Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          pCXd33Edh7t32mmSolwJTXrjcj8VSshF6FennjZVXQw=
Subject key identifier:   00:3A:05:EE:49:43:28:C8:AD:F3:43:21:C6:8D:8B:81:7F:FD:AE:AF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7CC05D22DB5ABF934FF37ED94528D3CA1B87D892
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     5650
IP address blocks:        62.144.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:5d:22:db:5a:bf:93:4f:f3:7e:d9:45:28:d3:ca:1b:87:d8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=003A05EE494328C8ADF34321C68D8B817FFDAEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:22:9c:59:38:ce:da:6e:a0:3c:15:f6:00:
                    f2:5d:d4:83:38:28:5f:4d:bd:00:08:5e:8c:6c:bc:
                    10:a9:f0:5d:f9:43:f0:88:d5:c6:cc:5c:4c:fc:67:
                    60:09:ce:6a:20:e5:ca:be:bc:9e:6d:da:2a:39:81:
                    ba:74:1a:ba:bf:2c:81:f2:ed:76:90:3d:c6:ea:18:
                    ca:3f:ca:2d:34:10:b0:7f:df:b0:3d:4d:6a:01:56:
                    98:dd:eb:a1:d6:e8:a8:b8:31:a0:38:a8:8a:59:10:
                    7b:db:b4:48:98:44:51:ba:1c:b0:37:fb:fc:b6:09:
                    86:1f:81:3d:f6:c1:ff:df:e5:c1:4b:23:15:2c:4a:
                    7f:0c:dc:b0:bd:ea:c8:ae:69:32:2c:94:39:7e:78:
                    95:a0:d7:cd:ab:f7:7f:14:1e:f4:e0:68:a7:f6:0c:
                    a5:13:1f:09:ed:03:0a:b9:ee:59:42:ff:b5:dc:35:
                    65:fc:1b:db:d7:4d:42:dc:58:a4:14:e4:76:87:57:
                    bb:11:5a:0f:2b:8c:09:ba:51:cd:6d:f8:8e:ad:fe:
                    c1:27:23:71:80:60:f9:5e:ae:29:d1:8e:27:e2:8b:
                    85:32:e0:37:ca:6f:f7:ff:61:21:be:7f:91:48:fb:
                    1b:e4:c4:6a:e1:ef:b4:f2:c3:98:94:a9:73:26:04:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3A:05:EE:49:43:28:C8:AD:F3:43:21:C6:8D:8B:81:7F:FD:AE:AF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35322e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:53:3f:5d:e7:7d:f6:6d:63:ad:b0:2b:f5:3c:a7:2a:9d:1d:
         a1:9b:11:6e:f6:c3:32:28:28:77:af:f6:c5:c0:9d:64:53:6c:
         f0:c5:fc:63:07:31:d5:9a:50:62:18:af:28:81:9e:09:09:00:
         5a:bc:c6:1b:15:b7:6a:70:73:be:78:70:75:be:56:7f:01:76:
         16:43:7d:72:a4:12:f3:c6:92:e5:76:a8:55:b6:79:f8:6d:58:
         e3:a7:74:69:2e:75:3b:36:fd:f1:5a:86:65:4e:8b:9c:aa:01:
         a5:02:1b:61:ef:52:a6:68:ff:9f:b4:d6:93:a6:92:72:d7:1a:
         4f:2b:b6:be:18:06:a1:a6:58:c8:a7:44:0d:7c:7b:fb:d2:05:
         4d:ea:1f:b4:22:d7:5b:5a:66:dd:4e:87:c9:1d:74:05:24:bc:
         26:c6:00:57:8e:e8:12:fd:44:6c:65:44:18:9a:08:4f:bb:4e:
         64:29:f9:8c:07:be:b9:51:1c:6f:2a:cd:fb:b0:6a:62:9c:e7:
         ee:44:79:3e:d1:06:1a:79:cb:4e:58:1b:b9:df:c6:8a:25:12:
         66:80:b9:de:c3:cf:96:96:b9:51:42:72:a3:ef:cd:4a:38:f2:
         0d:39:ec:e3:00:b6:a8:ba:de:50:95:3e:38:35:d8:72:16:ac:
         49:7d:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:31 2026 by rpki-client