Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          QKHfhKwYaFXjPDybCKv9mZW4+Q+PV6HXxOvzd2N2B58=
Subject key identifier:   A0:5A:98:84:9B:61:45:F9:B0:FF:EC:1D:99:DA:57:CB:A2:97:AD:B4
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5DE2FCBE6DF47DD194563903A294ACC1EEB19F13
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     5650
IP address blocks:        62.144.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:fc:be:6d:f4:7d:d1:94:56:39:03:a2:94:ac:c1:ee:b1:9f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=A05A98849B6145F9B0FFEC1D99DA57CBA297ADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:c6:37:79:b0:56:6d:55:4b:ef:3b:c4:87:
                    17:51:24:74:3e:18:71:a0:3c:ea:32:e6:50:26:e3:
                    58:b5:f8:0b:83:6b:be:67:2a:85:cf:d8:66:a6:39:
                    01:0a:54:17:4f:62:08:e0:14:03:94:15:05:a2:8c:
                    fc:91:d2:49:85:86:2f:0d:64:2b:4c:71:f4:37:a7:
                    24:ec:e0:ea:00:a2:5f:04:06:d4:c1:6e:a0:2e:2e:
                    5c:fb:9f:5a:d5:1a:88:40:48:21:50:e1:ed:82:82:
                    fd:7b:8f:e6:3e:a1:00:ad:be:03:9e:08:85:a1:a3:
                    b8:c0:6c:0d:b6:38:76:01:88:88:1d:05:29:45:0f:
                    4a:68:a7:37:a3:53:9d:e0:f0:35:da:60:30:84:38:
                    ca:bd:66:fe:3e:be:28:84:4c:7e:46:4d:e0:2b:e4:
                    24:f4:1c:fd:28:77:27:e8:33:8d:29:6e:6a:d2:6d:
                    e0:e2:44:64:60:d2:11:6e:85:72:ea:e0:52:a3:14:
                    8e:0e:8f:9e:19:63:18:b7:7b:d7:08:27:62:8f:14:
                    24:3b:47:53:81:a6:d2:6b:3c:25:64:5f:7d:e7:13:
                    c3:17:1a:08:75:04:aa:77:15:bd:44:c5:74:08:4f:
                    b0:f6:cd:c5:ae:cc:6f:f9:d6:4e:8c:37:6c:9b:69:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5A:98:84:9B:61:45:F9:B0:FF:EC:1D:99:DA:57:CB:A2:97:AD:B4
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:74:9c:28:17:40:48:00:27:a5:4e:9a:12:10:7b:fb:3f:
         d4:57:89:4b:6f:43:94:5b:06:44:77:ce:44:f6:d6:7d:4f:85:
         a7:52:c8:36:aa:72:c0:d1:9a:7c:00:44:49:13:d4:22:e9:35:
         10:f4:51:6f:43:75:c4:52:25:42:b7:18:b5:cd:62:d9:82:d5:
         7e:8a:93:b3:e2:97:9e:e9:f0:88:f2:75:ca:30:03:9d:8a:b7:
         e2:e0:ad:9b:19:d7:97:3b:20:e3:1c:c4:f2:92:2e:a5:b8:ad:
         20:09:8b:55:86:5f:4f:a9:cb:a7:29:51:c0:ec:a7:03:cd:8a:
         de:4b:6f:2f:19:ac:19:5f:cf:b9:e4:b6:ee:75:2e:87:c3:ad:
         4e:ba:c5:49:57:4b:3f:52:81:0d:d3:68:66:d0:9c:8f:fd:ec:
         a0:66:06:9d:e8:9d:6a:55:37:e3:82:4b:e1:f3:7c:76:0e:8b:
         1a:9c:83:5e:ce:c1:d6:32:e3:c9:5d:29:e4:c9:27:cc:48:3e:
         b9:bf:31:e8:b4:83:20:42:2f:5e:37:2f:e4:9d:fb:58:26:52:
         75:71:b9:ba:5e:f4:57:05:2e:04:99:0d:60:af:69:e6:39:6a:
         84:49:c6:a7:5c:50:9c:3f:f6:25:4e:c1:9e:6e:82:69:5e:76:
         b2:2d:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:28 2026 by rpki-client