Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          PPG1YS/2jp8W4xhzCISmawFwv4KblqIVhXYri223+Ds=
Subject key identifier:   59:36:EF:55:26:FF:4F:3F:2A:3A:D5:55:6D:5A:5B:CD:CB:70:C7:0F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2F0FD7B9269C1E501E56F181CCBF873F61126597
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     5650
IP address blocks:        62.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:d7:b9:26:9c:1e:50:1e:56:f1:81:cc:bf:87:3f:61:12:65:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=5936EF5526FF4F3F2A3AD5556D5A5BCDCB70C70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:31:c8:33:87:d2:be:9f:90:1d:28:1c:4e:
                    06:e6:ed:96:d4:75:3a:5a:65:33:a6:1f:dc:02:91:
                    45:c1:30:63:59:d5:32:5d:42:3e:c0:94:df:88:72:
                    5b:de:ea:2d:2a:16:ea:f7:f0:f9:08:f3:1d:50:5f:
                    66:fa:9b:ba:b0:46:64:ed:14:b2:d7:43:3b:bc:c2:
                    13:01:dc:7f:21:00:d1:39:71:50:3c:ce:cf:ff:c4:
                    b9:f0:20:34:04:82:a4:82:bd:14:25:c5:64:e3:84:
                    61:b2:bf:3a:fd:71:f6:48:b0:15:42:49:c4:85:96:
                    d7:38:91:2e:9b:5b:56:16:bd:99:14:22:a8:2f:29:
                    f6:2c:93:56:b7:97:c3:b6:b4:89:91:5a:38:92:6a:
                    d5:73:78:4f:5b:18:3b:e4:84:2b:fa:4b:93:d0:68:
                    6c:4e:3e:1b:a3:e0:9b:ff:7a:21:d2:36:3f:cb:64:
                    b3:3c:7a:5a:1b:62:27:fa:8b:73:f4:b9:5c:44:0a:
                    b7:b4:6e:25:83:12:df:41:bc:61:38:91:70:20:d7:
                    cf:71:1d:5d:49:9e:b7:04:30:e6:b8:1e:de:40:25:
                    ca:fc:3f:62:b9:90:d0:1d:ab:44:72:a1:83:be:80:
                    b4:7c:72:f7:a0:73:e2:02:94:e7:0d:72:b0:37:9f:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:EF:55:26:FF:4F:3F:2A:3A:D5:55:6D:5A:5B:CD:CB:70:C7:0F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:18:77:e7:ac:77:f1:18:18:b3:dc:5e:57:d1:04:a4:dd:
         0f:25:ab:03:46:d8:65:3b:ff:c3:77:a8:70:29:4b:cf:2b:f0:
         d9:81:03:c5:d6:ac:c7:97:29:c8:6b:a8:65:1f:e3:80:8a:09:
         0e:d6:67:77:94:a2:29:d3:e4:62:6a:c6:9c:47:ab:37:1a:bb:
         84:c2:d7:f5:aa:72:53:2a:0b:8c:5f:56:3b:ad:f2:f9:eb:9d:
         88:3d:69:78:b7:84:0d:3d:54:2a:79:95:3c:f8:40:f9:08:96:
         4c:1f:e5:9b:df:ce:1e:86:68:4a:12:d0:db:29:2b:1a:41:37:
         32:ae:b4:60:74:7b:34:4d:a4:7a:2a:fa:2c:46:e8:5b:9e:ca:
         d4:9b:e1:d7:0b:94:20:c6:23:72:b2:d3:83:1e:3e:85:55:9d:
         da:a7:e3:14:c9:06:e6:f6:1a:46:c1:8d:01:d7:15:75:d2:92:
         0e:33:96:5e:ff:8f:b4:13:b0:ad:25:3f:6a:2c:7b:3c:5b:51:
         90:5b:29:23:a5:fc:e3:e0:3d:a3:48:a0:6d:69:c5:09:32:6e:
         d4:63:7e:f9:36:92:04:0f:9c:bd:47:05:93:57:44:77:76:07:
         d9:73:59:a7:87:1e:2c:dd:fc:e1:77:c3:9b:11:92:e7:88:79:
         54:6e:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:11 2026 by rpki-client