Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          eFEUVDSevn1YMi0w4apmO8SW4YpbHkXmQiCLuid9tkY=
Subject key identifier:   96:2C:18:FB:B7:67:8E:15:6C:6A:19:6E:49:1B:FE:B8:F9:B5:ED:27
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2137191B139E2EF1E7E739264451135B09F885DB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     7029
IP address blocks:        62.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:19:1b:13:9e:2e:f1:e7:e7:39:26:44:51:13:5b:09:f8:85:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=962C18FBB7678E156C6A196E491BFEB8F9B5ED27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:0c:39:63:51:97:b1:76:fd:49:71:1e:9b:
                    f6:a2:b4:12:b7:f7:99:fa:96:87:74:77:cd:c5:f7:
                    98:77:e5:da:7a:00:12:45:c3:92:d6:2e:21:7f:01:
                    c6:ed:09:85:fc:cf:21:5a:b0:62:a4:4e:a1:9a:45:
                    5a:d5:13:eb:87:08:e5:4c:24:5a:93:92:ed:ef:59:
                    25:98:21:78:f3:1f:a3:c1:2e:57:37:3b:4c:d4:a6:
                    75:16:53:b6:2e:67:47:fb:e2:a8:fc:7d:8e:0f:f4:
                    5f:de:1d:23:16:14:4e:ab:a3:53:69:c4:8a:40:68:
                    96:a6:75:f1:38:88:fc:ae:b4:49:2d:26:5c:6b:84:
                    45:39:2c:ea:40:f2:83:76:f8:7b:a0:0e:18:59:0d:
                    c8:44:f7:58:b9:6b:f9:52:33:bd:1e:51:9e:36:33:
                    50:37:83:de:f9:08:70:31:23:9b:a5:4b:6e:91:26:
                    7c:02:d9:d0:74:c8:06:0a:f4:e1:2b:81:5a:d9:dc:
                    60:3c:d0:21:5d:7b:84:3d:b3:32:82:31:62:bc:a7:
                    7b:2a:55:bf:94:8b:56:8c:74:71:05:fb:e3:25:56:
                    f5:bb:ad:9a:ff:d2:c3:e2:dc:ea:44:af:55:5e:02:
                    27:07:03:73:ff:4c:18:b2:a9:0c:91:c1:f8:77:d4:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:18:FB:B7:67:8E:15:6C:6A:19:6E:49:1B:FE:B8:F9:B5:ED:27
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:a9:ab:a8:a5:11:ac:de:e9:76:72:28:e9:ba:db:30:64:
         42:13:e7:ca:fd:9a:5c:b1:28:f8:48:93:9d:fa:5d:fa:95:79:
         a0:49:32:8d:4b:7c:a4:6e:d4:d8:4e:7c:c1:85:ad:ad:68:bb:
         1f:a0:b1:64:94:f1:6f:2e:6e:95:36:35:be:e7:f1:9f:3a:c8:
         be:cd:07:3e:9a:8b:be:30:65:23:c7:d0:8f:fe:8e:65:d6:c4:
         5f:18:4d:3b:df:c9:a8:aa:15:20:95:15:b9:83:05:7a:88:7e:
         c5:a4:8a:da:b5:ef:d9:a7:e6:bb:81:1d:bb:3e:92:8b:76:99:
         b3:a4:55:63:b4:ba:25:2d:db:25:93:c8:d9:6b:2e:f8:5a:2c:
         90:1b:e1:6b:94:c1:54:b4:7e:10:87:ca:74:50:ba:fe:8a:05:
         f1:5a:ca:ce:5e:50:d7:2b:4c:de:19:ce:2e:dd:21:11:48:1e:
         98:f2:c3:76:bb:6a:2b:18:91:a1:7b:fd:ea:69:3c:60:d4:3e:
         c4:1a:29:d3:50:ba:9f:6e:d4:b0:2b:19:a6:af:07:6f:22:39:
         20:7d:23:7b:40:7d:a5:ac:bd:93:b7:bf:c9:2d:5f:33:a1:e1:
         c3:e3:b1:3e:48:3d:33:fb:71:0d:e5:a4:84:56:ef:62:f2:89:
         d9:4d:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:26 2026 by rpki-client