Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35362e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          7D0hRdJcfIxB5eUITPHnPr/dQiZlITZSmYRefbsP7YA=
Subject key identifier:   DB:C4:02:50:5F:A2:18:28:95:DC:9D:0E:25:DE:B4:08:97:79:3F:AF
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3BCFD6328B8CF5D1FE7FA1B4876A331E4C663F60
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     13347
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cf:d6:32:8b:8c:f5:d1:fe:7f:a1:b4:87:6a:33:1e:4c:66:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=DBC402505FA2182895DC9D0E25DEB40897793FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:76:33:b7:6a:9b:ef:c8:da:a3:01:40:c2:
                    5c:23:3f:79:01:04:b5:9e:7e:67:5a:d3:45:5e:23:
                    60:3b:7d:e0:f2:b6:3f:73:90:94:22:43:33:ab:8d:
                    d9:6e:c3:25:97:58:fc:8a:04:f7:67:dc:bc:c9:5e:
                    56:2d:c0:8f:01:83:1b:b1:c6:d1:6b:a7:00:dc:60:
                    7b:34:7a:86:e2:ec:26:26:e6:a2:4f:d2:1d:97:57:
                    53:9b:58:87:27:e9:5f:f4:86:17:19:12:7d:c8:41:
                    2e:c3:08:06:7b:e2:75:23:3c:1d:20:6a:14:d6:83:
                    93:21:9d:fd:57:26:93:68:66:ce:51:b2:48:fe:99:
                    a2:3e:57:4f:22:8c:98:8a:c9:e6:9d:07:ac:f0:e6:
                    ed:05:d2:70:5c:02:7f:8f:9c:f9:80:4b:78:44:46:
                    b3:25:c2:81:f5:61:78:06:a6:02:e2:51:8f:8c:1b:
                    8c:f2:a2:df:57:55:04:9d:b6:17:e6:90:97:04:a5:
                    46:d7:9d:92:81:3f:9f:2a:9e:3c:c6:cd:c0:b6:a0:
                    91:2f:e2:1c:f0:75:f4:45:9e:d9:7c:d7:ac:15:ce:
                    a3:41:e2:0a:33:ee:44:e9:3a:ca:2c:22:eb:cd:25:
                    0f:ed:1a:e6:fb:07:b1:6c:82:da:f3:32:39:db:33:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:02:50:5F:A2:18:28:95:DC:9D:0E:25:DE:B4:08:97:79:3F:AF
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:43:bf:81:97:1f:65:eb:a6:92:fb:ef:48:c6:a8:09:c4:31:
         6b:ff:c6:d3:db:df:a0:e4:5c:f2:b6:30:a8:72:12:c2:e2:95:
         8d:66:ec:16:d6:9f:12:8d:2c:df:50:2f:c9:22:1e:b2:a4:5c:
         7b:c9:85:0f:7d:76:73:0d:0b:38:67:fe:dd:3e:34:6f:f5:cf:
         d4:1d:8d:96:51:1a:dc:a9:61:50:8f:98:61:61:65:ab:77:18:
         cb:4e:d1:cf:d9:7d:ce:63:d1:f3:8b:98:03:c2:2c:c5:a5:1e:
         27:41:9b:f1:c8:9a:f9:35:f5:a6:00:9b:88:a8:14:28:db:52:
         0f:ff:3c:09:e5:ea:5b:98:75:d9:9d:16:85:38:7c:6a:ba:83:
         5d:a4:2d:64:59:39:27:73:80:f1:de:ec:bd:81:b3:9e:8d:8b:
         8f:86:e7:b2:b0:83:50:79:70:52:98:04:41:4f:34:bf:9c:d0:
         eb:04:85:2f:6c:4c:f9:1a:47:10:09:c9:db:1a:b6:97:7f:a3:
         e6:b4:19:73:a2:e0:e3:3f:4c:be:f1:70:93:14:11:9a:d8:7a:
         80:f1:78:a9:f1:fb:a7:ff:7e:1d:8d:90:98:7e:2c:4f:66:4d:
         60:3b:81:16:3a:eb:5e:51:45:74:e8:5e:41:d2:4e:42:a0:d4:
         87:94:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:06 2026 by rpki-client