Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e35362e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          xJswBzgQoHolXFhWWj+gKFdfj9YLjInZolS5uq3UMGM=
Subject key identifier:   E3:C5:E9:F7:F0:BF:3E:D2:42:D8:0F:30:9B:C6:6C:12:04:F4:0C:3E
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5B83DD9134AC9979DE1BBB0D455687E1BE05E8D8
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     12083
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:dd:91:34:ac:99:79:de:1b:bb:0d:45:56:87:e1:be:05:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=E3C5E9F7F0BF3ED242D80F309BC66C1204F40C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:3c:8e:35:52:e2:e4:1d:d1:a4:3d:5e:3f:
                    7f:3c:1d:9f:fb:b5:ea:85:61:8c:0b:8d:e7:7f:63:
                    eb:22:86:77:20:1e:44:8a:5d:88:be:8d:d7:d9:56:
                    34:a2:4f:a7:87:97:78:08:57:f3:8c:4b:f5:52:b3:
                    d0:72:46:51:cd:0e:5a:55:2e:ed:5f:79:7a:8e:ad:
                    be:e4:f8:12:b9:8b:14:60:9b:d2:a6:a4:c9:32:76:
                    3c:aa:29:82:4e:c3:be:00:d3:ce:04:32:ec:b3:66:
                    8a:b0:8e:b1:dc:3e:7d:ac:66:55:e4:9d:06:e5:7d:
                    87:aa:96:4e:44:6a:b9:86:05:06:13:9e:94:eb:9e:
                    3a:99:3b:98:35:b2:31:f6:ba:57:8c:4c:e2:54:47:
                    f7:90:bc:58:75:ce:ad:fd:67:28:38:80:0c:78:b6:
                    bb:d3:b0:e2:d9:e1:5b:0c:a8:68:70:c8:c9:9d:18:
                    c2:66:bb:c6:af:b5:e9:76:61:ad:e8:26:2f:1b:f1:
                    d7:7e:23:cc:3a:cf:b9:e3:14:fd:84:bb:06:e3:b3:
                    78:f8:af:85:d7:03:7c:a9:1a:de:1c:0f:54:d5:5e:
                    df:98:f9:2a:53:b2:5a:73:37:85:8c:99:a7:a0:0b:
                    29:1c:42:fe:df:1f:7a:11:f3:b7:a4:a2:cf:1a:b1:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:E9:F7:F0:BF:3E:D2:42:D8:0F:30:9B:C6:6C:12:04:F4:0C:3E
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:17:07:be:93:c7:fe:26:fd:ea:32:85:be:44:db:61:a2:
         91:eb:10:80:e6:0e:c1:08:02:be:dc:ce:89:b6:10:c8:e9:d7:
         02:c8:27:5d:45:c9:c4:6d:d4:05:27:ac:a7:c1:92:d3:4a:ae:
         25:76:03:5c:35:4a:4c:a4:b1:ff:91:75:a8:3b:24:1b:9d:99:
         be:f3:c5:ce:fd:90:70:83:0a:7d:e3:d3:a4:c8:ee:b5:00:1c:
         30:60:91:ad:bb:75:d1:18:1e:dd:dd:1d:31:9b:aa:52:5c:2a:
         fb:7c:bc:0c:46:4e:f2:e5:c2:7c:c5:6b:bb:85:2e:45:0e:3e:
         88:b8:f2:55:dd:cd:0e:19:d4:49:52:af:b8:01:7d:a5:d4:0f:
         d3:16:a8:54:4a:b9:b3:d2:98:2d:12:83:be:d5:40:ed:15:c4:
         40:0c:5e:2c:7d:e7:31:af:8f:30:0d:74:5a:1d:a1:ef:56:42:
         40:e5:f9:98:2e:a3:06:cd:fc:bb:95:88:68:f8:58:95:fb:23:
         54:ba:4a:a8:c8:fb:ad:e2:38:2d:56:6c:db:12:7e:1b:19:3e:
         ee:f8:5b:4b:ea:00:c3:44:a7:7c:14:65:56:ab:9b:da:58:83:
         95:cb:c2:2d:84:ab:d0:13:3a:50:17:45:13:16:72:b6:fd:f2:
         d3:84:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:11:40 2026 by rpki-client