Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          Q3X6oWvo1wkxC/+DqVKrtXxaEjnrht9YBDIn4UCMKa8=
Subject key identifier:   B8:E8:82:43:E9:26:D9:E8:D2:9D:7B:8D:FF:A3:60:EE:A3:FE:10:D3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       325484415E1ECF4DA193B8D2080611259CDC759C
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     7029
IP address blocks:        62.144.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:54:84:41:5e:1e:cf:4d:a1:93:b8:d2:08:06:11:25:9c:dc:75:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=B8E88243E926D9E8D29D7B8DFFA360EEA3FE10D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b0:a3:35:c4:a2:aa:d0:7c:51:99:f0:56:72:
                    0a:70:ed:40:12:9d:fb:69:f1:8a:c4:27:d4:73:ae:
                    82:3d:7c:4e:ba:1d:bf:fe:64:66:e4:82:1f:5a:90:
                    18:92:20:f1:3b:2b:49:f9:e1:aa:17:b5:ce:be:0f:
                    d6:9d:58:ce:27:f9:c0:26:d7:2a:3f:67:ee:51:24:
                    0e:10:8d:4c:e8:4e:61:0e:f9:e5:62:d4:b5:7c:e5:
                    97:10:b9:87:85:59:3c:42:5b:4e:74:ac:81:05:b4:
                    75:a4:02:63:c1:11:fa:22:9a:8a:53:9e:c2:69:57:
                    14:86:25:82:dd:aa:3c:b1:fe:b0:4c:b8:e1:67:1d:
                    7a:47:cc:15:61:58:9b:f8:8e:fe:17:c2:38:5f:5c:
                    c2:19:c9:bf:46:18:b9:9a:07:9d:3f:86:83:22:23:
                    3d:9b:18:03:c0:15:64:12:ae:1e:cf:16:da:99:ff:
                    d7:0b:a6:26:7d:85:55:56:71:48:3b:8e:58:9c:74:
                    c2:62:7a:24:d3:a0:02:5d:69:c7:4e:9d:de:13:0e:
                    95:01:92:ff:3d:2d:60:b8:fc:b8:58:ca:3d:63:7b:
                    e3:b7:37:db:c9:76:b1:77:c6:7f:c6:4e:8d:d7:9c:
                    36:4e:a8:0d:08:51:d3:60:39:3a:53:c3:26:dc:93:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:82:43:E9:26:D9:E8:D2:9D:7B:8D:FF:A3:60:EE:A3:FE:10:D3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:f8:f9:45:5f:e6:82:5a:f6:88:4d:6f:19:9e:48:b4:1a:
         73:20:9a:a8:a3:cd:49:fa:6e:ef:ac:94:f2:0b:58:77:69:8a:
         9b:0a:fd:6f:3e:06:a2:65:ee:21:57:18:19:35:e4:d0:44:b9:
         68:60:96:bc:7e:23:c9:64:78:4d:c5:c4:42:a9:15:14:75:c8:
         5c:ac:23:b4:74:92:fd:83:d0:17:01:08:58:b9:ff:78:18:66:
         64:99:f8:7c:f3:70:4b:df:9f:3c:1c:76:46:0e:7b:c8:2f:59:
         5b:47:2a:69:b4:01:b1:05:6e:dc:65:d9:ee:59:c3:f2:ab:8a:
         74:bf:38:87:cd:ae:76:2c:81:50:be:b2:06:cb:36:a4:f8:85:
         44:81:da:d6:1c:e6:0e:14:25:75:fc:65:91:c1:31:bb:72:9b:
         43:93:ab:a6:b8:b0:d3:4a:e8:0c:33:b9:6d:73:4a:90:23:14:
         d0:e9:49:40:c6:e0:86:b5:8f:c5:1d:a5:08:b3:b8:73:1d:d0:
         93:52:25:03:e3:01:f3:f2:56:55:31:ae:3d:20:50:b3:53:2c:
         18:ad:08:75:cd:8c:43:d6:94:e9:34:e1:95:24:27:e9:a4:21:
         ee:e5:cd:70:c1:50:18:36:e4:1d:6e:7b:fa:19:0a:1a:dc:3e:
         c8:e0:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:18 2026 by rpki-client