Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          ad+c0baRYU8up12phvQHtKr3IkRcWuLceMTHRAUzWB8=
Subject key identifier:   50:A7:A6:EE:D5:8C:83:73:CB:F8:18:3D:B2:2F:0A:7E:BB:00:E4:85
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       79FDB4F51811AC3C1CE67DCB11D7F43E90EF96B7
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2035363530.roa
Signing time:             Wed 25 Feb 2026 12:40:47 +0000
ROA not before:           Wed 25 Feb 2026 12:35:47 +0000
ROA not after:            Wed 24 Feb 2027 12:40:47 +0000
asID:                     5650
IP address blocks:        62.144.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:b4:f5:18:11:ac:3c:1c:e6:7d:cb:11:d7:f4:3e:90:ef:96:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:47 2026 GMT
            Not After : Feb 24 12:40:47 2027 GMT
        Subject: CN=50A7A6EED58C8373CBF8183DB22F0A7EBB00E485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:7e:7e:e0:d8:ac:5b:6a:54:cc:61:f7:a5:
                    b5:da:9f:f4:b6:b4:11:3e:d8:a8:1c:90:ce:3f:f9:
                    25:de:b3:d2:b0:28:5a:f8:76:13:da:45:da:cc:2c:
                    84:6a:8b:2e:98:3f:ac:50:37:93:dd:fe:2f:4f:1c:
                    54:88:00:d7:31:2d:0e:22:74:b2:ac:54:08:98:da:
                    e9:5e:7a:a6:25:57:b0:34:52:1a:ed:49:a8:7c:16:
                    bc:c8:ce:e2:1d:17:bb:5f:39:f8:84:5d:2a:67:d3:
                    7d:71:96:bb:88:6d:67:8a:87:93:b4:ac:5f:93:99:
                    ff:16:7d:96:0b:56:7c:2d:91:dc:10:95:33:c4:1e:
                    c1:b4:17:3f:3b:6e:06:58:9a:71:ca:7f:5f:cb:31:
                    9e:d8:4f:6c:47:08:80:3b:1c:bc:9c:03:3d:d6:d5:
                    ec:db:37:44:d5:5a:8d:ad:c4:a7:66:f6:de:32:f1:
                    36:df:9d:42:90:b0:a5:82:ff:a6:b2:ac:97:47:ef:
                    84:7e:f7:92:32:7d:f4:c5:4d:da:f3:0d:d3:5e:03:
                    03:3c:f3:3f:1d:54:bc:31:18:98:87:c7:df:38:e2:
                    ed:9d:3a:f6:41:ad:ec:27:04:f9:a7:2c:61:8f:3b:
                    95:f9:cf:49:ee:b7:11:2d:39:3b:5a:c7:9a:54:38:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:A6:EE:D5:8C:83:73:CB:F8:18:3D:B2:2F:0A:7E:BB:00:E4:85
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:a9:bc:f8:f7:f4:98:8e:db:46:7f:ab:aa:1c:5c:e5:1e:
         38:90:a0:17:04:b5:7d:a2:e9:bf:9b:dc:0a:77:43:a7:ad:88:
         43:f8:59:04:92:c1:27:64:89:72:e0:03:e6:d4:d0:80:c7:01:
         14:aa:e0:3b:14:44:d4:67:db:ca:34:7a:b2:23:74:8e:df:f4:
         cb:dc:bd:cf:bc:47:85:38:13:86:bb:93:38:1b:42:e5:b9:71:
         0b:d8:b5:f5:79:ed:c1:54:d7:61:fc:81:d2:69:91:f5:53:1b:
         c7:20:82:f2:0a:8b:b7:2a:dc:e3:1e:0a:b2:04:0b:fc:df:90:
         43:a5:d5:57:65:46:9b:c5:93:cf:71:1f:12:53:d8:35:05:6e:
         86:9f:44:f4:98:67:df:4a:62:5d:5c:fb:7b:ad:e7:83:89:40:
         95:7c:7b:da:95:85:48:fb:c9:c1:78:23:54:af:a3:04:8a:70:
         e5:93:74:c2:75:25:24:10:64:24:bf:b2:75:88:b6:95:ba:8f:
         61:15:19:5b:df:aa:5f:32:80:72:06:ee:b2:3e:91:b2:80:3a:
         b5:ac:6f:64:5c:fe:69:b9:6e:e7:2b:eb:ec:20:f3:54:8f:b8:
         a2:fb:5f:68:f9:1b:8c:8b:c5:97:4b:08:36:08:fb:d6:02:0b:
         9f:03:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:52 2026 by rpki-client