Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          LE2rYPW/s7A3aSn231yTTPcLtp5eKGa7zBMZauRl844=
Subject key identifier:   DF:F8:EC:A6:B1:FE:D1:51:7B:23:8D:6A:62:58:05:A7:39:84:0F:94
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       19725C3E22E01A3482C96D77C96566331D64FC5B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2035363530.roa
Signing time:             Wed 25 Feb 2026 12:40:47 +0000
ROA not before:           Wed 25 Feb 2026 12:35:47 +0000
ROA not after:            Wed 24 Feb 2027 12:40:47 +0000
asID:                     5650
IP address blocks:        62.144.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:5c:3e:22:e0:1a:34:82:c9:6d:77:c9:65:66:33:1d:64:fc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:47 2026 GMT
            Not After : Feb 24 12:40:47 2027 GMT
        Subject: CN=DFF8ECA6B1FED1517B238D6A625805A739840F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:15:72:73:ce:e8:e2:7e:56:ba:eb:e7:6b:
                    39:51:04:fc:82:df:89:cc:e9:40:15:39:d1:c8:f9:
                    61:36:40:c1:09:4c:69:0a:fc:0f:f3:1d:fc:10:a8:
                    2b:cc:fc:e4:ef:e6:05:07:3d:c4:b9:ce:04:b9:75:
                    66:71:b4:8e:27:95:d4:82:7c:b7:83:ba:68:69:e8:
                    1d:c5:9c:27:67:9e:d4:79:25:4b:30:2a:14:c0:51:
                    50:67:5a:79:22:0e:28:56:50:9a:5e:b2:f9:74:bf:
                    65:81:18:b0:bc:3d:69:36:13:45:c0:27:b3:80:14:
                    57:cf:69:f4:00:20:2f:b1:67:18:6e:62:de:8b:b1:
                    37:c6:50:fd:c1:d8:a6:52:32:93:60:41:65:f9:1a:
                    2e:3d:f4:67:6b:b2:91:83:43:f1:cf:38:a2:14:83:
                    8c:a4:00:b9:44:f3:e5:6c:fa:c8:07:4c:0d:d3:0b:
                    03:ba:8f:91:58:99:ea:9e:be:e3:75:28:46:e7:69:
                    fd:83:3a:0d:15:3f:a4:45:7b:78:54:2a:eb:fb:0d:
                    e0:f5:f3:0d:87:a8:4d:76:da:bd:34:8a:4c:0e:6c:
                    ce:b1:75:12:ea:31:4d:3d:02:89:d6:cd:f0:5f:70:
                    00:7e:8d:b5:11:8a:a4:cc:58:57:79:41:11:a7:27:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:EC:A6:B1:FE:D1:51:7B:23:8D:6A:62:58:05:A7:39:84:0F:94
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:c1:ee:8f:af:68:7c:34:a4:fb:25:e0:1a:55:4f:d3:7e:
         80:6d:45:d3:52:2a:40:12:4f:86:a1:62:5a:b1:d3:aa:cb:0a:
         f3:6c:af:7a:4a:d7:0a:ba:68:7c:34:ff:aa:33:10:b1:17:0b:
         19:b5:0c:dd:db:56:bb:23:43:65:57:76:9a:04:04:f2:96:34:
         80:91:e5:6a:82:dd:03:4f:dd:24:7c:36:4e:91:42:27:2c:61:
         ff:25:e2:6f:fc:ad:33:a7:cc:ad:af:14:e0:db:b2:c4:a7:f8:
         51:e4:93:5c:b2:86:e4:a2:99:02:d2:f6:2b:17:b1:aa:96:db:
         3a:8c:4c:cc:8a:22:54:e8:29:48:4f:bb:4a:ce:9c:8c:5f:ff:
         e0:29:99:e8:1a:19:c3:c7:c9:d7:7c:8a:41:0a:2e:d5:0f:70:
         32:da:07:b3:f5:d3:d6:89:71:ef:5f:d4:38:e2:4a:67:a1:bd:
         b5:4d:3d:d6:17:40:74:c4:54:d4:19:6c:62:b5:cf:89:94:a0:
         8d:0f:85:aa:a8:0a:1d:9b:15:19:b7:1c:d9:86:34:7a:4c:59:
         29:a9:01:16:f9:5b:b1:58:81:c5:b3:8b:99:b7:90:93:57:0a:
         9c:76:92:7e:c5:36:ee:a7:76:98:7f:07:f4:7c:7d:42:01:9c:
         0b:8a:a8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:17:57 2026 by rpki-client