:ea:ea:b4:2e:72:
         ba:9c:8c:ba:8f:35:81:4c:fa:dd:f9:a9:04:f8:d8:27:3e:b6:
         ec:f4:03:e9:75:68:71:2b:b8:88:41:34:f8:71:11:ee:19:fa:
         7e:43:88:ed:0a:84:b9:fd:c3:51:77:d8:3e:42:c3:ae:71:82:
         24:ec:5f:8e:49:6c:e7:31:7a:fa:21:4c:e3:bc:5f:4f:e4:0f:
         c0:e8:15:c7:14:04:75:1a:7a:23:d9:18:0e:53:58:15:e7:fc:
         c7:39:de:29:52:b0:52:d1:b6:c0:33:65:c2:a6:0f:c3:d4:b9:
         18:6e:ac:9d:b5:31:5c:39:72:7e:57:13:29:cf:5d:27:b4:a1:
         af:f7:0c:ad:90:4d:b0:b0:46:cb:71:fe:ec:7d:98:96:53:87:
         bd:85:21:3f:87:55:7e:68:df:2a:04:d9:bf:55:a5:ce:ef:63:
         57:da:cd:d2:61:aa:73:bf:9d:19:1b:29:ac:fc:8a:49:8c:8c:
         56:83:2e:83:6d:ea:23:ab:65:fe:9d:fe:15:16:bb:fa:00:ad:
         f9:30:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:13:48 2026 by rpki-client