Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e34392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          zHCCzn4wOAW/5aPQTrS8ol+9+aZEIunRt+ECIneNJhs=
Subject key identifier:   7C:4C:CE:F5:57:C5:6D:E0:6B:E8:27:B1:D1:7E:D3:3A:6C:36:6A:A4
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       4D7E0E1D8707DCF4D13A7393806D6FF9EC8A75D2
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:46 +0000
ROA not before:           Wed 25 Feb 2026 12:35:46 +0000
ROA not after:            Wed 24 Feb 2027 12:40:46 +0000
asID:                     7029
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7e:0e:1d:87:07:dc:f4:d1:3a:73:93:80:6d:6f:f9:ec:8a:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:46 2026 GMT
            Not After : Feb 24 12:40:46 2027 GMT
        Subject: CN=7C4CCEF557C56DE06BE827B1D17ED33A6C366AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:bd:5a:e4:69:7e:ae:74:e3:f5:ed:61:fd:
                    57:c1:47:7d:7d:22:f5:d0:7a:bf:ab:44:04:a4:39:
                    29:2b:b7:78:55:ba:ef:e7:53:b8:7d:99:55:86:61:
                    fe:02:e5:24:fa:78:b9:b5:38:70:b4:f6:9e:b1:40:
                    bb:e2:c2:26:22:e0:61:e4:e8:61:62:bf:8d:18:7e:
                    b4:0b:fd:fc:6b:b6:b0:11:74:ee:aa:fd:33:62:19:
                    60:b0:b3:7c:17:7d:f5:25:ee:a7:c7:5b:2c:e1:f9:
                    23:c9:28:b6:42:ea:b7:e3:99:be:5a:04:fd:32:06:
                    11:93:bd:c3:0a:6e:4f:61:82:92:7c:44:fb:83:f5:
                    bd:79:2a:20:cf:c8:20:4c:02:3e:55:47:31:52:86:
                    50:ff:3c:d5:fd:62:ab:0e:c2:72:c6:25:4f:09:2b:
                    0e:bc:f4:21:2e:9f:c2:7e:76:3b:d8:0f:fa:ec:30:
                    b7:12:ce:32:4c:d3:68:7f:07:ba:55:ce:ab:a2:03:
                    82:e5:ab:b2:6e:1c:fe:2b:0a:91:cc:29:54:b2:5a:
                    1d:f4:e4:25:b2:20:45:6d:9a:dc:95:fc:14:fc:b4:
                    9a:97:da:5f:3a:64:54:22:e8:14:7c:d7:65:d1:5e:
                    ed:75:88:0a:4d:60:49:13:2f:05:8f:34:53:3f:9f:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:CE:F5:57:C5:6D:E0:6B:E8:27:B1:D1:7E:D3:3A:6C:36:6A:A4
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:c0:94:45:40:06:c8:0d:90:e8:cc:bc:f7:76:52:93:49:
         ae:a5:b3:09:5f:c6:5e:16:b3:3c:c1:4b:bc:02:b5:a5:7f:f8:
         cb:19:51:45:0a:95:81:4e:30:b3:95:bb:be:e1:9e:b9:be:0f:
         a3:4a:d7:07:a5:81:f1:21:77:a1:ba:f4:83:eb:e7:33:62:2d:
         b4:26:fb:2b:86:f7:dc:c9:5b:34:28:78:d6:1d:9c:fb:1b:8a:
         93:9b:13:dd:5c:bc:c3:11:c4:b7:32:55:78:1e:5b:e8:71:94:
         5a:d1:0c:3c:2a:fb:40:cd:e3:5c:e5:57:cb:13:54:81:a7:f2:
         fd:cc:be:b4:89:a0:cd:03:93:54:da:26:d8:c7:1b:81:9d:20:
         6e:91:d7:df:0a:d1:82:fa:07:2f:45:47:06:80:57:4c:e2:e6:
         03:0e:2a:c1:e4:a4:cf:ab:21:30:54:c6:66:44:9e:d0:39:58:
         65:20:0b:b8:b0:37:dc:eb:14:f0:e6:1d:f5:8d:2b:0b:94:03:
         b7:f3:ed:2d:54:63:9e:9c:a9:53:7d:65:67:84:7c:b5:e1:f9:
         9d:3c:dc:05:a7:c1:46:0b:32:9c:30:8b:3f:b1:e6:46:64:83:
         52:40:16:b8:77:00:2c:9a:82:fc:bc:25:e9:d2:cc:9a:b7:eb:
         bb:32:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:24 2026 by rpki-client