Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e34392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          lB1/nxACwKktMYXpXnGOZJ/3dkoQ9Tihcu+cG/f2jm4=
Subject key identifier:   C3:39:12:D0:C5:18:97:4C:47:04:0A:3C:5B:03:12:4D:E1:21:0E:D8
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       246BD2787001FB806EF097F980CB161F4A41AD80
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     7029
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6b:d2:78:70:01:fb:80:6e:f0:97:f9:80:cb:16:1f:4a:41:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=C33912D0C518974C47040A3C5B03124DE1210ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:fa:54:55:54:e7:19:a0:14:6a:0c:a7:1e:
                    1b:1a:64:4f:0a:b0:93:43:82:9d:a7:e6:9e:eb:c8:
                    fa:d3:fd:fb:c5:7a:a4:42:a6:df:a6:f0:3e:24:04:
                    e8:dd:0b:0d:ef:21:e4:32:f3:dd:42:b4:a2:07:31:
                    ca:d4:88:8a:c6:36:b1:9a:9d:65:5d:26:0a:64:79:
                    20:e2:31:89:ef:39:39:d1:52:5a:da:2d:3e:bc:9a:
                    68:ca:01:e9:bb:c4:ea:36:58:27:4f:9c:a7:1b:77:
                    10:04:84:b4:42:cd:b8:f3:53:f6:04:6d:b5:fa:51:
                    9d:cd:c3:4d:ce:be:0c:cb:ac:ba:ba:ce:43:b9:3d:
                    cb:a6:25:5a:b4:02:0d:bb:18:11:0f:8b:3e:b4:e0:
                    b1:43:03:01:67:53:12:51:81:e4:bf:d7:56:6c:4d:
                    a3:f0:43:01:f5:67:7c:eb:be:c4:53:de:38:b8:76:
                    5f:88:39:cd:46:7c:ca:bc:51:d5:41:ca:5b:15:e9:
                    92:c9:3b:09:01:3b:d4:50:0e:c0:75:bb:eb:2f:53:
                    0d:9f:8d:7f:ee:e9:0b:08:e3:d8:f4:36:eb:90:5d:
                    87:75:4f:94:c8:3f:05:ea:cc:db:ed:de:ec:77:b8:
                    43:5f:ca:6c:cc:47:ca:3c:6c:2d:d8:49:b3:59:45:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:12:D0:C5:18:97:4C:47:04:0A:3C:5B:03:12:4D:E1:21:0E:D8
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:1c:a1:1e:db:98:b9:14:68:0c:28:97:bd:c2:75:90:20:
         da:d3:dc:01:85:05:68:b0:0b:5e:63:8b:2a:d0:dc:f6:b4:5d:
         9b:48:d5:dd:41:1a:6f:35:6c:8f:66:56:01:bb:be:84:ff:34:
         59:e6:93:e0:45:78:2f:53:1e:df:d3:57:de:ea:a7:e5:fe:04:
         19:06:ec:89:a0:68:d8:91:f5:39:20:15:e3:bf:65:e6:c6:d9:
         d0:d8:3f:83:a1:97:6b:77:41:31:52:f6:5d:c8:bc:f8:52:76:
         f3:25:db:7a:18:1f:98:e9:2b:cc:15:40:68:59:ae:56:51:c3:
         09:03:27:a1:b1:c8:b0:52:9d:97:1c:91:5a:90:c2:58:ec:73:
         11:fb:8f:99:22:bc:e3:9c:c8:1c:05:1e:d2:61:85:4c:40:e9:
         73:56:03:1e:8e:e7:70:18:2a:33:ea:9f:49:51:95:5a:e2:ec:
         c7:3d:a9:9b:fc:30:cf:6a:c5:3d:97:c1:bc:8a:ef:7e:20:73:
         9e:1f:87:44:dd:df:46:29:e7:e9:09:b6:ab:2f:70:6e:61:30:
         89:8b:1f:0c:1f:5b:35:91:99:a4:52:ff:8d:72:80:e8:21:d0:
         77:79:42:79:63:27:04:ab:73:38:f1:65:2d:ac:34:bb:26:1b:
         6c:c8:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:07 2026 by rpki-client