Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35322e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          s7KhwN0k5lb5FwbuWWWqWHqS0qdfFY+Wr1BsyHFRsec=
Subject key identifier:   96:5A:B3:50:2B:38:37:A0:EA:EA:6B:4C:A7:C6:64:8E:1B:A0:49:D9
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6EABF24CC816DA95F92D158E3AFED5C3C695611A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     12083
IP address blocks:        62.144.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:f2:4c:c8:16:da:95:f9:2d:15:8e:3a:fe:d5:c3:c6:95:61:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=965AB3502B3837A0EAEA6B4CA7C6648E1BA049D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:9b:16:28:bb:2d:d6:cf:8e:91:a4:d8:94:
                    47:f3:ad:76:32:2e:ef:6f:cc:7d:05:65:14:77:20:
                    8d:2a:a7:58:24:df:99:c5:6c:c4:6f:6f:a9:83:92:
                    a1:c6:2d:b7:76:c4:29:b7:8f:86:a4:aa:af:90:78:
                    ae:de:90:33:c2:2e:e8:7a:66:bb:b5:76:9f:35:9d:
                    1a:1f:22:cc:48:d5:82:64:76:34:17:28:7d:64:4f:
                    df:91:bf:2f:0b:4e:74:66:b2:54:dc:f5:62:e8:01:
                    de:95:fc:18:65:07:a8:ab:09:0d:35:5d:9a:8b:99:
                    61:58:38:b4:80:36:94:ee:6d:f5:c0:8d:be:e2:41:
                    4a:e6:a6:07:2c:58:78:ce:69:24:14:1e:aa:58:4f:
                    79:1a:32:7b:b0:00:71:b6:5b:e7:20:95:65:29:a2:
                    94:c9:35:a7:1c:4d:c5:d7:cd:f0:ad:71:4f:4a:dd:
                    51:a3:65:a8:98:39:e4:3b:b7:37:5f:63:37:31:de:
                    4c:e9:62:ad:2b:9c:77:b7:3f:d1:15:59:31:1e:5f:
                    f5:99:26:af:21:50:df:cf:ec:53:5b:48:43:4a:fd:
                    ad:69:ac:b0:9f:01:9d:f1:5c:a6:be:a8:99:08:35:
                    0d:7f:16:d8:de:60:fb:69:1a:ed:ee:5c:47:b9:17:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:B3:50:2B:38:37:A0:EA:EA:6B:4C:A7:C6:64:8E:1B:A0:49:D9
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:48:3a:53:7a:72:85:4e:50:32:e3:d3:9a:c0:89:f1:40:
         78:9f:08:61:b3:8e:52:1a:59:07:f5:e5:7f:20:ed:7a:8f:df:
         31:58:c7:3b:5f:0d:e8:c6:84:f3:6c:80:d8:52:6a:71:5f:db:
         d7:2a:d6:de:87:c2:2d:f3:70:cc:90:e7:33:6a:57:ea:91:62:
         06:2c:88:77:86:ce:fa:cc:a1:d9:ee:5e:77:65:56:a0:13:7b:
         ea:e6:cd:1b:9c:77:c3:7b:45:83:2c:72:c9:90:db:fb:11:96:
         65:43:52:38:d1:2b:da:18:0b:e9:c3:a7:3c:61:f8:45:b1:80:
         fa:71:0e:6b:bd:ae:8b:b7:77:58:5f:3b:60:04:55:8c:92:d1:
         55:a6:d1:73:e5:63:b2:ad:13:86:1c:4e:17:84:3d:33:87:bc:
         df:67:2d:30:64:31:28:25:3b:ac:5b:6c:ca:60:2c:66:2e:8c:
         95:aa:82:85:cf:a2:09:92:8b:66:d1:45:43:21:1f:1e:cb:ca:
         5d:d7:52:56:e0:83:52:4e:38:62:c3:fe:b2:86:d8:22:d2:96:
         53:dc:3a:9e:6b:42:29:9b:cf:03:58:8f:ac:93:3b:01:d1:96:
         a7:11:7c:cd:69:0c:d4:31:93:ed:06:19:b9:53:a3:43:4e:da:
         bc:ad:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:13:49 2026 by rpki-client