Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35342e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          2dC68tNm1BLwuPIgDzUPI9+PijoiY0I/4p686Bq+kRE=
Subject key identifier:   70:62:24:B4:24:57:9D:12:3C:0A:A5:06:C1:A8:2C:C0:01:38:D6:09
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       292FE83B2568F456D7266E0C39100B227CE3E1EF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     12083
IP address blocks:        62.144.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:e8:3b:25:68:f4:56:d7:26:6e:0c:39:10:0b:22:7c:e3:e1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=706224B424579D123C0AA506C1A82CC00138D609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:5b:86:2f:7a:ea:de:c4:0e:2b:af:da:88:
                    9f:ff:7b:12:7e:f4:d3:5f:c0:b0:bf:cf:f8:fb:7e:
                    f9:b2:85:9d:5f:31:51:b8:ed:df:53:0e:09:e0:e6:
                    6c:e3:6d:33:03:4c:c5:95:4b:5f:ca:7e:ab:a5:f8:
                    4b:90:bc:f0:de:06:3a:e7:c3:8b:7d:ce:f9:c1:80:
                    11:73:72:cd:a6:98:b2:16:82:2f:e6:eb:a1:33:d7:
                    7c:2b:7a:bc:26:00:09:12:70:1d:80:2f:52:0b:7e:
                    b4:d5:e3:d8:a2:7b:42:a4:10:08:f9:21:5b:c5:9d:
                    a7:70:53:a2:12:ff:93:40:df:ff:04:43:ea:54:9e:
                    91:4d:bb:d2:b0:1a:42:67:16:e6:d5:37:09:82:b9:
                    a3:04:de:23:cf:50:fc:2b:c0:19:ab:f5:34:1a:20:
                    08:dd:d0:9d:8e:22:23:63:2a:3d:35:f9:97:d9:64:
                    59:7b:c8:46:ee:42:c2:b5:45:6c:f1:32:af:dc:57:
                    97:6f:b8:8e:e1:41:c8:61:e2:b6:05:fd:8d:10:82:
                    5a:58:b9:a7:52:44:9e:e8:c3:a2:30:ae:49:12:bc:
                    40:fd:dd:44:49:64:8f:d9:9e:91:0f:3c:26:eb:db:
                    2c:68:41:d4:7d:c0:a0:f8:fd:57:d0:07:a1:5f:61:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:62:24:B4:24:57:9D:12:3C:0A:A5:06:C1:A8:2C:C0:01:38:D6:09
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:77:db:ee:82:e9:ae:d1:04:20:f6:f5:3f:7a:5d:79:cb:af:
         44:c4:cb:45:f6:08:37:d0:6c:ba:88:da:79:b8:61:c2:a3:a7:
         65:02:49:33:c9:fb:c4:60:66:c0:e9:b8:d6:63:c9:8f:06:ac:
         87:57:c5:47:5d:d3:f2:a4:c5:55:e9:13:7a:b5:54:f5:ba:56:
         0b:34:03:29:41:0a:89:64:26:52:60:c7:ae:74:ff:92:e5:ca:
         fb:0a:e9:25:50:3b:3a:17:5c:9f:6d:2d:df:ba:4a:1a:32:c6:
         b0:e8:e7:3b:7c:6c:ab:a3:32:b3:7a:a9:26:9b:14:a0:66:cc:
         c0:31:8b:d3:b8:53:9f:74:d5:05:83:8c:83:6e:c9:f2:78:61:
         a9:9c:a7:4a:b4:38:4f:fa:45:d6:77:84:65:85:dd:4a:c4:96:
         45:a9:cd:1f:99:99:42:25:d9:61:96:d6:e0:d2:a7:fe:40:31:
         cd:2a:bb:35:5f:a2:b6:1f:e1:48:d0:f0:70:68:1e:92:7e:9b:
         53:91:97:c7:c1:1c:28:0a:dd:de:42:83:09:38:47:d7:db:9a:
         66:41:5a:5f:7b:2a:99:cd:ca:a9:ad:60:ce:bc:17:08:8f:3b:
         4b:df:de:35:4d:84:39:9b:70:84:55:57:5b:e3:ca:5c:09:06:
         15:b0:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:11 2026 by rpki-client