Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35342e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          eIChuRBUxSipjTajDAoXIF7QbB1h6tXsGu/RhP4NNvw=
Subject key identifier:   FB:1E:6A:98:93:89:F9:EE:42:AE:E0:30:8A:94:7C:F2:E0:EE:0D:56
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0FB36B23B87CDFC437CF3DC8FDE5BA2F767B520A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:48 +0000
ROA not before:           Wed 25 Feb 2026 12:35:48 +0000
ROA not after:            Wed 24 Feb 2027 12:40:48 +0000
asID:                     7029
IP address blocks:        62.144.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b3:6b:23:b8:7c:df:c4:37:cf:3d:c8:fd:e5:ba:2f:76:7b:52:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:48 2026 GMT
            Not After : Feb 24 12:40:48 2027 GMT
        Subject: CN=FB1E6A989389F9EE42AEE0308A947CF2E0EE0D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:51:3f:cc:9c:18:c0:e9:70:3e:54:0e:26:
                    39:ac:fb:73:03:6b:bc:85:9b:02:61:eb:92:23:3d:
                    46:0c:13:95:cc:a3:4d:5f:38:18:35:e6:c9:ca:d6:
                    58:a9:f5:42:43:e5:fa:fb:37:74:50:ed:b7:8f:8d:
                    a9:04:ad:d3:2e:7e:47:2f:62:f1:58:94:6c:94:23:
                    f7:ea:96:3f:ae:ff:4e:c6:3e:08:8a:e2:91:e3:a6:
                    04:86:46:01:08:ff:49:ca:d2:04:b8:10:d0:1a:3f:
                    77:8e:1b:82:66:3a:74:20:23:72:58:bf:2e:6a:ed:
                    c4:72:e8:50:8f:f3:21:6e:4c:8a:88:42:7a:ee:de:
                    30:2b:c2:3a:c0:f1:1d:55:e1:0e:5d:6d:49:b2:ef:
                    28:a2:ac:db:3e:e8:db:d4:1d:14:6a:ed:ad:97:69:
                    79:77:4e:ae:e6:19:04:af:7c:84:ef:f2:d2:49:8c:
                    10:18:b8:ac:1a:69:fd:b7:00:e7:c8:5a:df:e4:d7:
                    b9:4b:2a:96:ca:62:d7:69:28:65:15:4e:12:32:85:
                    34:5d:a9:86:57:b4:21:cd:1f:4b:9e:cd:0d:dc:60:
                    c3:7b:00:80:64:48:cd:a5:32:fd:05:46:51:b9:58:
                    19:25:b1:5b:40:f5:e8:a2:07:b0:da:4b:c0:ce:b0:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1E:6A:98:93:89:F9:EE:42:AE:E0:30:8A:94:7C:F2:E0:EE:0D:56
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35342e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:33:d1:42:5f:e3:ce:c0:7a:e5:3a:4d:12:dc:8e:09:e7:
         64:1d:4f:09:e0:71:80:84:99:0b:67:e1:c8:d4:53:4a:ec:d6:
         75:3e:95:9e:a4:71:ed:fd:ee:62:d1:21:7f:e2:99:ae:fd:79:
         f3:a8:f3:29:dd:72:dc:4e:f1:1d:81:19:6a:90:cb:08:df:56:
         ec:e5:73:11:ea:79:a1:13:e0:56:0e:d1:3b:95:dd:e2:e2:8f:
         73:7e:4e:fc:b9:02:f0:b5:39:e8:50:64:5f:73:3a:69:20:0e:
         6a:57:75:07:b3:df:22:fa:f3:68:34:72:e7:70:d8:f9:a6:4b:
         4c:18:4c:9c:f3:e1:56:43:9f:bd:e5:39:ad:27:64:c7:22:8f:
         34:f9:db:95:ba:6c:c2:1c:4c:3c:e0:37:81:0d:3a:b9:3e:52:
         fc:e8:7d:df:70:55:e3:f8:f2:44:aa:e1:4b:32:5f:b1:3c:ca:
         03:9d:0a:62:e6:63:03:a0:6a:76:57:7b:b9:b6:45:45:7b:b1:
         a0:d0:97:92:e6:a7:ba:1c:39:2f:64:08:7f:85:73:e3:0e:c5:
         10:51:2a:d1:56:f9:6c:85:86:92:ff:fb:81:ac:0c:15:7a:36:
         8c:25:b0:76:ea:c4:9b:b9:63:fa:f3:45:f6:c5:6b:e5:5c:21:
         94:a0:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:48 2026 by rpki-client