Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35312e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          x6SpzuNuaNWuIu3Zqf3rpwp6YzVqShn9G6HmYE7xDWM=
Subject key identifier:   E9:F4:8F:55:C8:82:30:D3:47:F9:F8:D5:C8:D8:09:22:D1:9A:CD:2C
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       36B062EA98BC2F123BB08F2653B5BFD186EB8270
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     12083
IP address blocks:        62.144.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b0:62:ea:98:bc:2f:12:3b:b0:8f:26:53:b5:bf:d1:86:eb:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=E9F48F55C88230D347F9F8D5C8D80922D19ACD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:f0:1e:07:5d:3e:8d:8a:af:7d:3a:20:98:
                    cc:d1:a9:ff:5c:3e:76:9c:65:2e:af:74:ba:e8:ec:
                    d6:68:89:b8:e6:e2:d4:e3:b3:94:1a:75:cd:80:ce:
                    28:a8:6a:5c:f5:32:37:13:9a:55:51:a5:62:64:6a:
                    b4:79:6d:48:74:0c:b0:85:04:e4:3b:99:43:45:6d:
                    e1:56:67:93:0c:82:51:27:56:fb:8d:8e:6b:78:29:
                    13:54:14:72:51:95:97:96:84:c9:5e:39:fd:0b:cf:
                    71:1b:20:12:5b:1e:c1:c7:b0:03:94:f9:84:f2:e0:
                    8d:ae:29:f4:49:28:31:c5:30:c5:87:f4:e4:d4:1e:
                    12:63:8b:42:7b:22:e2:e7:8c:fe:13:21:cd:cc:e7:
                    e6:ef:d3:18:08:6f:5b:c4:7e:02:f6:26:5a:3b:c0:
                    7c:45:33:15:23:6e:41:95:01:3f:8f:ee:a6:5c:c1:
                    ec:92:37:03:db:a9:ba:4c:68:4f:e5:ea:e3:a9:db:
                    d6:f6:04:8d:4b:e3:2a:53:66:ec:87:9f:25:49:3c:
                    18:85:f6:8f:5f:37:12:a0:79:c0:b4:29:74:a6:0f:
                    9c:0d:9c:c9:26:41:af:cc:3c:40:ac:03:c3:55:c9:
                    cc:6f:5e:be:61:70:75:8a:4a:b7:f0:38:1d:fc:ea:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F4:8F:55:C8:82:30:D3:47:F9:F8:D5:C8:D8:09:22:D1:9A:CD:2C
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:da:14:7a:33:36:bd:97:14:f7:ef:7a:0e:0f:11:69:bb:fd:
         09:ff:42:93:0d:d0:13:0e:7b:1c:bd:cd:a1:23:b4:1a:46:ef:
         f2:cf:cf:9b:a5:c2:39:05:40:28:49:d2:16:dc:63:5d:a9:11:
         84:d9:ad:b2:2d:25:4b:7e:68:5c:04:a4:3f:c2:10:13:27:e9:
         17:7d:f2:a4:e6:51:ee:40:cd:2f:87:39:8a:c5:ad:2b:3f:54:
         6b:af:eb:c9:84:00:ad:b5:6e:23:82:6c:3c:9c:63:dd:1c:3f:
         2a:25:b0:30:27:18:d1:b1:a9:5a:62:e4:29:21:71:aa:a6:36:
         17:38:af:f9:78:68:65:49:c8:95:b9:14:e5:91:de:3d:94:61:
         55:95:d5:6d:00:5f:42:78:b5:58:ab:bb:9d:8f:ab:89:a8:35:
         6e:57:00:fa:18:06:29:98:2c:6e:81:83:67:b9:94:d5:02:97:
         b2:31:45:03:c4:7d:60:ac:d2:9c:b5:b8:29:60:14:78:01:c5:
         08:b7:2d:b2:c9:63:d6:65:74:41:c2:f4:c0:30:0e:99:d0:80:
         11:dd:af:64:e1:54:31:0c:11:3a:fd:f5:40:6e:cd:da:77:6e:
         56:8a:03:12:d6:1e:4d:fa:95:ff:00:f1:4b:a5:fd:4a:30:7d:
         dc:6b:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:11:29 2026 by rpki-client