Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          49+WmCJDsoZKmWRUqOHuzL5x4FJxuNn7OADolRLm7ZI=
Subject key identifier:   42:90:A8:73:9D:A5:7D:F8:A1:34:16:4D:5B:C2:6A:58:99:91:F1:3B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0108BC266128F63BB06D6120F3B7C388976D0BAB
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:48 +0000
ROA not before:           Wed 25 Feb 2026 12:35:48 +0000
ROA not after:            Wed 24 Feb 2027 12:40:48 +0000
asID:                     7029
IP address blocks:        62.144.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:bc:26:61:28:f6:3b:b0:6d:61:20:f3:b7:c3:88:97:6d:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:48 2026 GMT
            Not After : Feb 24 12:40:48 2027 GMT
        Subject: CN=4290A8739DA57DF8A134164D5BC26A589991F13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:40:f4:d0:a2:43:a0:29:fb:b6:d7:57:67:
                    8a:ca:f4:4a:ab:c3:28:25:b8:2c:59:b2:67:c3:14:
                    32:6a:8c:60:6f:3e:3a:84:94:eb:42:db:c7:dd:66:
                    c2:68:b9:ac:7c:de:bb:23:5b:b1:af:33:cb:f0:27:
                    7e:af:a3:6e:28:0e:e6:9b:70:a5:58:1c:41:e3:1b:
                    5c:61:e4:59:3a:70:74:82:6a:16:30:5c:03:83:84:
                    ea:a0:60:10:5e:d2:c4:79:f1:3b:f1:4a:a0:7a:18:
                    cd:5b:75:1a:96:4e:5d:d7:6e:91:f0:67:82:4b:4e:
                    16:0d:24:f6:6a:2e:20:9b:09:30:dc:9b:e2:f1:8c:
                    5e:25:3c:ec:23:a9:26:78:9c:86:e4:92:06:7f:03:
                    52:11:19:9e:75:f4:d0:cc:df:80:10:da:e7:f1:d6:
                    44:15:d7:4a:33:34:76:83:e8:da:6f:cd:38:14:15:
                    67:8c:6a:b2:28:2e:3d:6f:e0:04:47:23:d1:3c:5b:
                    2a:ab:c0:db:dc:b3:83:16:fd:f5:1b:e9:8a:25:30:
                    9d:59:87:6a:45:b1:04:52:3a:9e:8a:5d:55:85:c6:
                    ec:29:dc:dc:dc:7c:20:6e:05:7e:05:54:ca:07:59:
                    d6:d3:08:18:cc:64:f7:c9:5d:e9:36:88:b7:c6:75:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:A8:73:9D:A5:7D:F8:A1:34:16:4D:5B:C2:6A:58:99:91:F1:3B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:bf:51:20:b0:98:db:cf:81:36:6a:b1:50:b3:f5:17:0b:
         c0:0c:cd:a1:b4:fb:84:fa:32:dc:07:41:50:04:a4:c8:d6:ee:
         e7:b3:fc:1c:9b:d7:f9:e3:13:6f:02:00:b6:eb:c0:8a:23:39:
         f7:84:df:3f:a7:8d:af:f2:1b:51:9a:e7:4b:c0:b1:71:a2:4c:
         b9:84:f3:54:26:3f:53:01:5a:9f:e5:66:a2:65:a3:06:fc:9b:
         bb:13:e4:02:76:30:18:38:60:2c:d6:fe:ed:9b:79:97:73:cc:
         ca:e2:48:b9:0f:1e:58:42:15:c2:29:c2:ec:20:2c:5d:08:1b:
         9f:04:ba:a5:d9:be:a8:e6:47:93:91:db:dc:75:47:17:12:49:
         46:68:23:1b:6c:e0:a9:2c:c6:6f:8f:a0:c0:a0:be:e1:ed:05:
         e8:0f:37:e5:e5:86:a6:10:29:7c:60:49:7b:19:ee:1d:1e:81:
         f9:a1:14:04:21:a7:db:90:8f:d5:58:18:94:a0:e2:b5:78:0f:
         ea:3e:98:87:60:6d:08:9c:85:fb:47:9b:77:15:ec:65:8d:67:
         74:07:f5:83:3c:3e:bb:fc:88:21:1d:10:15:6d:95:6a:c0:f4:
         31:18:fa:da:62:ff:de:04:09:dc:1f:50:c7:be:f7:a2:92:67:
         d6:a3:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:18 2026 by rpki-client